Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File:                     DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier:          DwQcmqx94h6OI3ZDYuRrLF9DaW+L3kscq74kWZy7/vw=
Subject key identifier:   4A:6A:0C:95:D8:B7:42:6F:58:F1:2E:1F:24:BA:FD:79:5A:76:5C:43
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer:       /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial:       019358E51D39EA30E0ED7FD9AA4877183AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number:          1161
Signing time:             Sat 23 Nov 2024 12:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:30 +0000
Files and hashes:         1: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: wR1XzLmEyLH/BUPPy29jPLf19MAZK9JhGJwhlIC4XU4=)
                          2: FI2IrSt2BCqlghLzle9-owpE88c.roa (hash: JmmzIMnNlIkxQPXnMaens+tdeLfA2AdFHjeRGmgVPfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:1d:39:ea:30:e0:ed:7f:d9:aa:48:77:18:3a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
        Validity
            Not Before: Nov 23 12:00:30 2024 GMT
            Not After : Nov 24 12:00:30 2024 GMT
        Subject: CN=4a6a0c95d8b7426f58f12e1f24bafd795a765c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:a0:e9:d8:5f:64:ee:ec:05:f1:ed:57:87:
                    af:47:85:d5:13:a0:4b:dd:e2:78:d1:46:5c:6c:a9:
                    27:23:e6:c9:4a:64:04:30:e5:81:07:2f:0d:fa:e4:
                    3b:25:e9:2a:e4:75:67:0f:f1:4d:eb:b3:b1:8d:3b:
                    6e:53:a3:67:c2:62:bb:57:54:ea:43:39:15:68:0f:
                    08:7c:50:3b:29:98:8b:b6:1c:d8:b2:ad:c5:68:f7:
                    ec:92:9d:af:73:9c:56:3e:49:27:1b:cd:01:1c:14:
                    6c:88:fa:00:90:fb:04:9d:f1:2a:e1:49:cf:34:a0:
                    43:be:9b:26:f7:9f:0b:b0:05:c2:d1:2b:c1:7e:86:
                    78:37:91:7b:6a:55:65:06:18:85:32:9e:15:b1:08:
                    a4:b6:b4:f6:cd:ef:6f:48:48:18:a8:01:f3:05:61:
                    c0:53:56:c8:e5:5f:0c:53:9f:9f:23:5b:4d:71:e7:
                    50:95:7b:cc:b0:e1:bd:4e:1c:bf:75:a9:54:5e:d0:
                    af:9d:82:51:a2:38:73:1e:ac:22:7d:66:bd:83:62:
                    4c:28:27:35:ca:c8:78:a0:f8:ef:0f:f1:1b:7b:7b:
                    ca:38:8f:d4:40:e1:2a:d5:bf:fb:e3:cd:a9:22:57:
                    82:97:62:1c:41:d3:09:f2:a0:cc:aa:1a:c1:ea:72:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:0C:95:D8:B7:42:6F:58:F1:2E:1F:24:BA:FD:79:5A:76:5C:43
            X509v3 Authority Key Identifier:
                keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:8e:bb:45:22:5b:9b:03:33:22:1a:94:d1:15:b6:65:f3:
         f8:7b:77:f5:5e:cf:11:d3:96:95:5b:d8:be:2a:f8:7c:f9:ab:
         18:cb:20:4b:96:2a:1e:23:c2:c0:71:7a:e6:cb:f2:a8:ae:71:
         04:04:69:a8:6f:ae:df:c5:f9:9b:1d:b6:13:5e:31:a4:1f:70:
         cf:b0:9e:06:8e:a4:88:36:eb:51:e8:86:e2:91:d1:7a:3e:7a:
         81:a9:a5:39:54:a2:0d:f8:b9:7d:ec:38:a2:82:68:58:5d:42:
         6f:bc:6e:a7:3a:01:b5:06:7d:43:3a:e8:eb:8f:6c:65:42:64:
         69:ca:d2:7b:5f:e9:36:cd:57:6c:4b:5b:2f:60:a6:31:be:7b:
         65:31:fe:fe:c5:88:46:d1:96:55:c7:cd:72:26:09:52:ea:1c:
         27:f7:38:f5:0e:13:ab:07:fc:e5:7b:c1:f9:2d:13:44:01:6c:
         47:c8:f5:57:41:6e:98:9e:a2:74:81:6d:27:17:da:72:c9:0e:
         2f:8d:5a:aa:8c:c1:83:a5:e4:70:93:d9:eb:3e:79:ab:37:27:
         e8:58:14:1f:e9:c1:88:b3:02:db:a1:3b:9f:29:a6:9b:e2:8b:
         a8:34:09:ce:f6:66:da:30:f7:f1:c6:7f:d2:20:a9:1b:cd:8c:
         17:6b:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:29 2024 by rpki-client on console-fra.rpki-client.org