Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File:                     CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier:          Gu/Fw/wbcbaGctTewlRm4VORNsCEDbZcmIBxwZLBuvA=
Subject key identifier:   BC:6D:21:FE:1A:38:6D:9A:D9:C9:6A:58:5C:09:78:D8:02:05:39:70
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer:       /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial:       0193572DAB321EFD227680E27C1CFC6479FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 04:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:30 +0000
Files and hashes:         1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: 6+3JmIyqJrqBbxfeVvim7QwNc/Q2XFgrvm1lvh0s8IE=)
                          2: z2T9r-RC8wF66azEWhPwVep1sSI.roa (hash: oPjxeIidhVB3gGP7Whf5IsHV6EI5CurwkB5KQsfzMRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ab:32:1e:fd:22:76:80:e2:7c:1c:fc:64:79:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
        Validity
            Not Before: Nov 23 04:00:30 2024 GMT
            Not After : Nov 24 04:00:30 2024 GMT
        Subject: CN=bc6d21fe1a386d9ad9c96a585c0978d802053970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:f7:33:b5:f1:15:af:d6:3e:be:2b:9a:14:
                    20:a5:35:da:71:b9:d5:ea:3c:9f:8c:09:b2:2a:36:
                    a9:bd:ca:a3:0a:79:9f:52:1c:d7:22:ea:11:9b:66:
                    1c:a2:1e:a9:df:16:63:0f:eb:ef:92:4d:9d:9e:f8:
                    40:6c:f6:3e:0e:e3:99:b3:7b:ca:26:da:c5:99:24:
                    b7:ae:96:f3:b8:f5:90:6c:29:fd:9c:fe:9b:af:06:
                    5a:c8:43:14:66:50:de:73:b0:9a:ed:2f:93:c3:f2:
                    7f:11:e4:f4:e4:ac:02:1b:31:65:2e:7c:38:04:5b:
                    2c:42:4e:e7:7e:b5:9d:a1:3e:e7:f3:b4:a2:21:56:
                    84:98:e8:4b:4b:f2:76:95:a7:4f:b4:3e:bc:71:65:
                    e9:ef:c3:e0:96:e4:1b:9e:a1:e5:13:52:7e:b0:b8:
                    fc:61:70:08:fd:7c:59:bd:e3:cd:6e:8b:59:45:ac:
                    d2:6c:83:c6:cb:24:1c:de:d6:7c:c2:5f:da:d1:78:
                    95:6b:4c:ac:4d:af:d8:b2:c1:72:69:ed:74:7f:f9:
                    11:e4:c1:5c:f1:35:14:b0:e3:7d:48:cc:90:7b:e4:
                    a8:72:5d:43:e5:ee:87:0d:56:95:41:71:17:4f:6e:
                    d8:44:96:d9:df:ef:01:e0:64:d0:f5:fa:1d:61:4a:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6D:21:FE:1A:38:6D:9A:D9:C9:6A:58:5C:09:78:D8:02:05:39:70
            X509v3 Authority Key Identifier:
                keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:49:56:8d:d8:fc:bf:cd:e1:c5:b0:bf:f1:1e:54:5a:2c:
         bc:40:ff:ac:49:33:48:ec:1a:93:d0:d7:b5:54:0f:20:d6:1c:
         c3:f7:09:7b:88:e2:66:12:5c:94:87:f3:12:5a:b9:57:9c:29:
         9a:f8:3c:f3:d7:dd:1c:c3:a3:aa:7f:fb:be:92:e0:f1:08:1f:
         ac:cf:b5:23:7c:23:a4:52:6c:89:33:bc:19:ab:b6:b7:89:08:
         87:0b:df:0f:a8:1b:b1:e1:1e:a6:06:61:ac:d1:7b:eb:45:af:
         ac:6e:fb:17:8e:1c:ef:02:6e:e5:d5:1d:8b:c9:a3:84:e8:c7:
         e3:f3:b3:9e:3d:3d:71:dd:6e:a2:8f:93:b9:3a:e0:05:34:81:
         0a:e7:1d:75:c4:5a:31:67:2a:aa:8a:27:b1:7a:8f:46:81:d6:
         db:0e:23:b8:c3:49:58:42:a7:60:f3:45:8d:5e:40:9e:58:89:
         f1:01:00:26:fb:8b:23:b9:db:08:3c:93:ba:5c:ca:38:9d:ad:
         44:ea:bd:3a:54:b3:37:0b:3c:46:f3:4c:02:1f:9d:2e:ac:b0:
         de:da:6a:24:c7:67:ed:67:a3:f3:bf:1c:d7:89:61:fe:6c:e6:
         df:a8:a6:79:54:c3:d0:2a:d4:1c:fd:19:98:76:38:21:8a:c1:
         47:bc:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:23 2024 by rpki-client on console-ams.rpki-client.org