Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File:                     KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier:          Y91oilRM1VrLZ2GLkyJQPLV7IoBExytV9mEs5RNSXIo=
Subject key identifier:   D0:4C:5C:2F:29:F9:21:20:54:B8:CD:CC:1A:F4:DA:1C:73:EA:D2:EC
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer:       /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial:       019357D299B57E06C0848E8D11DCD1482B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number:          08E4
Signing time:             Sat 23 Nov 2024 07:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:39 +0000
Files and hashes:         1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: U6Phmfgkt4tng+hUqeyNZsNCMTjCMAf0tA0DSHu85wY=)
                          2: jcLlqt733d07ao7jahOYR72HyZ4.roa (hash: j3ZGcv59H1DIhiiCV/nHFxaK8GHfIwi53RnGJP+0or0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:99:b5:7e:06:c0:84:8e:8d:11:dc:d1:48:2b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
        Validity
            Not Before: Nov 23 07:00:39 2024 GMT
            Not After : Nov 24 07:00:39 2024 GMT
        Subject: CN=d04c5c2f29f9212054b8cdcc1af4da1c73ead2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:0f:40:ff:bb:20:37:ab:7a:69:ad:c6:ac:
                    1d:1d:90:d8:29:99:7f:50:f2:90:8b:20:38:6f:65:
                    f7:ac:2e:4b:cd:b1:78:0b:f7:39:13:52:ef:bf:32:
                    aa:4e:71:a7:9f:9e:38:b7:27:49:64:81:5b:3d:5c:
                    16:e4:78:63:bb:8b:cb:58:f3:9f:f7:08:08:64:81:
                    a9:e3:59:17:e7:90:57:07:65:81:d5:5e:b3:6a:14:
                    c5:58:8e:b1:63:f3:8d:08:d1:83:ba:14:b9:4e:58:
                    d6:df:c6:9b:65:11:ab:e2:b2:a9:e9:e0:1a:e6:18:
                    6f:ff:0f:29:f0:5f:0d:4d:ea:0c:ff:1a:24:a2:fe:
                    01:f1:d5:f9:f5:e0:85:9c:d9:f5:de:10:b1:c8:4f:
                    cb:3a:0f:9c:a6:67:03:84:b0:76:45:a9:f5:c7:72:
                    e5:cc:52:14:66:92:ce:ba:be:ad:f7:06:a3:ba:5d:
                    25:e7:69:31:bd:8e:11:cc:7c:9c:a7:68:d0:d4:3b:
                    45:e9:44:a6:89:06:af:a5:6b:f9:ce:b7:74:85:40:
                    a8:3d:06:96:9a:d7:09:43:4f:fe:94:b2:61:63:52:
                    8f:19:48:d4:5d:79:4c:cf:db:fe:2b:0d:15:68:e4:
                    7e:24:f3:90:b1:04:ab:31:95:ee:e3:82:aa:4e:0b:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4C:5C:2F:29:F9:21:20:54:B8:CD:CC:1A:F4:DA:1C:73:EA:D2:EC
            X509v3 Authority Key Identifier:
                keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:69:b2:62:7a:1c:c0:3a:79:25:8d:22:a4:60:1d:47:ce:
         e6:2d:be:63:a0:f0:8e:df:0b:70:6d:12:0c:91:22:06:72:2b:
         cd:1e:49:8b:3d:20:2a:df:1f:b7:70:b9:19:67:07:31:6d:71:
         68:6d:9f:1f:e4:0a:65:43:77:cf:85:fe:30:5d:4e:e8:b6:d1:
         56:4a:ac:53:d9:10:59:10:cc:53:80:da:bd:50:42:57:a8:e2:
         d2:7e:82:ab:a4:36:e4:b9:09:15:9d:b7:21:e0:52:23:5c:94:
         ae:21:aa:bd:b1:4b:c4:cc:72:ea:e5:1a:9a:a7:28:22:b9:d1:
         7b:83:3b:ae:3b:96:c4:fe:b5:52:8a:24:06:2f:ed:fa:6a:84:
         83:13:83:72:68:5d:42:27:ca:a1:cc:ad:c6:93:8b:a3:95:56:
         d8:65:52:a3:25:14:bf:04:ee:62:13:60:60:59:a7:c9:b8:ad:
         b4:26:11:cd:e2:c0:38:7a:5b:bc:aa:e9:f8:4e:ae:55:a7:7f:
         4b:99:14:4f:39:7a:b6:7b:6b:a3:b0:22:5b:76:15:a0:ab:19:
         66:37:3a:03:a7:81:8d:75:c9:a0:4f:23:e5:45:f9:a8:12:d0:
         a1:6a:82:58:1e:73:27:ad:f5:90:37:22:15:26:8b:a0:4a:a0:
         92:0a:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:19 2024 by rpki-client on console-ams.rpki-client.org