Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
File:                     KUJPgsfIL8VJlTLlpmUadPYpxao.mft (raw, json)
Hash identifier:          LpxWvj13b4LgfR4G0pLNejdY1TAV82N+lFPQZOTLvpI=
Subject key identifier:   BC:BA:B7:62:F7:E4:FD:CB:E7:D5:C7:5D:16:39:FB:8E:C9:22:13:B9
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Certificate issuer:       /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial:       0193572DE301FFB08C0BAB875E9DE5F11034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
Manifest number:          074A
Signing time:             Sat 23 Nov 2024 04:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:45 +0000
Files and hashes:         1: KUJPgsfIL8VJlTLlpmUadPYpxao.crl (hash: Tr4AYFspW8DEmAlHMdP/xLCUkT44VMduq01ekakDv44=)
                          2: z_puzyIY80Ss701IWZu1J-2_ueg.roa (hash: /c2FmbwxtsGs8OeiSybZnf3p2GuZpRyLUnsm5fYocIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:e3:01:ff:b0:8c:0b:ab:87:5e:9d:e5:f1:10:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
        Validity
            Not Before: Nov 23 04:00:45 2024 GMT
            Not After : Nov 24 04:00:45 2024 GMT
        Subject: CN=bcbab762f7e4fdcbe7d5c75d1639fb8ec92213b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:c7:e9:ef:5e:a3:82:fc:53:8f:2d:19:c6:
                    17:72:26:a2:d6:88:ea:89:35:24:a5:d7:1d:ca:c9:
                    df:dd:a3:5e:34:ed:83:97:18:97:d7:46:83:18:65:
                    2e:3e:df:4d:f0:0f:f9:2f:8a:d7:08:02:e3:2f:a1:
                    80:d2:cf:e5:a1:26:ae:75:94:b7:49:c5:cc:76:00:
                    af:cd:98:b5:47:36:38:13:48:db:a8:f7:67:f2:4a:
                    aa:9b:d2:9a:2b:53:9d:cd:3d:9d:5d:f9:d0:af:b2:
                    21:f4:7f:3a:d5:be:ae:8e:91:89:6c:61:11:af:9d:
                    0e:65:fd:40:fa:50:a2:9f:7c:c6:b5:65:f9:9c:ec:
                    68:b2:ab:7a:76:1c:f5:78:53:17:95:af:e4:61:c8:
                    3b:42:79:11:b9:e0:3d:e9:87:64:fc:51:27:f9:c5:
                    d3:c3:36:58:b5:fd:fe:d3:1d:96:5b:46:57:d8:fb:
                    f1:e3:53:72:30:f2:e3:33:ad:56:0f:9e:70:8f:62:
                    b1:13:f2:b1:ef:32:fd:50:41:b1:57:cd:d8:9a:13:
                    fb:21:75:a3:96:0a:8e:57:14:44:d7:f5:52:61:74:
                    ef:83:09:b3:d5:50:fe:01:c2:5a:3f:ed:f1:8b:57:
                    1c:9e:c3:aa:bd:83:a0:e6:28:ec:51:0a:a9:61:9e:
                    51:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:B7:62:F7:E4:FD:CB:E7:D5:C7:5D:16:39:FB:8E:C9:22:13:B9
            X509v3 Authority Key Identifier:
                keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:62:13:e6:78:9f:a2:a2:b6:2b:2f:06:74:4a:64:42:ba:c4:
         9f:ec:4c:9d:b9:cb:c9:f3:e2:c7:70:25:52:a9:c8:9e:1e:df:
         5d:44:cb:f8:a9:97:7a:cc:92:2f:14:19:60:4c:2d:a9:1f:b8:
         fb:fe:e6:74:dc:fb:99:b7:11:2e:76:2a:9e:44:a2:62:ef:90:
         82:d2:31:fa:50:f7:c5:a4:8e:ec:c5:29:8e:6d:7d:bc:8f:e4:
         de:08:85:54:82:a6:e6:11:96:8c:fa:84:95:3d:4e:87:65:3c:
         6f:e2:61:0f:24:b0:2a:58:4e:80:fa:49:2b:3a:86:50:33:d1:
         31:4e:0c:ef:61:d8:6e:e1:82:d9:37:91:21:13:3b:bd:65:9c:
         8b:28:d0:d2:53:93:4d:50:bc:fe:60:0d:db:13:31:43:8a:01:
         ed:68:4d:f9:45:c1:4f:cc:ff:34:58:4a:f3:ab:f6:fe:fa:06:
         e3:87:6d:73:89:2d:6f:30:82:a3:1e:ce:93:eb:e2:0b:a7:53:
         c5:77:09:6c:72:19:eb:d4:e2:48:ce:8c:bf:ad:7f:9a:0f:e8:
         64:38:a3:04:1c:23:31:a0:9a:5c:af:c8:a5:8b:c7:b2:08:ee:
         12:f1:50:25:cc:d6:1d:3a:e1:9b:1e:65:ec:9a:13:e7:6a:74:
         2b:47:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:59 2024 by rpki-client on console-fra.rpki-client.org