Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File:                     hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier:          ivtdySaVcpn5VQaTq4+FYPE8FvmOP9gZIMbn1MEdFDs=
Subject key identifier:   8F:16:FE:44:15:33:4E:B6:0D:0E:54:3F:8B:BA:0E:BE:0C:39:F4:E2
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer:       /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial:       019358794F9B7D057A3CAE2312ABDD3CA11B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 10:02:45 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:45 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:45 +0000
Files and hashes:         1: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: fqAGg3suF8wLeaugydK5U9kULblpW/3xJyOHr/CmWgo=)
                          2: lXSMv5TFzlF7U2Yh0nY5GDwpj-c.roa (hash: FKMUlxVgcBTYivayVo/DvcyzO/qRZ0ZmrGpT6jFmeho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:4f:9b:7d:05:7a:3c:ae:23:12:ab:dd:3c:a1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
        Validity
            Not Before: Nov 23 10:02:45 2024 GMT
            Not After : Nov 24 10:02:45 2024 GMT
        Subject: CN=8f16fe4415334eb60d0e543f8bba0ebe0c39f4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:59:01:d2:28:da:a1:45:af:93:a6:c8:7f:
                    99:79:2b:30:e9:4a:d1:71:be:22:6e:ef:dc:f4:e3:
                    a0:0f:55:d0:09:66:e7:75:cf:17:8d:7d:58:2b:ff:
                    13:79:bf:7a:92:9f:aa:c7:09:dd:72:f9:bc:67:b2:
                    06:61:e6:0b:45:31:b4:aa:8a:c6:a5:53:64:a8:3c:
                    7b:a1:39:9d:48:56:9f:df:a7:8b:08:64:2e:a5:6c:
                    f8:10:fa:8b:52:ab:2e:8d:13:88:00:83:cb:ca:dd:
                    1d:96:f8:ee:fe:37:98:78:18:63:26:29:45:aa:24:
                    93:31:fc:2e:d5:16:22:26:ac:2e:c7:dd:31:97:66:
                    07:ac:34:ac:73:8b:03:7c:28:3c:7e:72:c4:f8:2a:
                    a2:39:27:31:08:7e:e0:64:d9:75:e9:ac:0a:43:89:
                    1e:0f:ad:86:46:23:54:77:77:54:95:6f:e2:25:54:
                    b7:2c:fe:c9:80:24:09:39:cb:69:7e:99:38:d7:63:
                    87:e4:4e:0f:7b:ea:ce:f4:2a:3c:18:9f:75:89:3d:
                    01:1f:cd:36:21:32:c4:0a:b9:56:15:cc:cb:f0:ab:
                    a2:d4:2b:57:ad:9a:5d:18:e7:b1:d6:4a:30:e9:0e:
                    e3:ab:f3:7c:2e:f3:44:4f:00:d1:bb:4d:c1:80:b5:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:FE:44:15:33:4E:B6:0D:0E:54:3F:8B:BA:0E:BE:0C:39:F4:E2
            X509v3 Authority Key Identifier:
                keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:95:9f:f6:b4:5b:80:c4:16:3d:79:d7:77:dc:fa:1b:08:15:
         bf:df:e3:fd:97:6b:23:c7:9b:00:71:0f:89:37:5c:d9:3c:2c:
         2e:f4:31:d6:c2:cf:62:eb:31:27:c9:c1:5b:ce:98:79:b5:5d:
         4b:24:64:0e:e4:1e:95:25:a2:79:ae:f8:37:3f:b0:b6:2a:6e:
         b2:ef:4d:11:63:c8:b9:1b:a3:8c:8a:9c:25:c1:18:69:33:0f:
         f9:81:88:ec:7b:4a:07:da:4c:a3:fe:ee:30:58:89:6f:29:cb:
         ac:16:a3:1e:de:4d:18:ef:b3:7a:05:53:b0:be:ad:bf:ea:6c:
         b4:8c:4e:f4:ca:c3:ce:1f:4b:f6:a0:0e:6a:cf:c8:fc:03:15:
         bd:b3:c4:eb:a8:e1:66:9e:f8:bc:21:27:06:4e:be:1e:e3:68:
         93:25:be:d9:78:ae:de:0a:c9:48:17:6a:43:47:34:51:88:a3:
         45:c9:8c:20:cf:f9:f8:d5:42:4f:8e:11:85:0a:d4:f9:84:25:
         74:fe:a7:8f:b8:1f:d8:35:a4:58:56:d8:71:e4:a0:96:c0:51:
         c3:d7:ec:68:04:9f:04:0f:3e:e7:22:3d:2b:ae:dc:79:ab:2b:
         8c:f2:80:e9:19:af:fc:1d:c5:a2:33:d9:b1:e7:0f:a0:98:49:
         55:7e:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:41 2024 by rpki-client on console-fra.rpki-client.org