Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File:                     KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier:          dyym8mn0ZzMLfL0FN45oon/T/G7b7UMhEszrtoK766c=
Subject key identifier:   BB:CA:9B:33:24:76:92:F4:CA:03:1F:4C:1F:9D:8A:D5:2C:A3:F6:9C
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer:       /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial:       01936AEB4F39FBBEB9B3A19E3D609AFF6B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number:          0764
Signing time:             Wed 27 Nov 2024 00:00:26 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:26 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:26 +0000
Files and hashes:         1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: UoFWxaRSmhU4GkE2cjXQICVkDGZhFsUyoEhS4bZnjuc=)
                          2: lPr8ffRxsFkeErgCTAksae7j5_8.roa (hash: v2dmbIePJiAtep1B+4TykktUOcfyrxBWWU75RDqfT64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:4f:39:fb:be:b9:b3:a1:9e:3d:60:9a:ff:6b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
        Validity
            Not Before: Nov 27 00:00:26 2024 GMT
            Not After : Nov 28 00:00:26 2024 GMT
        Subject: CN=bbca9b33247692f4ca031f4c1f9d8ad52ca3f69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:6c:56:d2:ab:bf:29:b8:4e:3f:bf:83:00:
                    9f:44:29:57:59:be:80:fe:ea:1a:bb:34:a7:bc:e7:
                    c8:19:e5:f9:76:99:00:c8:d0:39:c4:89:9d:99:ed:
                    05:1f:5c:80:e3:7a:e4:f5:4a:75:9d:20:e9:f5:ad:
                    e4:ed:8d:d2:c0:dc:71:e4:2a:96:04:09:35:dd:60:
                    7e:11:07:e9:e5:a8:d1:94:56:c4:0b:ce:9e:34:cf:
                    2b:f6:4d:ab:3d:49:b9:70:69:f0:60:68:7e:af:e4:
                    d1:68:5c:c7:3b:f4:fe:0c:1d:df:44:3f:ac:34:79:
                    e3:4a:5a:bd:89:bb:e5:b4:ce:6c:a9:d7:a2:67:d8:
                    61:07:53:f9:a4:ea:e4:99:a2:1c:f6:7b:5d:32:ed:
                    d8:5b:2c:ce:c5:17:39:19:e7:92:fe:79:70:fd:da:
                    f7:c6:d9:c4:92:72:8b:2d:c9:e2:cb:a5:07:61:73:
                    a3:e3:b6:de:e3:49:b8:54:00:8e:1d:b4:4f:66:9d:
                    0e:bf:67:f1:fa:ac:20:d3:cb:73:48:fe:be:3b:78:
                    d1:ad:54:b5:9d:a4:a7:19:de:0f:f5:9d:3c:ca:41:
                    1f:3d:c2:a6:cd:3c:64:ac:68:62:f5:f4:59:e7:a6:
                    7b:00:cd:5c:6c:ea:7c:84:1c:e2:f2:c5:0f:e4:8d:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CA:9B:33:24:76:92:F4:CA:03:1F:4C:1F:9D:8A:D5:2C:A3:F6:9C
            X509v3 Authority Key Identifier:
                keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:d5:00:1d:fb:7c:a0:a9:03:cc:c6:3e:d2:cd:4b:2a:a7:
         24:b7:83:9b:62:3f:c0:c7:86:17:be:07:37:ec:d9:3a:4b:a8:
         aa:df:00:c9:d0:06:f5:a1:b4:f1:4e:43:16:f7:64:97:ac:69:
         d8:a3:75:29:d8:a5:08:ff:dd:6c:d9:65:ec:22:35:91:75:59:
         0a:fd:fd:c9:8b:b1:2c:4c:52:8a:83:85:3e:3a:4a:60:f4:f2:
         85:76:64:38:02:b7:52:6d:07:44:8d:74:b1:cc:59:8d:c8:f7:
         46:df:3a:4a:5b:91:03:9d:b0:3b:53:0e:a6:76:61:28:e4:78:
         3e:e7:9a:d0:41:71:69:0d:95:ef:80:4b:68:03:dc:1a:45:62:
         09:d7:61:ac:5e:74:3c:4a:bf:b3:53:35:43:8c:8d:d4:c9:ae:
         d7:f2:17:7f:95:3b:eb:f5:2d:43:e1:03:ac:93:e0:48:b3:21:
         c3:23:e9:f2:b3:a8:43:4a:d0:e9:c7:77:06:45:47:41:8a:b8:
         6e:d6:d0:7f:ab:d2:ab:e1:9e:42:87:bd:4a:28:22:fc:0b:46:
         28:6a:de:94:80:98:b1:e1:63:fd:fd:d7:b7:7f:c4:26:48:5a:
         84:58:2d:cc:26:0a:14:54:c7:70:ad:3b:87:a2:7b:a6:5c:ce:
         80:74:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:51:22 2024 by rpki-client on console-fra.rpki-client.org