Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
File:                     MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft (raw, json)
Hash identifier:          hFjeVMFbbOi6t3nhHPPcDyDoTVLZ6f80M/CVDBQk3dc=
Subject key identifier:   CC:5D:BC:33:47:18:FC:36:63:6F:B8:3E:E0:1A:BA:CF:88:B3:5E:EF
Authority key identifier: 32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61
Certificate issuer:       /CN=32a35477f3b0dd6637c29d3e1bdfc0daac71be61
Certificate serial:       0193568AFB965BBE21738A4288C9DE4CBE33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
Manifest number:          0B0A
Signing time:             Sat 23 Nov 2024 01:02:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:49 +0000
Files and hashes:         1: MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl (hash: F7Vki0AH0LXiA20Oul1RfyainOf8b+pgsyg1z58qB6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:fb:96:5b:be:21:73:8a:42:88:c9:de:4c:be:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a35477f3b0dd6637c29d3e1bdfc0daac71be61
        Validity
            Not Before: Nov 23 01:02:49 2024 GMT
            Not After : Nov 24 01:02:49 2024 GMT
        Subject: CN=cc5dbc334718fc36636fb83ee01abacf88b35eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:94:57:1d:a3:5d:22:b5:6e:e7:ed:e7:93:
                    59:34:a7:04:de:0e:79:6a:ad:94:2a:25:c0:22:31:
                    3c:db:5a:23:fa:72:a6:20:58:0d:e8:c7:43:9a:51:
                    f8:8c:aa:f7:7c:02:08:0a:55:36:e1:4a:72:d3:42:
                    4f:aa:e2:8e:54:5c:2f:75:f7:85:dc:2f:25:2f:84:
                    f4:b0:f5:0b:53:89:7e:fd:81:ea:da:73:1d:60:a2:
                    4b:76:9c:af:e8:e6:70:22:8a:c7:67:83:26:9e:18:
                    d3:9f:de:74:b9:68:27:59:b2:06:4e:24:c5:f4:d9:
                    40:9f:bb:3c:1f:97:73:db:10:cc:36:c8:8f:84:e5:
                    8f:70:4f:66:19:78:dd:bd:d5:82:2d:f4:53:be:42:
                    ae:17:94:7c:3c:1e:22:b7:48:34:00:5f:e6:fe:e6:
                    95:60:ec:f5:39:2a:f0:69:0c:2c:fe:c9:d6:ac:a9:
                    9a:41:bc:29:4b:25:0c:84:d5:c2:89:35:30:31:27:
                    98:46:81:f2:4c:dd:00:a1:41:2a:7d:7c:95:9b:c2:
                    27:91:05:dd:d2:90:00:97:9c:e2:f0:3a:91:fb:81:
                    43:c7:cb:01:60:59:38:ee:6d:c9:e5:d2:4b:1f:1c:
                    0b:9a:2b:9c:60:9c:0e:67:c9:03:7b:6f:86:0e:a9:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:BC:33:47:18:FC:36:63:6F:B8:3E:E0:1A:BA:CF:88:B3:5E:EF
            X509v3 Authority Key Identifier:
                keyid:32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:de:9a:d3:ef:6a:99:e1:3a:50:ad:96:e5:6e:be:4a:01:
         88:c7:e3:09:a4:85:99:91:d0:36:03:2e:94:2f:ca:54:f9:4b:
         a2:bd:49:f9:02:48:5b:b6:c3:39:ed:db:07:75:34:d3:0e:87:
         f1:1f:3b:54:a1:66:ee:f1:5f:fc:21:c1:8b:88:3b:7f:8c:2e:
         f6:19:62:52:1b:e0:34:5d:33:1d:55:0d:cc:a8:e6:cd:93:13:
         84:cb:7c:48:5c:c6:53:23:35:59:e2:00:74:b9:ae:ee:61:3b:
         5f:a5:b1:a8:42:27:d5:79:a2:db:36:92:43:60:f7:c2:3f:53:
         2a:1f:32:50:c3:cf:23:c5:e0:cc:77:cc:88:33:8c:af:69:20:
         fe:bd:48:a4:1f:41:fd:80:97:01:b4:5f:87:b2:89:c1:05:51:
         1a:33:59:a3:21:26:cf:83:08:72:cf:c7:79:6d:b8:23:be:a6:
         f1:02:f1:cf:da:46:2f:80:04:80:f0:b8:1f:27:42:e0:4f:e6:
         59:41:d3:10:0f:6c:ad:99:3a:84:ac:a1:74:63:c2:a0:89:fa:
         43:d7:3b:bb:d0:e9:3a:b6:71:8e:9b:39:6d:cc:e0:48:7f:99:
         80:49:1f:2a:f2:7f:ff:3e:4c:5d:08:03:69:58:2d:fc:09:ca:
         b5:22:2a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:11 2024 by rpki-client on console-ams.rpki-client.org