Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File:                     hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier:          uD6jMWqRR5hY69PtD8AWx77FXouFNH0Omvs256+t7dI=
Subject key identifier:   CC:38:FC:F4:25:28:A1:4E:22:B2:BD:4F:B6:7E:CD:B4:2A:32:0B:EE
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer:       /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial:       019355AD79B75C0B07C5350762570BDC5008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 21:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:52 +0000
Files and hashes:         1: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: tPCSvG2EU6TEHQ1+BNDKQ3uVT/YweRKShWBtcjCrScU=)
                          2: iFJj2mbQIZKbb6EzVTfQdeeykVc.roa (hash: ZGRbQ8bse2z1YSZ5/uCm+5mz0v9RWiSGPxQlXJmBZv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:79:b7:5c:0b:07:c5:35:07:62:57:0b:dc:50:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
        Validity
            Not Before: Nov 22 21:00:52 2024 GMT
            Not After : Nov 23 21:00:52 2024 GMT
        Subject: CN=cc38fcf42528a14e22b2bd4fb67ecdb42a320bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:a1:0c:23:5c:d7:c2:25:b9:bc:fc:e3:12:
                    86:af:0f:19:fa:a3:33:a4:19:1f:f3:45:71:39:05:
                    44:14:7d:2c:75:d1:6d:f6:8a:73:58:48:6e:4e:17:
                    c2:23:8e:9c:0b:54:9f:76:e0:0f:c6:86:64:d1:7d:
                    13:6c:39:e8:7d:89:c9:9b:3d:dc:83:de:87:ed:0b:
                    94:93:7c:9f:7d:20:a2:7a:f3:31:60:84:0c:d3:90:
                    20:7f:3f:37:7e:99:78:c0:7f:bd:b4:2b:6c:8d:d9:
                    a4:7b:2c:f0:c0:10:aa:f6:36:e6:d5:59:e5:5f:f7:
                    e1:a8:10:66:c9:18:58:0b:f5:8d:99:09:65:6e:f3:
                    83:6a:b1:fc:14:a0:09:ab:06:57:f7:b3:73:2d:86:
                    bb:49:31:28:26:2b:5b:d9:ca:7c:a8:fc:46:c4:c1:
                    27:35:32:d2:cc:b3:04:85:9d:84:96:c5:6e:d7:25:
                    87:e7:a2:b4:b3:f5:78:12:d9:0e:2f:5c:eb:78:93:
                    e4:01:7c:dc:01:ff:d7:da:08:35:73:59:70:49:de:
                    cd:22:54:b4:64:13:4e:c6:7c:14:6b:56:f7:3e:84:
                    49:e5:5b:28:89:fa:62:06:ca:cd:49:90:be:c6:41:
                    26:38:3a:73:d0:d0:48:1b:e1:e9:20:eb:91:d7:d3:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:38:FC:F4:25:28:A1:4E:22:B2:BD:4F:B6:7E:CD:B4:2A:32:0B:EE
            X509v3 Authority Key Identifier:
                keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:90:b0:ba:c5:36:c3:65:18:05:90:45:ad:6c:00:a9:49:56:
         d1:2d:63:6b:87:12:89:13:c6:d6:d0:69:69:5b:5b:0c:fe:70:
         6f:f2:d2:8a:75:96:3c:e1:7e:38:81:08:27:73:ac:6a:32:22:
         fd:6a:7d:de:ed:c3:12:7b:59:91:76:5d:f7:75:09:1b:a3:4e:
         25:02:81:48:b0:74:c6:92:da:7e:63:17:d3:90:e9:ec:97:92:
         08:af:f4:84:b2:99:90:64:6a:0d:d2:f9:7c:40:82:15:f1:53:
         13:8e:34:77:60:fe:16:d1:b7:de:00:af:18:db:2f:b6:cf:e6:
         b1:42:25:60:e7:b0:95:0f:ad:6e:3c:bf:e4:ef:cb:b0:70:01:
         d5:85:64:bb:c4:d8:c1:4f:bd:eb:e3:92:ac:c0:7b:b3:d2:47:
         5b:e1:d3:34:13:92:54:e0:8e:25:14:da:4c:d4:55:a3:81:75:
         d1:ce:bc:29:aa:55:b3:29:9b:fb:7d:55:ce:f4:6e:af:b0:b6:
         86:1a:96:f7:37:0d:37:37:56:f0:c2:f2:ef:43:2e:ac:84:82:
         2f:e9:72:12:bd:fe:35:77:09:17:f0:6a:e3:05:ba:5a:44:63:
         ef:78:a3:e7:92:55:c5:d9:9d:f2:80:3e:93:ec:28:ba:4b:ea:
         20:7b:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:59 2024 by rpki-client on console-fra.rpki-client.org