Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File:                     k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier:          IzHxaO/jcEKzML4t0UcXtHsZexl9qwgFlI1k7GTqAHE=
Subject key identifier:   66:A0:A7:67:09:4E:93:D7:76:15:C5:57:B4:D2:4C:1F:5E:74:EA:AD
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer:       /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial:       0193572D7AE685A31AEEDFA2E3620E7D5EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number:          1303
Signing time:             Sat 23 Nov 2024 04:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:18 +0000
Files and hashes:         1: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: MwdVBsBJ+DCZIhUifZKZSddGU+vrf/bv6eJOWMOYSyw=)
                          2: oBKwTc_OD2Fdhp96fc6XoUuDA90.roa (hash: 2gUwMUHq+nwf7RNfl2Hr9J3FfDuZfj35eAsIxkku2JI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:7a:e6:85:a3:1a:ee:df:a2:e3:62:0e:7d:5e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
        Validity
            Not Before: Nov 23 04:00:18 2024 GMT
            Not After : Nov 24 04:00:18 2024 GMT
        Subject: CN=66a0a767094e93d77615c557b4d24c1f5e74eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:d8:bb:fa:ed:4d:63:12:a9:ec:c0:04:cf:
                    c1:a1:66:3b:bb:0a:60:b8:60:94:d8:df:08:c4:f6:
                    76:dd:25:ff:4c:6a:15:fb:18:45:8d:c2:08:e1:e8:
                    6f:00:71:68:98:02:af:98:df:28:dc:f0:cb:0e:af:
                    60:47:20:f4:3c:1c:ee:62:3c:f8:d9:85:d7:06:43:
                    1f:8c:d4:85:ea:0f:5d:82:2e:c6:4d:0f:f4:69:77:
                    36:92:17:39:e3:81:98:fc:a4:ee:b0:4a:4b:bb:ad:
                    c6:3c:b8:cd:7e:7c:80:5e:eb:a3:af:41:0b:60:fb:
                    45:0c:66:ee:7b:94:66:67:c4:76:a5:ba:27:09:25:
                    58:c4:6e:65:c0:28:61:67:db:3e:96:44:bc:da:1a:
                    88:b0:c8:c3:82:b5:01:79:94:30:e4:5d:a7:b3:a9:
                    31:5a:0e:d8:cd:42:a9:56:84:55:65:a3:5f:5d:59:
                    14:72:51:06:7d:03:08:bd:e7:51:4a:a7:58:c5:d6:
                    a1:4c:f3:6b:b5:10:ea:b1:9b:30:36:9f:2f:e5:02:
                    56:3c:61:05:b8:39:d0:7c:f3:f6:cd:93:5a:5e:9a:
                    00:c5:c2:59:bd:86:d8:17:5c:d0:18:33:2c:a2:73:
                    0b:b3:1b:07:56:d9:da:9d:6b:cc:f0:c7:e4:ec:27:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A0:A7:67:09:4E:93:D7:76:15:C5:57:B4:D2:4C:1F:5E:74:EA:AD
            X509v3 Authority Key Identifier:
                keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:c8:f6:0c:96:92:5b:2e:a2:67:8c:c2:ec:2b:48:6d:46:
         de:00:db:4b:4b:92:ef:fc:6d:70:a8:d9:0d:7f:d9:7c:fa:fe:
         92:cc:a4:5c:ea:8e:34:be:0c:d0:7f:0f:ed:39:5c:af:54:00:
         89:6d:09:73:95:1f:57:d4:c8:7f:c6:fd:b4:f9:d0:a1:b1:ab:
         a5:46:7a:13:48:18:06:a3:f3:22:e8:47:1e:11:fb:06:74:7e:
         df:8f:8f:33:dc:b9:35:39:c4:14:ab:04:22:d1:1c:97:a2:97:
         cb:60:97:d9:ee:fe:91:ea:f0:1e:4b:7d:09:86:13:00:fa:2f:
         8d:a2:a7:a4:b4:88:98:fc:fc:a2:45:36:11:02:de:6d:b5:b9:
         75:50:c8:3d:92:41:e3:1c:44:6c:4d:20:1e:aa:d7:91:60:db:
         0d:63:ec:1a:e1:f0:dc:65:9c:cd:f5:9e:4e:d0:83:7a:d7:9c:
         3f:65:50:6f:a8:58:63:fd:aa:9c:3a:c6:70:77:18:96:f8:fc:
         09:38:2b:5c:f9:73:cb:51:2b:51:52:8e:2a:66:75:a3:8f:cd:
         96:a1:97:85:8d:c7:31:d2:3d:58:cc:8b:a7:cb:a6:52:1e:70:
         e1:06:85:d3:ce:15:9e:89:89:6c:d0:79:79:ec:ba:5b:e0:56:
         8d:7a:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:30 2024 by rpki-client on console-ams.rpki-client.org