Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File:                     ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier:          BDI0RcxXhdlNPqvpEnxVzmUD5iAOgJa0Q2LW53eizRA=
Subject key identifier:   CE:50:31:7B:BF:85:A8:32:6C:5E:30:B3:7B:77:B9:AB:CC:C8:55:9E
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer:       /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial:       019355084BE5D15088540C8481C690CD9EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 18:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:27 +0000
Files and hashes:         1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: LWsWWDZhVuVmkcARrTlujOH6f6nSdEYfvaN4Z7ZrUO0=)
                          2: czLRANj2ss-HfCR3FJfBvfk_IRM.roa (hash: 3GQqMWe0gHVJrT35KHOhK4B1iVY0RHIID02lQkpvAr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:4b:e5:d1:50:88:54:0c:84:81:c6:90:cd:9e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
        Validity
            Not Before: Nov 22 18:00:27 2024 GMT
            Not After : Nov 23 18:00:27 2024 GMT
        Subject: CN=ce50317bbf85a8326c5e30b37b77b9abccc8559e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:6f:e6:d1:93:8c:64:97:e3:c7:3d:87:82:
                    34:51:34:bd:00:0c:b8:d5:57:0c:1b:b7:c8:01:e8:
                    a1:ef:12:04:79:42:08:60:0b:62:08:6e:0f:f2:29:
                    8d:ff:fe:0e:78:b8:53:6c:55:77:f4:70:a7:50:1e:
                    2b:55:a4:e0:d7:6c:03:ca:19:c1:ec:a6:eb:6b:27:
                    86:27:17:5e:0f:82:8b:40:8a:72:f2:f6:6a:81:27:
                    31:77:b5:a7:26:44:84:79:96:63:4e:be:4d:70:0a:
                    9e:58:dc:67:16:c1:14:a1:9e:eb:fb:b8:1d:81:dd:
                    64:6e:45:8a:76:16:8c:09:8f:09:66:b0:dd:35:30:
                    9b:cf:40:e4:31:1f:5e:64:56:40:b7:aa:11:5b:9f:
                    47:9f:f1:fa:d9:43:21:60:e6:31:60:00:c9:1e:4e:
                    05:2a:0a:59:e7:64:fa:b7:ca:52:90:97:ed:b6:db:
                    0b:fd:fe:f6:4e:18:d2:1a:16:b1:de:5f:92:58:66:
                    30:55:6f:14:74:d1:2a:29:c1:87:1e:14:0c:79:68:
                    09:e6:cf:d5:85:a9:fa:f7:c9:63:f7:2a:bc:90:92:
                    db:92:f0:85:6c:a2:03:c3:90:ab:26:9b:35:1a:07:
                    e8:78:26:6b:e3:76:89:f0:c5:8a:ae:e2:38:4a:d9:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:50:31:7B:BF:85:A8:32:6C:5E:30:B3:7B:77:B9:AB:CC:C8:55:9E
            X509v3 Authority Key Identifier:
                keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b0:81:c1:41:36:53:0e:93:1b:f4:29:8c:6f:fc:f7:c1:7d:
         28:eb:cc:6f:50:4b:0a:b6:cf:f9:04:ea:ea:7f:13:2c:bf:a2:
         fc:29:3e:78:cb:84:2c:7f:65:84:50:46:fd:91:fa:fe:a6:b0:
         8b:87:bc:a1:d6:7b:bb:dd:56:cd:63:e1:f5:e3:ad:c6:50:2b:
         e3:ed:25:a0:48:e1:b4:5d:cb:7d:c0:57:75:24:85:97:c5:76:
         da:35:9a:b7:6f:50:72:52:bc:c9:c5:f6:0a:0d:99:ca:61:c7:
         87:03:be:f8:f1:87:07:24:22:1e:32:9a:9f:3f:e1:75:05:a5:
         15:32:1e:98:37:07:da:b7:b7:d1:3d:b7:e7:1c:53:17:d3:26:
         72:95:34:49:af:49:c5:b3:82:eb:e7:b8:c2:56:bd:28:ad:09:
         95:2a:ff:cc:0c:ee:bb:51:6b:7d:d4:c0:df:66:f9:81:3d:fe:
         ba:53:cc:c9:5d:be:21:26:5c:fe:c8:67:5d:b4:3e:3e:40:7b:
         3a:60:33:c2:06:51:0d:c1:ef:6e:79:af:4c:d5:64:c8:41:f2:
         0e:70:7e:c0:fb:82:6c:45:73:95:92:b0:42:76:22:b5:a5:5a:
         f6:91:61:9b:4d:a2:41:b5:28:2f:f2:fa:ab:0a:d9:8d:f8:fa:
         e7:9b:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:23 2024 by rpki-client on console-ams.rpki-client.org