Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File:                     datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier:          oGHR/JGcFQawJbf/FmGLkh2km0fC2PtaaBPjRJUUfDc=
Subject key identifier:   F6:CF:50:FF:01:22:4D:A2:7A:04:92:01:1A:CE:29:41:4D:F9:33:F8
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer:       /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial:       019356BF89363F869C96D9DA354C1E4A3B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number:          54
Signing time:             Sat 23 Nov 2024 02:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:13 +0000
Files and hashes:         1: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: zx9eJSDIH6dnsTBt2fK0fRPTVrwemo4jIuTPKSilhDo=)
                          2: q5Jn-IcITOkOnEsTgxeQH6PZoh4.roa (hash: fVUDALJsS5znURuSpLIH7bXj2QvSB7299GZg6Snh+g8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:89:36:3f:86:9c:96:d9:da:35:4c:1e:4a:3b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
        Validity
            Not Before: Nov 23 02:00:13 2024 GMT
            Not After : Nov 24 02:00:13 2024 GMT
        Subject: CN=f6cf50ff01224da27a0492011ace29414df933f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:d5:e1:3f:4e:ab:49:24:4d:cf:d1:96:55:
                    0a:9c:39:a1:2d:b1:12:31:e6:34:0f:29:17:22:27:
                    78:e5:35:6c:fe:e7:82:06:c9:98:16:9c:9b:c9:96:
                    f6:45:d9:9f:e2:c4:91:c8:13:66:be:15:d9:fd:5b:
                    78:a6:bf:6a:cd:a8:bc:42:d8:71:8b:48:ee:a1:e3:
                    b2:ea:26:59:f4:bf:0a:24:f3:1c:76:10:ae:95:ec:
                    4a:1d:ba:3a:fd:5c:06:33:4a:46:d8:65:f3:68:45:
                    d1:ab:1e:26:30:28:4d:93:a1:0c:c0:b3:8c:17:a2:
                    7c:c0:de:67:65:91:26:3d:d6:59:2a:ef:e7:ba:90:
                    6c:14:cb:b1:eb:9b:f8:2b:5b:17:a1:75:d3:3c:2e:
                    e3:c9:da:02:7d:08:e7:df:bc:2e:a9:49:d9:9c:bb:
                    b3:cd:e1:94:fa:96:ad:11:84:2a:54:11:48:69:bf:
                    25:2d:65:5d:c5:f1:79:0e:71:31:ac:4a:66:54:03:
                    56:bb:eb:61:87:23:1d:bb:7f:7b:9c:c0:80:7c:fa:
                    02:80:96:ac:81:2a:fa:f4:ec:7e:fe:7a:85:60:ce:
                    b0:c0:82:d6:8d:df:7d:ed:26:98:71:87:6e:45:a0:
                    75:2d:05:9d:f0:4b:4a:23:d6:73:ab:9b:d7:66:e5:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CF:50:FF:01:22:4D:A2:7A:04:92:01:1A:CE:29:41:4D:F9:33:F8
            X509v3 Authority Key Identifier:
                keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fd:d4:1d:3f:88:4f:80:16:38:70:6e:2e:a5:3a:57:ab:12:
         5f:2e:fa:2c:08:cb:a7:2e:ca:8b:45:7f:8e:72:0e:0a:fb:33:
         b3:22:08:48:03:b6:2d:27:6d:a8:1d:4c:74:4c:d7:86:46:09:
         04:b2:e2:f5:4e:03:ea:02:88:82:80:18:9c:a6:76:83:05:6e:
         77:da:6f:e1:47:ab:7f:7e:b5:12:79:92:bc:d1:1a:f6:cc:38:
         a5:96:36:60:42:2e:f2:e9:69:ba:4c:76:d8:55:3f:d7:22:b8:
         af:df:a7:c5:62:07:3c:c4:79:7e:d5:db:35:f5:3a:1d:96:6b:
         66:3c:90:fb:e3:ce:b3:8e:8c:22:94:13:98:cc:05:40:e7:e6:
         fd:74:3b:b0:fd:cb:26:95:c7:02:ea:cd:ca:8a:c3:f7:3b:97:
         fd:08:d6:d5:70:c6:8a:eb:c5:f2:1d:2c:ff:ca:c6:95:94:37:
         83:70:52:73:8b:7b:37:83:26:af:6c:44:10:f7:4b:b5:a0:ac:
         06:d0:98:23:36:6a:fa:d3:1e:6a:3a:75:b4:19:49:37:5a:57:
         ca:39:40:66:ca:74:2d:91:bd:26:77:42:c3:16:52:1a:42:8a:
         8c:cc:ea:0d:21:b1:65:a3:58:3b:8b:27:3c:3e:4c:13:50:f5:
         5a:7a:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:08 2024 by rpki-client on console-ams.rpki-client.org