Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File:                     RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier:          Rzd/0UBHvQ2r8yJqoU7LK9xY3Vc2Su/OtRhhoQt4yWw=
Subject key identifier:   06:C7:F9:7F:81:6B:5F:10:C8:F3:69:3E:D4:A5:99:82:39:B8:9D:4A
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer:       /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial:       019359F78029834A8B54ECB4306848A3C2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number:          8B
Signing time:             Sat 23 Nov 2024 17:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 17:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 17:00:11 +0000
Files and hashes:         1: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: 8skxsUawGFjMDJRCn+u5fyGcBMCCYYarEaW962kLOZM=)
                          2: WqwRx_f3MFpQyLjfXP7vz5X1p7w.roa (hash: FoPf3M9OSpw62mhW109ql8fzGS/Yexzg6UUdEuLtVV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:f7:80:29:83:4a:8b:54:ec:b4:30:68:48:a3:c2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
        Validity
            Not Before: Nov 23 17:00:11 2024 GMT
            Not After : Nov 24 17:00:11 2024 GMT
        Subject: CN=06c7f97f816b5f10c8f3693ed4a5998239b89d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:39:6e:47:59:04:d7:07:bf:ee:80:83:86:
                    96:90:12:bc:06:01:85:96:a8:a1:21:46:08:eb:e6:
                    cd:59:1a:f7:32:18:fa:fb:d2:7b:46:f2:f5:b5:62:
                    8a:a1:bd:81:26:2d:ce:2e:1b:a9:34:31:ac:c7:c7:
                    4c:1e:9d:1d:c7:b1:fb:1b:c3:6f:21:87:ed:72:94:
                    17:29:11:37:28:dc:4f:f0:02:92:06:c6:aa:5f:3c:
                    8e:a3:db:e4:f2:c6:4b:df:56:4a:8b:44:43:27:be:
                    c8:2b:46:c3:e2:27:71:0d:02:1f:04:66:93:a6:7f:
                    70:ee:0b:52:c2:07:1c:f8:fe:3b:ec:87:2d:ff:c3:
                    37:e7:eb:8b:27:6c:68:62:c5:de:0f:ae:74:e2:6f:
                    d9:01:79:9e:68:30:65:52:96:76:87:22:3c:9e:07:
                    4f:b3:b7:c1:5e:6f:39:73:d0:3e:61:a1:89:1d:eb:
                    81:fd:ca:b6:3a:8c:6b:d8:8d:aa:78:4c:3d:7a:20:
                    17:d7:95:d7:52:8e:55:e0:a1:c9:9f:45:b0:6f:7b:
                    e9:1e:55:06:4a:fb:47:34:f2:c7:c7:7b:da:ed:56:
                    a4:f7:b3:c7:1d:9a:d7:0f:25:a9:82:b5:52:cf:ad:
                    b2:62:15:1e:09:e5:bc:b9:66:e8:3d:77:9d:d5:da:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:F9:7F:81:6B:5F:10:C8:F3:69:3E:D4:A5:99:82:39:B8:9D:4A
            X509v3 Authority Key Identifier:
                keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:55:69:f6:c2:c8:b7:b3:d7:2c:7b:74:71:53:4e:de:73:36:
         1c:9c:86:eb:86:23:0f:e5:e2:3d:84:96:fb:35:c3:b8:2e:b0:
         c5:4a:d8:33:1c:a6:4d:7c:55:1d:dc:57:c7:68:6f:70:9a:06:
         6c:2b:70:b2:d3:f1:73:8c:04:93:27:8b:88:b8:fd:3e:ae:65:
         8b:b1:5c:26:bf:a5:c2:84:14:32:6a:7e:8c:29:fa:b7:13:6f:
         3a:3f:52:4d:87:43:ff:81:c6:0c:03:e7:2b:82:55:7e:2c:ae:
         7d:59:30:0f:c3:e2:c1:7a:a4:8d:95:87:92:e8:94:b5:4b:57:
         ec:06:52:1e:12:00:28:1b:33:fd:20:67:57:64:ea:6a:54:4c:
         4a:17:b6:e2:eb:53:fd:21:06:f7:ca:d6:98:c6:ca:5f:43:4c:
         78:ea:ce:1e:ec:33:70:64:da:da:60:51:d8:e9:5f:86:e7:1d:
         38:73:f6:36:6e:34:49:e2:3b:3a:bd:e0:33:c0:2f:f1:e2:bf:
         48:be:da:f8:29:c9:2a:a5:1e:58:b6:1e:e9:69:b2:fa:a1:fe:
         f8:e8:05:03:16:c2:06:45:18:5b:61:14:fd:b9:fc:63:d5:50:
         30:75:b7:db:9d:ed:6a:73:30:9c:df:e1:b1:99:35:8b:5b:c9:
         a7:9e:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:46:17 2024 by rpki-client on console-ams.rpki-client.org