Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File:                     Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier:          kT242hkopSd64XF6gl9rZ03/yOArzp5uE8wEeedAPXs=
Subject key identifier:   AA:ED:73:C1:2B:BE:04:BA:20:D2:D4:1A:8E:09:04:79:64:58:83:62
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer:       /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial:       0193549BAC2010E8633C7D226EFE38D24A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:01:48 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:48 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:48 +0000
Files and hashes:         1: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: tdjaWF+INSvYPpT+e15uFj/ZNe0sSKngyjkMFFZYRbY=)
                          2: ezgp3pt0gNcFS0wtctJhB2ybhmY.roa (hash: MzNVINZLb2LlxNfWLmmhF0X1PYN/6m/1kHcPQ2ID8+s=)
                          3: wwzfG3opR7lMVQQiUEf04Mvpd2g.roa (hash: ub6cbrVSSCRhd/GXcQrVPzXVrddDXxPiZp65xRgw6NA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:ac:20:10:e8:63:3c:7d:22:6e:fe:38:d2:4a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
        Validity
            Not Before: Nov 22 16:01:48 2024 GMT
            Not After : Nov 23 16:01:48 2024 GMT
        Subject: CN=aaed73c12bbe04ba20d2d41a8e09047964588362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:bc:84:bd:b5:28:8a:8d:27:4c:c4:52:ff:
                    f6:a2:08:43:a0:0c:1c:27:af:82:60:3d:72:c3:4a:
                    4f:42:7f:9b:9c:3d:09:71:b5:56:9b:8d:53:5d:a2:
                    31:11:e9:c5:8c:05:d6:50:be:69:6a:ec:20:0d:5a:
                    8d:b7:16:f6:cd:07:6f:49:0a:63:ed:c7:6a:7b:1b:
                    0a:26:07:a1:fc:c6:b5:d7:66:e0:d6:bd:da:b3:ce:
                    94:50:2f:90:ea:6f:2a:f7:03:f6:36:cc:4b:45:d8:
                    59:d8:b6:1a:10:8d:7c:fd:a8:1a:4c:e8:61:8c:e3:
                    b6:e7:52:bd:ce:17:26:3e:c2:0f:bd:c5:a9:59:38:
                    58:e1:b8:7d:f3:bf:b5:08:db:f5:df:39:85:47:ad:
                    a1:2d:7c:ee:ea:96:87:60:27:13:46:39:96:b1:f5:
                    82:27:ef:b5:e9:f6:2c:a5:2b:36:af:cc:9b:3b:6c:
                    b7:6e:0f:05:a0:a7:b2:9a:ad:5b:27:7f:af:cf:f1:
                    cd:e6:1f:7c:7f:09:6a:c7:dd:5a:34:72:a0:9c:68:
                    a8:6b:ca:c7:34:a0:07:9f:0d:96:d6:95:0f:9c:ff:
                    8e:08:4c:ba:f2:46:dd:9b:b1:da:c1:08:59:b1:cd:
                    bd:9a:8f:59:38:83:9f:a0:03:d4:39:eb:fb:db:73:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:73:C1:2B:BE:04:BA:20:D2:D4:1A:8E:09:04:79:64:58:83:62
            X509v3 Authority Key Identifier:
                keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:45:f0:e2:9d:ee:07:53:f0:df:df:d2:40:46:ee:4a:00:f4:
         dc:bf:f4:f6:55:65:77:ac:f5:83:42:34:d8:61:aa:79:8b:14:
         86:31:95:04:a9:d2:a1:2e:fa:5b:72:5b:22:75:69:ed:e8:a8:
         5c:00:63:ec:9d:91:7b:8e:1c:e8:ff:b1:25:43:2f:09:9c:6a:
         3d:ef:39:bf:c5:ee:bc:67:9f:ca:62:42:5d:9a:18:fd:49:6a:
         b9:9f:b6:32:1d:e9:80:50:a2:bf:b6:55:be:14:4e:76:b4:4c:
         d6:af:94:0e:5f:32:e7:d2:6e:b2:05:b0:b0:83:a5:bc:3f:c9:
         45:13:02:7b:ce:16:2d:20:14:f7:30:b0:b6:d8:70:33:49:15:
         12:67:71:69:ca:52:57:a1:25:2d:8e:e7:cd:3b:88:9f:36:96:
         68:56:27:5b:dd:0c:87:97:49:a3:fb:f9:ac:10:40:05:0b:9b:
         9a:b4:e5:53:16:7e:e0:14:b5:da:92:35:fc:9c:66:b3:df:fb:
         50:9e:f1:ff:9c:bf:ef:ac:50:ab:44:d9:00:4f:19:78:4b:d6:
         97:78:15:d4:31:ef:65:13:ff:ca:53:b4:1e:7a:e5:3f:fe:88:
         51:ea:be:8a:02:f3:e0:33:72:5f:24:66:64:ce:4b:df:11:88:
         d0:7f:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:01 2024 by rpki-client on console-fra.rpki-client.org