Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
File:                     JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft (raw, json)
Hash identifier:          kdtPzbZMZLP9FHIdh93RskeqpEK5vmEf55WA90DQUUI=
Subject key identifier:   B4:BD:14:6D:3A:AC:F6:5F:FF:FC:27:61:24:56:55:C8:1E:3F:46:9B
Authority key identifier: 24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4
Certificate issuer:       /CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
Certificate serial:       01936AEBAC945C96C27C5232CBB42C3941B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
Manifest number:          072D
Signing time:             Wed 27 Nov 2024 00:00:50 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:50 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:50 +0000
Files and hashes:         1: JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl (hash: a0SosNDvBHEexUNs8zRo/iGhdKlxetqo/gyuzvLBxB8=)
                          2: S-1RMbboBNB_fsNvjIUtnFHTJo8.roa (hash: 4UhQ2XICNvH09RnS6sjZgLUOREbvEPWbzuO2t3X/pJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:ac:94:5c:96:c2:7c:52:32:cb:b4:2c:39:41:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
        Validity
            Not Before: Nov 27 00:00:50 2024 GMT
            Not After : Nov 28 00:00:50 2024 GMT
        Subject: CN=b4bd146d3aacf65ffffc2761245655c81e3f469b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:bc:5b:dc:ed:9e:84:34:9b:fc:de:bf:b7:
                    17:36:1f:bc:b2:30:5b:54:a0:3c:58:88:9c:1e:57:
                    b3:37:19:95:a5:b3:94:69:d3:cc:40:04:1f:55:c4:
                    aa:cc:66:fd:85:2e:5b:42:0d:81:9f:b9:5c:ec:5b:
                    d7:25:80:6e:0f:51:83:5c:03:e7:f5:12:42:17:b1:
                    a5:c9:08:32:68:64:2d:4f:70:2d:9d:bb:e5:7d:f2:
                    8d:ff:3b:d2:94:0e:71:28:10:12:ba:11:ca:0c:b5:
                    7b:5d:08:99:d1:61:e5:e8:aa:2d:29:fd:da:77:70:
                    e8:10:9c:6a:6e:60:d3:9d:ea:e8:83:c6:d7:a2:5a:
                    73:e9:60:9c:b0:2c:6c:77:14:01:75:48:8b:d3:f3:
                    86:98:ee:22:e2:f2:f4:b0:34:03:6a:b2:53:7e:77:
                    cc:2b:9b:54:eb:b1:24:c9:c5:57:4c:c3:38:73:b0:
                    5d:fb:8e:a2:6b:bb:f3:97:af:61:29:5c:02:6a:aa:
                    48:f3:18:c8:9e:9a:95:56:a7:5c:5a:5e:5f:7a:a4:
                    25:c8:9f:88:a3:bf:58:25:44:63:bf:ce:ee:ff:5f:
                    27:cd:b4:58:7e:b4:b0:5b:df:95:fd:bc:cd:fd:02:
                    9c:b2:40:72:06:35:43:e2:cf:dc:d6:1d:1f:80:fe:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BD:14:6D:3A:AC:F6:5F:FF:FC:27:61:24:56:55:C8:1E:3F:46:9B
            X509v3 Authority Key Identifier:
                keyid:24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:f1:b2:8f:4c:25:72:a5:16:56:09:38:3d:ec:d5:52:6d:
         cc:67:7f:f6:53:fe:05:a1:37:c5:e4:c7:81:60:5e:af:25:42:
         05:2b:14:6a:9e:e4:09:a2:83:f4:2e:56:6e:ac:37:e6:cf:aa:
         c6:b7:22:89:37:0b:ca:88:db:06:e3:f5:af:a0:db:f7:c0:39:
         f0:81:bd:5d:6c:a3:3f:e8:97:d5:65:91:cb:83:33:fe:50:13:
         5c:71:64:79:10:b9:63:bb:9e:46:51:67:3b:2a:07:61:37:c5:
         7e:64:3e:0a:d1:12:9d:87:b2:54:41:2a:0e:54:e9:18:36:44:
         c1:e5:3f:2c:b7:d0:a8:ad:68:7a:2a:9a:37:02:f2:af:4f:0d:
         f5:6a:9e:f1:55:15:ae:f4:c7:df:08:00:e8:9f:27:d6:01:23:
         03:67:15:d2:7d:5e:fe:79:b3:e0:a4:8e:13:ab:77:cc:cc:42:
         c5:c0:9a:25:da:8f:4d:98:d9:75:5d:08:cd:86:9b:67:08:c8:
         9d:6a:54:14:0b:df:a7:56:a0:ea:17:5c:f9:15:2a:76:58:82:
         75:4a:2c:14:6a:1b:26:a3:42:a6:d7:bc:20:f6:98:d4:61:84:
         b0:cc:95:f7:13:26:92:b2:e8:3a:47:a6:d4:5b:af:de:3a:35:
         1d:a5:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:48 2024 by rpki-client on console-ams.rpki-client.org