Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File:                     1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier:          altVUxtxF0puudxV7gQFr700J9hqW+CO6Q5k9ZM1J4M=
Subject key identifier:   35:73:AE:97:D2:F8:E1:48:D5:89:3E:F2:DE:BC:74:C8:DE:B0:59:A0
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer:       /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial:       019357D2B251E77507B1B0B4FA40A5193B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number:          0ABD
Signing time:             Sat 23 Nov 2024 07:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:46 +0000
Files and hashes:         1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: FwcdD7YqBh1u1r6xws9pqK9a5hd2llvZH8qjRDjr/iA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:b2:51:e7:75:07:b1:b0:b4:fa:40:a5:19:3b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
        Validity
            Not Before: Nov 23 07:00:46 2024 GMT
            Not After : Nov 24 07:00:46 2024 GMT
        Subject: CN=3573ae97d2f8e148d5893ef2debc74c8deb059a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:f1:21:01:f0:d7:50:39:e5:6d:4b:34:50:
                    d0:c9:b9:15:c2:1f:3a:4c:f5:49:a9:0c:05:69:91:
                    f2:0f:73:02:c2:ef:7a:af:11:f5:b9:e6:ea:f1:47:
                    6f:05:3f:e2:44:9b:12:23:9d:c5:db:5f:17:a6:d8:
                    4e:49:e8:24:d1:7a:c0:c2:0c:f9:fa:d9:da:00:73:
                    cb:b2:b4:4f:af:e9:0c:c0:96:33:28:71:72:32:14:
                    89:f0:ba:71:21:4f:18:fa:04:e3:65:f9:19:a2:38:
                    74:a5:c4:d6:6c:cc:3b:e7:34:4d:8e:62:b5:53:16:
                    47:61:50:0d:50:69:63:6d:92:38:8b:dd:93:d8:2c:
                    5e:ba:db:bf:dc:2e:4e:53:5c:7f:a4:27:af:67:ac:
                    52:d0:35:03:f1:d1:8e:a3:88:15:c1:52:b8:fa:1a:
                    e7:c5:11:cf:5f:10:9b:a5:0f:c6:53:b5:20:70:0a:
                    d3:c9:61:25:fe:90:df:97:d6:85:75:50:31:c8:17:
                    fc:57:c1:23:dd:d8:dd:ee:03:93:10:94:23:57:99:
                    3b:be:15:f0:6c:ba:bc:ec:40:04:18:45:56:db:3f:
                    e3:e3:27:1b:6b:21:1d:9f:4a:01:a8:52:87:16:f8:
                    2a:d3:47:95:d7:42:cc:74:16:04:f1:0a:4f:ff:e3:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:73:AE:97:D2:F8:E1:48:D5:89:3E:F2:DE:BC:74:C8:DE:B0:59:A0
            X509v3 Authority Key Identifier:
                keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:92:f4:fb:91:1a:2f:47:b8:66:2c:fd:7a:10:e1:ae:32:
         37:67:04:ad:eb:6a:b1:69:60:00:81:ef:eb:e1:74:f3:fb:8d:
         48:3d:77:87:17:c4:fc:b0:1a:96:b0:72:65:16:15:8a:3f:46:
         1f:47:d5:37:48:ce:cf:e1:86:6a:70:07:ff:8f:b2:33:e8:49:
         80:53:7c:d3:9f:bf:cc:f2:12:ee:30:1a:19:bf:33:97:7f:0f:
         1a:42:db:04:f9:f6:fa:dc:97:95:3f:a8:f2:7a:00:25:88:62:
         b8:41:6c:27:28:e5:df:c2:64:46:47:d1:23:f4:43:2a:d6:22:
         eb:03:e4:31:4f:52:d3:3b:c4:44:4e:57:3d:ef:71:11:43:ee:
         93:5a:b2:b4:fe:aa:a8:59:2c:f1:f7:cb:77:9e:f7:3b:33:ec:
         85:89:8d:0a:48:c0:e0:4c:24:30:a0:3b:2f:72:05:6c:76:20:
         cc:72:d4:8d:d0:41:c0:9a:02:65:81:21:c9:81:be:06:6e:b3:
         7c:7c:b5:fc:25:d8:ee:2b:ec:52:92:9e:e1:14:68:f5:b6:6f:
         68:42:d4:dc:f4:2a:c7:e3:f7:93:ef:6b:2b:bd:b3:0d:04:f6:
         5f:c7:a5:51:07:7f:14:38:c7:9b:d0:4e:f8:ae:65:f9:fe:23:
         b9:06:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:39 2024 by rpki-client on console-ams.rpki-client.org