Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File:                     aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier:          mVG4LOM1EQeutM35j96oCi42dM7xqRxT+9kYySlIzcQ=
Subject key identifier:   4B:AE:77:48:AC:90:DA:83:BC:A5:FF:A5:1D:6F:90:9C:96:1A:E5:CF
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer:       /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial:       0193561AD40991A29B31F7E7CBADB916F3C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number:          97
Signing time:             Fri 22 Nov 2024 23:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:18 +0000
Files and hashes:         1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: rXtrFP8FzeA/OETyvViuWNEwlL16skOebdRlvx2VJYk=)
                          2: np95vJ63njzIyEv2cfQb2cWtUbY.roa (hash: 5+hTVLtGUJs00SbtJjx8hk0pvI7MNlC+/8yzlk+cXtI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:d4:09:91:a2:9b:31:f7:e7:cb:ad:b9:16:f3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
        Validity
            Not Before: Nov 22 23:00:18 2024 GMT
            Not After : Nov 23 23:00:18 2024 GMT
        Subject: CN=4bae7748ac90da83bca5ffa51d6f909c961ae5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:bd:e9:56:52:b8:e3:c7:70:c0:65:39:bf:
                    be:a5:c2:d9:08:4d:6d:40:f4:29:3e:8e:27:2e:73:
                    ea:7b:a9:e7:eb:e1:f6:cc:40:da:97:56:3c:0b:b1:
                    6c:86:9b:75:15:0f:6e:19:13:ff:a4:0e:98:1e:17:
                    15:e7:25:10:a5:6c:e7:63:89:22:f0:89:55:89:39:
                    25:49:2d:4f:2a:c8:23:4e:50:6c:b0:d2:a1:9c:a4:
                    83:b7:55:53:0f:10:28:34:30:35:cc:a1:75:a9:ec:
                    ff:36:e6:7e:87:df:47:74:5f:4f:02:76:72:d1:53:
                    75:e3:a7:c9:de:6e:74:2d:87:74:c0:9a:1f:fe:53:
                    ed:30:0e:5d:d6:1b:e2:97:35:68:12:4b:95:75:65:
                    d6:c9:24:b4:68:9d:be:55:20:31:8c:59:f7:9a:30:
                    4d:c6:21:80:0c:7b:5d:a6:58:17:6a:c5:77:6b:47:
                    06:a6:1f:c5:f8:ba:31:59:32:a1:65:c1:4f:96:74:
                    85:17:77:e9:76:d9:01:6a:77:51:bd:dc:dd:5f:63:
                    84:e2:78:ec:e3:4e:f6:a3:b3:3f:9b:73:b2:93:96:
                    e2:fd:b0:e3:9b:84:51:31:a7:4f:6a:45:ce:bc:16:
                    b9:9b:d7:28:d9:85:1d:13:53:0f:2d:79:fd:82:f5:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AE:77:48:AC:90:DA:83:BC:A5:FF:A5:1D:6F:90:9C:96:1A:E5:CF
            X509v3 Authority Key Identifier:
                keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:73:47:13:8d:6d:bd:da:33:68:4f:30:62:4c:77:86:46:
         3d:9a:08:5c:41:23:17:ae:9c:cb:97:3e:44:11:b9:2d:25:77:
         3a:e1:ac:40:2a:fe:24:f7:6e:57:ee:58:93:98:17:e3:77:97:
         80:8b:ae:3c:8e:f6:24:76:5d:68:3e:a2:f9:27:5b:56:a6:0b:
         9c:b2:e4:c4:33:0a:6f:08:69:f3:0a:f0:d3:29:79:41:8d:95:
         e4:4b:f5:78:ad:74:42:9f:4a:bc:8f:f8:ac:89:89:6d:b5:8c:
         f5:db:1d:ac:b8:f6:20:1f:9b:7c:bc:66:94:2e:1e:fe:0d:71:
         b2:83:47:cd:10:e4:46:eb:68:fe:d9:9d:f5:fa:f7:5a:a2:92:
         51:6f:56:19:f3:10:17:b9:ae:ed:cc:74:00:4c:71:52:dc:86:
         31:81:3f:cf:f6:9d:99:6e:2e:a2:fc:97:aa:e9:e0:28:95:53:
         35:4f:95:ba:d7:e4:1b:7f:f1:5b:d4:0d:7d:ac:d5:bf:01:a2:
         e8:b2:f3:14:3a:5c:e9:02:49:ec:12:17:86:2f:75:4f:f3:98:
         19:bc:c8:f2:50:eb:68:5e:34:eb:ae:e5:db:a5:07:b8:22:b0:
         5d:eb:6a:a6:d1:87:df:38:eb:9e:67:76:00:9d:e8:c7:93:cf:
         de:41:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:11 2024 by rpki-client on console-fra.rpki-client.org