Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
File:                     J0zEEJs00UTL604gpr08B1kYIbU.mft (raw, json)
Hash identifier:          qaTDsdAkKLWcCqLelfp89b54fYfIqxmEbgOKPzEQq2w=
Subject key identifier:   42:33:5C:40:A1:2D:D2:A8:F5:32:80:B7:EA:D3:83:E9:FB:46:E2:B0
Authority key identifier: 27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
Certificate issuer:       /CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Certificate serial:       019358779BEB8AAA66FE8232810381E1EFEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:53 +0000
Files and hashes:         1: J0zEEJs00UTL604gpr08B1kYIbU.crl (hash: i7n3R4Q5dDRbdTFnzs0sCaRvfFCG72ecp41/ejmS+aM=)
                          2: nGlePDdXDY1GGRX7u9Eo1re403M.roa (hash: wgyoxF28dfq6WydSjdFpjoJoR5UtmwCtZlOYVSOk7nc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:9b:eb:8a:aa:66:fe:82:32:81:03:81:e1:ef:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
        Validity
            Not Before: Nov 23 10:00:53 2024 GMT
            Not After : Nov 24 10:00:53 2024 GMT
        Subject: CN=42335c40a12dd2a8f53280b7ead383e9fb46e2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:ac:42:8c:f8:68:30:ad:cf:7f:91:d6:d6:
                    8d:01:8f:16:3e:43:3a:14:d0:08:ef:ce:f2:8a:02:
                    d3:fb:b6:92:57:fa:c2:ab:37:8c:15:12:20:52:e8:
                    39:1c:08:f7:c4:d0:cc:9c:3c:9d:13:38:a3:a7:53:
                    bc:94:fa:79:c4:07:ec:16:a6:09:3b:7d:91:a5:de:
                    e8:f5:38:0e:98:73:27:42:63:25:f2:3f:de:01:0b:
                    e1:3c:3d:a2:4e:fa:65:36:c4:7a:b2:66:17:c1:59:
                    f6:7c:5a:ef:44:41:80:62:a8:2b:79:7c:a5:46:45:
                    03:3b:ce:89:cf:0e:db:6e:c7:db:42:d8:32:82:7d:
                    36:9b:d5:83:71:32:a7:c9:e6:26:56:71:b3:30:04:
                    06:93:7c:94:55:a0:6d:26:5c:e2:30:ac:f0:a1:2f:
                    a0:c2:19:88:6a:22:39:2e:0d:ed:73:a0:02:8e:c9:
                    e6:e5:bb:ed:60:31:82:05:46:2c:2d:9e:57:56:fb:
                    82:65:e0:d0:5e:e8:3e:27:ee:d7:1b:93:fc:2a:4e:
                    c5:1c:05:fb:cf:3f:01:ce:36:8a:b8:24:1b:c9:eb:
                    7d:b2:7d:95:8f:43:44:b1:8f:b5:a6:0a:17:2f:36:
                    7a:b3:f4:01:b0:5b:fb:10:fd:4b:60:cf:aa:ed:f0:
                    d1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:5C:40:A1:2D:D2:A8:F5:32:80:B7:EA:D3:83:E9:FB:46:E2:B0
            X509v3 Authority Key Identifier:
                keyid:27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:4a:63:06:14:a7:54:5e:9c:2d:73:6c:1c:d8:ee:f3:fb:
         e0:73:be:4c:89:83:a2:28:93:e3:1f:10:f2:ba:78:69:df:74:
         22:29:8f:50:02:a3:95:ad:0c:46:6e:09:29:d5:3a:a4:21:59:
         08:65:9d:fd:85:dc:69:51:6e:28:50:3a:63:21:2f:21:4f:e0:
         6f:57:ce:8d:92:8a:4e:94:14:07:2d:b4:86:33:32:bc:41:6e:
         b5:07:04:de:7a:4e:00:de:e5:bb:f7:bf:b7:94:fc:e5:53:27:
         e6:06:cb:8a:da:65:48:6d:77:93:93:58:05:5b:00:d2:c6:ab:
         4c:94:1b:53:cf:9f:7e:a9:5b:ae:77:b9:ec:ac:65:17:a8:e2:
         bc:bc:cf:5d:21:ed:6b:b9:21:58:cb:6e:e9:05:9b:c7:df:1b:
         6f:e3:87:2f:09:00:50:ce:d3:32:49:71:e4:02:e0:30:5e:4c:
         89:57:08:34:e9:da:a6:36:b5:d1:7b:23:eb:74:80:b5:83:55:
         50:b7:06:b6:b2:2e:07:19:af:2c:7a:61:3e:a5:54:ac:bc:21:
         6c:06:f3:75:cd:7d:af:74:e2:35:c5:2f:4a:36:de:bd:1c:a4:
         4a:7d:ac:9c:ef:3d:bd:00:b7:e2:10:08:bd:ff:de:61:96:e5:
         c3:bd:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:10:05 2024 by rpki-client on console-ams.rpki-client.org