Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File:                     SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier:          bVIenATWzcpTXXUgroMQ9rrCQE4fBgLbI+wOOonRW2E=
Subject key identifier:   15:97:45:B9:D6:B0:40:A6:B4:69:9A:3C:8C:4E:A3:B4:0B:CE:67:60
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer:       /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial:       01936A46A5F8C802B7327ECB5B23E5953EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number:          0D36
Signing time:             Tue 26 Nov 2024 21:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:34 +0000
Files and hashes:         1: 5VP2o0Bt7GCX4vYPs_CK7CAEWFw.roa (hash: 7hFz6un2wDtcnW2Hv32Sxk+2M8BMmqcxffv511Y9lOI=)
                          2: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: 6HqYKZVCboYx7Gg6Gaxvsa50i8+11GL+tfcvtvE5pXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:a5:f8:c8:02:b7:32:7e:cb:5b:23:e5:95:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
        Validity
            Not Before: Nov 26 21:00:34 2024 GMT
            Not After : Nov 27 21:00:34 2024 GMT
        Subject: CN=159745b9d6b040a6b4699a3c8c4ea3b40bce6760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:59:81:0f:d2:d1:00:bd:98:13:bf:08:fb:
                    06:98:b9:09:d3:82:7b:5c:51:de:8e:48:40:52:c7:
                    74:19:f6:e9:1d:15:11:81:9e:1f:d3:98:9e:4a:6d:
                    a9:9b:f6:6f:63:2c:3a:f1:7e:43:24:09:b5:5c:ea:
                    a5:5f:8a:75:19:61:00:78:0a:a1:68:f7:de:06:e9:
                    3b:7c:56:cb:8a:53:30:31:91:55:a1:b6:1e:5c:1a:
                    47:d4:ae:00:7c:63:f8:5b:24:29:62:f9:31:15:e1:
                    d2:a8:83:1f:4b:42:cb:f2:f3:40:ea:67:2b:71:34:
                    e3:d4:ba:be:69:e5:1d:93:3b:9a:82:53:17:0d:e2:
                    04:eb:62:74:04:6e:58:7f:73:be:fa:d6:e5:3e:4d:
                    a0:4e:02:dc:af:81:9f:18:06:15:59:c3:f5:19:aa:
                    ca:36:52:a3:40:04:ac:e3:21:5f:ff:b6:bc:7d:50:
                    be:72:14:ba:e0:db:bb:d9:c0:4f:57:3e:3e:52:55:
                    01:40:0c:c5:a2:ee:ef:ac:81:9c:1d:5c:e9:8a:b1:
                    89:0f:6f:c1:9a:98:67:17:ab:06:14:a4:37:df:c6:
                    38:c5:e8:e1:a9:28:5c:2b:bb:71:7d:f2:e9:4c:ae:
                    b5:38:ac:5b:5f:1e:62:b9:47:65:53:66:21:28:0c:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:97:45:B9:D6:B0:40:A6:B4:69:9A:3C:8C:4E:A3:B4:0B:CE:67:60
            X509v3 Authority Key Identifier:
                keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:05:5a:48:3b:8c:03:4e:70:62:34:04:01:58:51:a7:72:79:
         5e:a3:ce:8e:3c:e9:24:0a:63:d9:6f:f5:d2:6e:46:1a:21:c7:
         80:f6:00:df:de:92:c6:db:fa:6c:35:fa:a9:db:af:90:44:dd:
         fc:c2:80:1c:5f:ac:2b:ab:66:80:86:67:42:60:4e:c5:73:d0:
         b4:1b:62:92:3b:8e:61:b2:db:c9:f3:3c:d2:cd:ca:9e:8f:41:
         81:09:5e:84:d3:62:e1:7c:d9:52:ee:94:1a:2c:d5:bb:ea:c3:
         b3:f5:ce:e9:ff:68:32:8e:33:19:07:ca:d6:03:6f:76:78:0d:
         83:42:f1:32:88:41:92:ae:11:ba:4e:b9:6f:e2:e6:4f:21:3a:
         1f:8a:fe:11:5a:27:3b:63:80:16:45:43:fd:a5:7e:15:8a:eb:
         38:37:55:36:90:d8:f2:ca:31:07:93:8f:a8:f0:ac:23:ef:c8:
         07:20:1f:72:6a:a2:1d:06:e3:30:24:40:e8:31:0d:d9:b1:4a:
         06:a6:7c:8a:b0:8c:95:23:da:b6:45:dd:41:56:1f:06:f4:73:
         38:9f:60:44:d2:39:48:11:d8:7b:b5:c1:ba:7e:9a:db:3d:48:
         fe:ba:ed:f2:10:65:08:8e:8f:11:25:62:83:35:9a:0b:16:53:
         d7:23:99:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:33 2024 by rpki-client on console-fra.rpki-client.org