Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File:                     GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier:          va2Z38EjaLi6nsj5q6QBiQTcCkieUvYSOVi0hXne/U4=
Subject key identifier:   A5:FE:1B:3E:49:E5:58:1F:2E:25:A9:B6:23:58:59:8C:15:1D:9F:B6
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer:       /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial:       019369D940CA41DAD4AFDB6B5CF3B6472534
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number:          0CBD
Signing time:             Tue 26 Nov 2024 19:01:05 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:05 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:05 +0000
Files and hashes:         1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: mK1vzlpsRibGBxZqFtQukctwnswDfVzvF8tjYoh2NEg=)
                          2: QNvbTipJFPvz-I-sjTVYQeYfp7Q.roa (hash: CNrmRGqFkubNK7Ta61SWFfjTHb+dZY3gHKbFjlpFnjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:40:ca:41:da:d4:af:db:6b:5c:f3:b6:47:25:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
        Validity
            Not Before: Nov 26 19:01:05 2024 GMT
            Not After : Nov 27 19:01:05 2024 GMT
        Subject: CN=a5fe1b3e49e5581f2e25a9b62358598c151d9fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:f5:cc:48:98:f0:0d:90:0d:4d:3a:e9:49:
                    9e:a6:d3:24:b0:b8:6d:fb:fa:89:15:c6:ba:70:b0:
                    be:e9:01:e6:0c:02:aa:58:3c:d0:62:d1:a2:1f:85:
                    ce:41:1d:b1:29:d5:f4:4e:92:90:5c:f1:33:f4:eb:
                    0a:c2:c6:c7:11:c8:2d:fc:0f:4f:31:35:a5:63:7f:
                    55:25:a6:9b:65:6a:86:40:cb:66:c4:5e:10:43:70:
                    63:f0:4d:57:39:c9:c9:59:d2:e6:9a:45:ab:8e:d1:
                    51:90:d4:78:cb:69:27:19:7e:25:e4:68:3b:02:af:
                    3e:22:35:db:c6:ce:86:f7:2c:ea:7d:2a:a2:bf:dc:
                    18:8f:30:9b:7c:2d:21:d7:84:bf:d4:31:b6:d7:28:
                    9b:6c:a9:6a:bc:c7:03:cd:e0:57:22:eb:d3:27:d9:
                    4b:a3:47:1f:44:68:e4:4d:7d:5c:b8:95:a1:34:32:
                    11:f9:bf:6d:05:a0:84:e3:8f:f6:0d:21:08:e0:95:
                    c9:15:b4:d5:84:55:e0:02:24:51:cd:35:10:63:e3:
                    6a:12:83:98:09:d5:c2:f0:0c:a0:4a:b8:2a:8d:1b:
                    0c:50:5f:3d:e4:42:b6:6c:53:6f:f8:54:31:82:d4:
                    e4:d1:21:37:34:9a:fd:23:d8:d4:84:58:fa:81:0d:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FE:1B:3E:49:E5:58:1F:2E:25:A9:B6:23:58:59:8C:15:1D:9F:B6
            X509v3 Authority Key Identifier:
                keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:14:13:c2:e0:26:c2:15:50:50:6d:9f:3d:aa:30:86:ed:ae:
         58:d2:36:68:ed:6e:a6:88:d3:fd:40:ad:85:5b:0b:5f:d5:ea:
         91:41:c7:e1:54:a5:12:c1:ba:1e:da:0e:22:49:fc:62:62:b8:
         e0:bb:66:8f:9e:0f:90:5f:7b:25:c4:5e:bb:15:19:7b:5e:d5:
         18:bc:93:eb:58:03:5a:59:06:31:c5:4e:5c:c1:80:15:d6:15:
         e3:fd:93:ba:20:f1:74:5c:ce:08:ac:58:cc:8a:8e:fb:58:bd:
         32:02:a5:07:f1:da:ce:38:e4:96:5b:b3:ca:c3:cf:9a:d8:db:
         e6:e8:5a:3c:83:ac:cb:da:f9:b8:b7:2c:c7:52:04:05:cf:c3:
         49:cb:24:71:62:73:df:35:2e:66:e2:fa:82:92:47:4e:5b:1b:
         6e:b7:e1:46:e2:c9:0b:6d:c5:50:af:13:93:d7:4d:87:96:1f:
         03:0c:fa:f3:de:e7:39:1f:ea:33:00:65:d6:12:03:09:8a:90:
         d7:50:83:08:12:41:26:a2:51:d0:1e:09:e2:c4:4b:36:9e:94:
         0b:a7:5a:dc:02:c5:0c:2b:68:d5:ed:88:d4:e1:39:05:49:67:
         40:e4:dc:a6:00:c9:4f:b5:f3:eb:a4:09:42:cf:fd:63:d0:93:
         cf:c3:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:45 2024 by rpki-client on console-fra.rpki-client.org