Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File:                     urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier:          7Jrw+kxrhnZWsMshXzlBYIiOeiRnUPmTkJ4oB+iEBdE=
Subject key identifier:   A7:4E:29:9D:E7:D3:E8:2F:D0:2F:4C:27:EC:9E:8D:26:41:DA:10:71
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer:       /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial:       0193568A799A4E96532177FE2A8FE354C050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:02:15 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:15 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:15 +0000
Files and hashes:         1: Q8JHwKbtBLcw3gXwHp276WLXiwE.roa (hash: 7Gdyb8RQncRF27uPSfdK6WvvL4InUHAqcL4PM7Q/VxM=)
                          2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: Pfh+oBE/QpxRaTyBnjBJwiCkVL9BWL31dPe0QqD04LA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:79:9a:4e:96:53:21:77:fe:2a:8f:e3:54:c0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
        Validity
            Not Before: Nov 23 01:02:15 2024 GMT
            Not After : Nov 24 01:02:15 2024 GMT
        Subject: CN=a74e299de7d3e82fd02f4c27ec9e8d2641da1071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:8f:50:39:3e:0b:ca:65:50:37:46:62:de:
                    e4:71:eb:c2:02:c9:0f:b2:c7:06:dd:65:ad:3e:4d:
                    e9:aa:e6:df:d8:05:f2:da:6a:c9:46:d5:0c:52:c1:
                    1f:90:cd:96:60:8a:ce:8e:d6:ce:5a:98:8c:37:5f:
                    d0:97:ec:06:c8:79:48:26:ce:65:74:d2:91:7d:30:
                    81:c6:e3:00:71:74:04:80:0f:16:4e:18:4c:89:f9:
                    21:b4:7a:fd:c3:74:4e:3c:33:7a:56:88:7c:c2:7c:
                    12:60:dc:e3:bf:b8:5e:6a:c6:d1:28:b0:ae:9e:85:
                    d8:3e:ba:c2:1b:7b:f4:15:6e:60:c2:e4:73:1c:75:
                    b5:5c:37:ee:86:ef:c3:ba:b2:47:93:b8:bd:16:04:
                    9f:52:9a:ac:05:e8:5e:1c:8f:50:f9:d8:8a:a1:e4:
                    ab:a5:22:12:70:ed:3d:54:38:d2:94:59:8f:8d:e4:
                    41:a3:74:07:7e:2f:44:26:a6:7e:01:3c:b6:e7:c7:
                    47:f1:57:fd:14:b4:e3:10:2a:fd:f9:97:35:a6:76:
                    53:20:7c:d7:a5:7a:d4:b4:0d:df:50:d2:d6:8b:db:
                    ee:11:d7:9b:aa:35:c1:f5:80:31:3a:01:af:59:0f:
                    d9:2f:b6:59:d6:2f:0d:93:d7:25:e6:bb:3c:74:2f:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4E:29:9D:E7:D3:E8:2F:D0:2F:4C:27:EC:9E:8D:26:41:DA:10:71
            X509v3 Authority Key Identifier:
                keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:b8:b9:37:b9:50:fd:4f:09:82:da:90:96:57:a2:1f:e9:
         86:35:e3:8b:d1:30:0a:8a:5f:98:bf:c5:eb:97:51:f2:c0:84:
         6e:7e:8c:9e:4f:46:e0:71:5a:24:6a:19:38:bb:8c:62:0d:2b:
         ac:8c:bc:ce:37:21:59:c9:ee:43:e6:0a:58:36:2a:76:3b:f5:
         93:47:d9:6d:6f:9a:de:73:64:b7:42:2d:f9:25:44:f7:34:d7:
         9d:2e:ec:b3:e8:e1:2c:1c:79:af:78:94:e9:4f:a0:af:cc:09:
         57:ee:5e:d7:07:f7:27:04:0f:42:60:7b:f0:82:ef:59:d6:2e:
         18:70:ee:97:3c:e9:42:29:7a:d0:20:18:ba:5c:b4:a7:fb:27:
         be:6b:ef:2c:bc:2a:e5:38:bd:a3:10:d6:4a:dc:7b:12:f4:05:
         69:a1:e9:c0:cb:12:96:9a:62:2d:17:32:88:2c:12:50:5d:92:
         d7:f7:a9:61:ca:1d:fd:1d:f2:38:5d:bd:ed:ea:91:83:61:ad:
         cb:55:24:2a:9f:9b:f5:6c:3c:f3:39:3e:1e:7d:62:1b:09:fa:
         87:fe:ff:ce:76:01:1a:be:f5:fa:11:60:00:aa:73:d6:ef:d0:
         49:b1:92:3d:64:b7:39:bb:22:4f:41:75:76:9d:2b:2c:99:41:
         2d:be:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:34 2024 by rpki-client on console-ams.rpki-client.org