Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File:                     aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier:          ya9VApd5gG62QxqO90AFmFsauEd69NDCu/MzKwRnHgg=
Subject key identifier:   46:98:EF:53:6B:30:40:80:97:97:65:A4:25:9D:82:AA:AC:4B:13:2E
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer:       /CN=690a263249847cf97344742213644f929beaa997
Certificate serial:       019369D8DEA543A068F1D6F38E6F4F813F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number:          05D9
Signing time:             Tue 26 Nov 2024 19:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:40 +0000
Files and hashes:         1: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: 6HnawajzgZIVMA+PrnhqMs9k1WQjUmUuOJjwUbW8AiY=)
                          2: cPrYxwb7E9qxVo3jJBAjXJKxt8M.roa (hash: bCALBmiiLVonC8uRrYkIwo7f6F+LO7XJPvjhCPJIeNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:de:a5:43:a0:68:f1:d6:f3:8e:6f:4f:81:3f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690a263249847cf97344742213644f929beaa997
        Validity
            Not Before: Nov 26 19:00:40 2024 GMT
            Not After : Nov 27 19:00:40 2024 GMT
        Subject: CN=4698ef536b304080979765a4259d82aaac4b132e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:7e:8c:b5:71:87:c6:21:43:1d:b7:ff:3a:
                    b5:fb:26:aa:13:8c:1a:46:39:42:43:fa:62:d4:ba:
                    d2:80:9c:18:85:b7:c2:fd:19:ac:00:da:5e:3f:57:
                    e6:70:e2:67:28:77:1f:f5:7e:66:56:74:6a:21:80:
                    ff:1b:37:ff:d9:f6:7a:bb:bd:0e:c2:36:6b:40:1e:
                    7e:b2:4a:41:9a:0f:12:a4:15:cc:eb:a1:cc:5f:84:
                    b7:82:2c:18:d0:fd:82:8c:b7:1e:81:79:d6:29:3c:
                    c6:7d:f3:84:36:39:85:a1:5b:8b:a3:00:b4:07:bd:
                    f3:50:7e:fd:98:f9:97:0b:c9:12:61:f4:45:34:c8:
                    8f:4c:ea:6f:44:03:01:f3:bf:eb:cd:74:48:a9:38:
                    49:e0:30:d7:33:46:66:84:47:9f:47:be:f2:ae:25:
                    e8:58:84:31:ed:5a:3d:8b:ff:ac:33:a5:d4:49:d1:
                    96:a2:9d:a0:f6:9f:b6:bf:bc:38:1e:54:65:8e:6d:
                    ae:d0:73:78:d3:d0:93:12:29:c6:ae:ab:e6:dc:8b:
                    f1:e8:2a:fb:67:47:94:9b:2d:83:34:b0:61:33:dd:
                    d2:8c:b7:1c:70:b4:b7:3b:58:5b:9a:2d:61:f6:c6:
                    bd:7e:37:54:36:33:01:c1:e9:17:04:1e:41:7b:5c:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:98:EF:53:6B:30:40:80:97:97:65:A4:25:9D:82:AA:AC:4B:13:2E
            X509v3 Authority Key Identifier:
                keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:65:5e:89:45:01:3b:4f:75:97:4b:2e:10:29:dc:4c:b7:41:
         92:0e:43:64:47:ec:8f:e4:7c:50:81:65:36:7f:bf:41:c4:3f:
         f3:90:23:bc:af:36:fb:d0:ef:60:fb:2e:b1:6e:03:08:6e:78:
         0a:11:d5:1a:44:ad:f6:0d:f7:86:c9:11:e8:a3:06:c9:7b:aa:
         33:46:00:f6:db:9c:4f:53:5e:84:ce:6e:61:73:02:d3:94:f6:
         d7:77:b4:a1:42:68:01:80:ce:3b:29:99:c8:f1:43:95:de:af:
         c2:16:18:c4:e3:df:a2:24:00:92:fb:1c:59:26:85:99:ed:00:
         42:3b:17:e4:92:fb:1e:50:4b:89:30:73:7e:fb:37:08:ed:45:
         00:9c:5a:b8:01:be:96:80:8e:e3:09:a5:e9:66:33:81:26:01:
         71:9c:ea:cc:fb:77:f6:a8:43:ba:6f:11:3f:4b:4f:16:3b:8a:
         74:06:58:38:a6:51:1b:86:6f:d0:e6:be:d3:d9:bd:7f:bd:89:
         f1:a6:94:c4:aa:4d:d7:24:ea:d1:46:79:ec:19:16:4d:d1:1b:
         bd:88:ac:73:9b:e7:81:d6:67:09:01:9f:7e:c0:be:6a:b8:c9:
         a5:58:d0:8f:d8:3b:46:60:ac:94:e8:3c:b0:d2:8e:d0:bf:c6:
         08:43:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:07 2024 by rpki-client on console-ams.rpki-client.org