Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File:                     201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier:          eH1FTECrJMztERjdYk0vGBaB9uaPNpsHpJsRdzdYdH4=
Subject key identifier:   61:4D:15:C0:C1:90:47:16:DC:D3:FE:24:53:68:91:9A:04:C2:FF:DA
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer:       /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial:       019356890140DBB9A4AF1E584B6B499F92D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:39 +0000
Files and hashes:         1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: OI+jCeP0INORZcwZ3hrr5z8UMDwf6uU+KFeegWb9Els=)
                          2: H4ouBEYWLRgHDShrEZqA7Qr0IP8.roa (hash: 7Vq4a6J+4AjNXALiCkOIJMJWZAEERpbOe2LJTLmBHbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:01:40:db:b9:a4:af:1e:58:4b:6b:49:9f:92:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
        Validity
            Not Before: Nov 23 01:00:39 2024 GMT
            Not After : Nov 24 01:00:39 2024 GMT
        Subject: CN=614d15c0c1904716dcd3fe245368919a04c2ffda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:ea:15:23:0f:55:73:64:4a:60:87:3b:ef:
                    df:55:0c:12:fc:a4:a6:ff:fd:a5:28:f1:10:04:94:
                    cb:6f:32:d7:73:05:aa:0f:27:8a:44:c9:43:55:6f:
                    fd:a9:f9:ac:30:ac:e4:33:26:8d:a8:28:d1:8f:06:
                    74:2e:a7:e5:65:1a:ab:8a:ff:80:ad:e6:f0:bf:a1:
                    be:bc:56:1a:48:e2:c1:04:e6:27:90:fe:7a:36:fd:
                    58:63:61:43:4e:14:1c:f0:81:83:2b:68:5e:ec:23:
                    b1:10:e8:8e:f7:0c:61:a6:bc:4a:46:0a:a8:48:3a:
                    ce:e1:e5:57:61:eb:e3:e2:64:36:01:d9:0d:65:21:
                    9c:80:57:7b:53:f3:82:f2:7e:ca:6a:de:d2:7c:23:
                    c8:4a:1f:0c:24:3e:71:2a:9c:c7:63:ad:6d:cc:98:
                    5e:1b:3d:d2:9b:b8:04:1f:9c:2a:4e:ac:85:58:14:
                    20:e9:54:d7:4f:c0:14:43:ab:95:4f:62:0a:6b:54:
                    63:80:28:ac:ba:08:eb:38:ef:df:c0:71:23:72:8b:
                    17:73:9a:6c:cd:67:19:bd:63:7c:e3:bb:82:57:2f:
                    17:22:1b:53:c5:2f:ea:fd:db:c8:2b:d0:ee:12:d0:
                    19:bf:54:5f:af:ce:12:e5:62:85:9c:ae:b6:30:fb:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4D:15:C0:C1:90:47:16:DC:D3:FE:24:53:68:91:9A:04:C2:FF:DA
            X509v3 Authority Key Identifier:
                keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d7:3b:6c:97:7a:41:4f:73:9f:10:65:39:a8:7a:0c:97:e3:
         10:80:ca:99:91:71:2e:56:32:c4:a5:9e:67:22:2b:1f:d2:0b:
         b3:52:52:9a:15:de:bc:14:41:b8:4a:56:c0:4a:85:52:1b:90:
         00:32:f8:56:a2:0c:10:85:2e:70:38:d0:8d:21:0f:7f:4e:6b:
         37:ac:a9:b1:2e:48:3f:aa:ce:97:df:57:60:32:2b:9f:7d:a8:
         79:79:d1:3f:fd:8a:5e:94:c2:6f:63:d9:97:3b:fc:39:6f:98:
         c1:75:46:c0:6b:23:9d:ba:a3:53:be:a2:b2:71:83:3c:21:e5:
         06:2f:31:af:e6:09:28:8b:55:02:6f:81:1b:5a:fc:8f:43:96:
         88:00:52:66:c1:28:ed:a3:42:87:6b:1c:6f:1e:a9:e8:e2:6f:
         c3:e2:bf:26:6f:ae:67:56:ce:07:9b:65:3a:7f:7e:da:d0:1d:
         37:2a:0c:4c:e7:4f:54:84:c6:ed:d7:f1:8a:87:1a:85:94:f0:
         b9:9c:91:5a:79:e1:83:11:05:ca:d6:2b:f6:67:d3:c2:e0:bc:
         12:84:8e:ec:0f:cf:90:d8:24:cf:47:a9:34:06:be:e1:17:8d:
         37:da:f4:4e:c1:ac:5e:ea:1a:33:5e:1e:29:6a:34:17:ce:dc:
         c5:a8:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:03 2024 by rpki-client on console-ams.rpki-client.org