Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File:                     pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier:          TRzt2pF+cn8sVM0nwn41onRGcF3looZlNoa/VPtWoqE=
Subject key identifier:   1A:60:13:C0:BA:21:91:F8:42:CA:7A:F8:88:E7:15:46:09:EA:A6:F4
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer:       /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial:       0193587968FEEF6B6203458CB1B64310C485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:02:51 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:51 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:51 +0000
Files and hashes:         1: 3PhEpra73rPdyQ5Ye9g59msFyRQ.roa (hash: CZ/Z/E34zji5y3cxLZh0KN0nRSV3LzX6+OxR+Mdf23w=)
                          2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: huSftEqOKGdVpBmgXDyRJGQtoUaog1S/9FjgN1K1YYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:68:fe:ef:6b:62:03:45:8c:b1:b6:43:10:c4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
        Validity
            Not Before: Nov 23 10:02:51 2024 GMT
            Not After : Nov 24 10:02:51 2024 GMT
        Subject: CN=1a6013c0ba2191f842ca7af888e7154609eaa6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:77:ad:0e:88:0a:8d:c8:f0:2d:bf:1d:13:
                    28:91:29:30:a7:85:14:b3:18:f7:cb:63:23:90:38:
                    ad:fe:25:ad:1d:5a:98:3d:a9:88:10:98:2d:d4:2a:
                    81:15:56:4b:50:e2:74:52:59:49:61:47:19:40:37:
                    d2:6c:e0:97:7e:3e:71:83:4d:fb:57:a6:58:2d:a6:
                    73:a1:57:16:55:f7:1d:f0:67:0b:b2:e8:50:77:bb:
                    0c:db:6c:50:33:e6:bd:d6:8b:c7:98:4b:ae:7f:5b:
                    24:06:1b:51:23:a7:6e:b3:7f:b1:ac:7a:d2:d0:5d:
                    f3:ba:d4:66:ac:ce:04:d2:f8:ac:0a:51:ea:5a:7d:
                    40:35:46:fe:30:23:ba:54:81:80:2b:95:a9:01:80:
                    4a:d5:c2:c0:b3:a6:9c:95:d0:7a:bd:00:2d:80:6f:
                    2a:1a:84:5d:77:d2:fd:1e:62:7e:c7:67:60:4d:e8:
                    6b:19:f2:5f:f1:54:3b:39:7e:ad:8c:43:d5:59:4b:
                    cb:37:c6:45:d2:8f:06:2d:f4:82:9f:1d:0e:16:77:
                    9d:21:63:c6:40:65:c9:41:1d:b0:6e:05:89:7b:da:
                    63:a2:81:c0:84:f5:8f:15:95:6a:43:4f:d1:98:7c:
                    1d:a0:72:3b:d5:3a:da:77:de:aa:36:93:74:15:93:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:60:13:C0:BA:21:91:F8:42:CA:7A:F8:88:E7:15:46:09:EA:A6:F4
            X509v3 Authority Key Identifier:
                keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bb:d8:75:5b:8d:b9:64:04:ed:27:32:f0:7a:02:96:ad:76:
         d2:ea:a8:cf:26:ba:0d:d5:2e:b0:32:61:6a:cb:5b:68:ad:02:
         27:10:ee:6c:17:5f:84:f5:ef:35:64:70:22:80:47:63:89:d8:
         79:e0:e2:a8:dd:e7:ea:9e:45:b6:c0:12:11:0d:a4:06:e8:f7:
         c6:29:8c:87:50:4d:69:5d:f8:87:6e:d9:c5:0b:d9:f9:ac:88:
         17:a0:82:91:8d:d1:ee:9b:31:65:49:06:e5:71:46:6a:b0:ed:
         cc:ba:38:4c:fe:2f:9c:51:7b:66:93:30:9e:0c:ca:71:69:96:
         83:9c:29:3b:b1:77:dc:05:d2:bd:dd:7e:82:3d:01:fc:6f:14:
         43:08:5c:09:d1:62:fe:d1:5c:f8:15:5c:f2:05:b3:4f:b1:2a:
         25:7e:8b:3b:b9:ad:ea:14:a4:b3:8d:95:c0:ef:c6:62:d0:0e:
         46:37:9c:5d:aa:48:a1:06:3b:4f:6c:97:3f:3f:2c:ef:41:b8:
         4a:02:3e:f4:3e:20:11:c8:59:3b:e9:ce:70:b4:e3:1b:8d:a0:
         11:01:cb:b9:f6:a0:0e:22:d6:6d:35:d6:fc:fd:68:cb:b4:0a:
         d2:ff:59:af:d1:d9:42:e8:e4:c0:c0:db:64:03:82:a7:20:9e:
         12:da:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:05 2024 by rpki-client on console-fra.rpki-client.org