Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File:                     qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier:          fLZc8TI3voqVsTZ5bDVzY56SXskQuf9swKJ5PRNlUFY=
Subject key identifier:   06:F2:E6:73:DE:C9:E2:E9:B4:C0:3C:E7:9B:4F:D2:B5:53:09:94:B9
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer:       /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial:       019364E9B82DE8B57BEEDD40D237DB068EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number:          108E
Signing time:             Mon 25 Nov 2024 20:00:58 +0000
Manifest this update:     Mon 25 Nov 2024 20:00:58 +0000
Manifest next update:     Tue 26 Nov 2024 20:00:58 +0000
Files and hashes:         1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: 52c9Hu5XpyQFDeVirBGAItEMMGWRP7hqPqKAFcSS3Cc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:e9:b8:2d:e8:b5:7b:ee:dd:40:d2:37:db:06:8e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
        Validity
            Not Before: Nov 25 20:00:58 2024 GMT
            Not After : Nov 26 20:00:58 2024 GMT
        Subject: CN=06f2e673dec9e2e9b4c03ce79b4fd2b5530994b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:c8:94:32:fa:76:d3:ca:bb:66:6b:5b:09:
                    9e:a0:7c:41:6c:16:25:92:e9:f6:2d:9f:14:f2:75:
                    75:bc:d2:e8:51:bd:7d:29:d0:cd:84:1f:be:b5:9b:
                    7b:1f:e2:7e:46:c5:95:68:62:b0:7a:46:b9:f2:67:
                    92:1d:a1:0f:9b:0c:74:fc:a5:7d:98:f7:1a:d7:0d:
                    1a:fb:46:04:66:45:82:d5:80:82:c3:1c:1b:ab:db:
                    af:57:a3:50:e4:80:eb:a8:3b:ef:b3:16:85:ee:af:
                    7a:52:ab:4e:d0:0b:99:9e:32:60:5f:73:9f:f5:db:
                    85:a6:ab:41:90:fe:4c:5c:98:47:2b:03:8c:15:e0:
                    28:27:a2:33:e2:14:37:7c:52:16:af:72:af:d8:76:
                    52:2c:0f:3a:f4:c6:73:7a:57:5d:60:af:13:87:f7:
                    b0:e4:6f:83:1a:07:d5:c9:9d:77:c3:90:b3:bd:9b:
                    bb:c8:41:4b:3f:d6:3d:4d:47:09:ab:8b:b2:59:5e:
                    97:47:86:61:e3:8a:e7:59:58:a0:27:d4:c1:5a:ba:
                    4f:cb:5b:3f:eb:92:0c:93:fe:0c:b4:ea:9e:37:31:
                    e6:61:72:12:a5:1d:31:5b:80:28:da:b1:6a:f8:1a:
                    82:92:d7:8f:89:e5:91:40:c9:a8:cb:5f:f8:3e:62:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:E6:73:DE:C9:E2:E9:B4:C0:3C:E7:9B:4F:D2:B5:53:09:94:B9
            X509v3 Authority Key Identifier:
                keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:00:00:f2:5d:12:04:2f:46:f2:e6:23:7f:be:30:f7:e2:83:
         b0:4b:3b:58:1c:b8:1e:b4:72:15:37:c5:e2:b7:12:ff:0d:46:
         77:ec:92:29:e7:c8:d7:89:81:b3:57:24:6c:99:ff:e1:68:ba:
         95:24:c5:1a:e8:5f:42:fe:4a:7b:01:ea:55:c4:1b:59:cd:cd:
         2c:6e:e7:22:ec:4f:21:b1:2e:11:a1:88:d3:42:7f:99:91:bb:
         11:14:a5:4b:b5:80:fe:b7:9a:d7:e8:12:86:21:25:32:f4:0c:
         7e:63:7b:02:31:63:74:28:53:ac:b2:22:16:d0:46:8f:d6:22:
         eb:98:0a:bf:ae:16:5e:fe:1a:fe:1e:a8:cc:f0:36:79:ef:2f:
         5c:a4:8f:38:25:6b:b6:96:5a:c9:1c:f9:cb:27:48:2d:78:ff:
         ac:70:cd:bd:1d:45:df:2a:57:a2:b6:c7:d5:b0:5d:3a:49:17:
         b8:34:1f:6a:e4:3a:3e:11:a9:58:c0:8e:d4:91:73:d2:f0:22:
         e9:55:fc:d9:22:7f:86:f5:c5:e6:b4:4e:1a:b6:87:43:ba:a2:
         34:b0:18:5f:cb:a8:f4:2e:dc:9b:22:c5:1d:80:1d:c1:4d:58:
         06:87:96:4c:f5:ba:f7:da:5f:45:ac:c7:0f:93:a9:4e:5f:10:
         a1:19:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:14:37 2024 by rpki-client on console-ams.rpki-client.org