Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File:                     qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier:          QBiMLnxM0IA7/0ksbJC4MJwX5fQRMZWLIi7O/TBzfTc=
Subject key identifier:   0A:79:D4:C1:96:5F:7B:F3:5F:CD:3F:7B:09:4A:D1:FF:B8:42:B6:63
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer:       /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial:       0193572DCC521ED87AFBEE6DCBB289560BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number:          03A4
Signing time:             Sat 23 Nov 2024 04:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:39 +0000
Files and hashes:         1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: 48WFfp5rhtYgzNpGc4TcSp2iVmiUUL1UJIe/+kJjFsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:cc:52:1e:d8:7a:fb:ee:6d:cb:b2:89:56:0b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
        Validity
            Not Before: Nov 23 04:00:39 2024 GMT
            Not After : Nov 24 04:00:39 2024 GMT
        Subject: CN=0a79d4c1965f7bf35fcd3f7b094ad1ffb842b663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:3a:77:80:77:6f:b4:7e:bf:8d:8f:2d:0f:
                    c4:77:78:9f:31:4a:81:86:ff:06:4c:74:9b:32:7c:
                    9f:cf:a3:2f:35:ca:4c:a7:21:e4:29:9f:fd:8f:e8:
                    5a:3a:a1:3a:45:32:03:18:5f:73:a6:64:db:29:e0:
                    a0:53:38:63:71:f1:70:78:12:3f:f5:25:51:1b:fe:
                    14:13:39:58:d0:48:37:a5:c3:57:e8:3f:2e:1e:f6:
                    63:65:1d:37:ac:b5:74:d0:bf:23:4e:24:2b:da:f1:
                    07:81:ed:c6:4d:37:e6:72:61:f7:b4:e1:bf:9e:a3:
                    70:3f:89:ee:ec:84:28:19:0a:fc:78:14:82:b2:26:
                    35:6c:d9:bd:2a:55:22:f3:a6:ba:79:36:ab:73:cf:
                    c0:62:30:40:da:28:60:e2:85:2e:ce:e6:88:92:50:
                    c6:c1:c5:04:9d:b5:03:a9:6e:ff:d0:e1:49:f7:7f:
                    43:f3:dc:37:5b:a2:67:09:8d:6e:18:ad:c1:2c:95:
                    54:ac:1d:eb:f5:7f:68:dd:eb:3a:a6:b9:28:c1:ed:
                    f3:d8:69:79:90:54:82:91:1d:0b:1c:3f:f9:81:07:
                    94:05:8f:27:58:0f:30:c2:31:43:5d:8d:c4:8d:3a:
                    f8:18:a7:28:3d:2d:34:f2:fa:1c:7c:d7:ab:df:20:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:D4:C1:96:5F:7B:F3:5F:CD:3F:7B:09:4A:D1:FF:B8:42:B6:63
            X509v3 Authority Key Identifier:
                keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:a4:f9:ad:81:d6:89:2a:d8:73:be:e2:2a:d0:62:e9:9c:
         d1:a7:0f:9f:83:c6:30:8e:e0:aa:4a:9f:91:7a:75:c7:5e:f6:
         29:02:93:e2:5e:20:d1:dc:55:3a:b6:78:76:fe:28:5f:2e:44:
         c8:f7:b5:39:c9:5f:25:3c:6b:07:f4:f0:27:17:8c:f6:8e:5c:
         6f:81:ee:4e:2c:21:b3:47:fd:d2:f2:38:82:a3:f3:95:0b:00:
         8f:01:89:83:5d:f6:03:90:80:07:78:d0:53:0a:ae:e3:8b:1e:
         a3:82:6d:2a:fa:6f:87:18:0b:f1:8a:96:37:18:c1:f9:e6:ab:
         19:4d:96:aa:79:f7:0b:29:29:a3:7b:d6:6f:93:46:81:7b:93:
         d0:36:32:59:db:3b:d1:e1:89:8c:5c:c0:99:b8:ca:1c:0f:7a:
         a5:8c:c5:35:c8:01:c7:cc:62:a7:3c:cf:0f:1d:eb:48:2b:44:
         a5:1c:b3:9f:bd:03:33:5e:13:67:7c:e0:20:fb:24:d7:1a:4e:
         69:08:09:89:b1:48:96:d0:71:9e:1c:e3:35:e8:4b:4f:fe:ba:
         53:3f:c3:24:20:24:87:10:ee:71:d6:5e:06:e7:df:88:0a:51:
         77:d2:61:e4:66:42:f7:dc:e2:8f:95:cc:2d:a2:67:c0:3b:17:
         79:de:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:09 2024 by rpki-client on console-fra.rpki-client.org