Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File:                     AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier:          hZeGZbIStNQgCc/dnn/SwEmPPJmZi8GJ0VBShyG1QSE=
Subject key identifier:   AC:0C:E5:F3:9A:06:4B:7B:8E:A9:94:4F:39:D8:E5:2C:25:FC:C6:42
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer:       /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial:       0193553F1425D57C4392C7F3B9A28941DEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number:          120E
Signing time:             Fri 22 Nov 2024 19:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:17 +0000
Files and hashes:         1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: KSBq+t2ve+pZl5oVH56+80xXgW0q5INozS386+CKF9o=)
                          2: L1wkwd75L3kHT3kTXjpM7C79ar0.roa (hash: qqbF2XHNLHVxVx5TLE1A6r08JxFU4w687ub768rWzhs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:14:25:d5:7c:43:92:c7:f3:b9:a2:89:41:de:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
        Validity
            Not Before: Nov 22 19:00:17 2024 GMT
            Not After : Nov 23 19:00:17 2024 GMT
        Subject: CN=ac0ce5f39a064b7b8ea9944f39d8e52c25fcc642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:07:8a:c6:22:30:d9:e5:4a:3d:36:e8:e2:
                    67:c6:f0:fc:29:20:c8:0b:14:36:22:9e:79:23:64:
                    8e:e1:d0:f4:87:b9:5f:10:5b:e2:b6:ad:37:d4:32:
                    f3:44:82:42:b0:d9:17:18:51:af:7e:99:89:48:4f:
                    34:07:44:e1:22:39:ac:d6:5a:e9:e0:60:96:73:47:
                    14:d0:be:a1:3d:27:89:35:57:e1:62:ad:da:49:94:
                    be:59:0f:1f:d0:a7:bb:2b:b7:d2:85:6f:71:7a:9c:
                    11:44:ee:35:70:cb:95:16:4d:af:86:69:14:9d:c3:
                    37:5e:a4:ac:e2:a8:ad:9b:d4:a6:61:bd:b2:91:de:
                    5e:13:08:3d:99:c0:9f:f0:8b:5b:dd:c8:de:07:42:
                    64:9a:dd:27:bb:11:d3:7a:00:09:c4:c2:00:38:99:
                    e1:48:1b:f7:48:ed:a9:83:ff:38:f3:45:3b:53:01:
                    44:ba:78:c6:8f:49:37:7c:a5:d2:77:ae:0b:5c:8c:
                    68:25:0e:56:bc:2e:c8:12:c9:28:84:7e:84:ee:13:
                    24:85:ce:3c:75:2e:cc:eb:2e:c3:5a:ae:90:b2:71:
                    df:0c:9e:f7:3d:e9:00:3b:a5:78:a5:ee:96:00:7d:
                    2f:18:27:6c:1c:73:e9:88:bb:62:a3:04:31:82:a8:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:E5:F3:9A:06:4B:7B:8E:A9:94:4F:39:D8:E5:2C:25:FC:C6:42
            X509v3 Authority Key Identifier:
                keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:c7:28:90:3f:c3:03:98:a4:10:ee:3c:ef:c2:e5:73:25:
         96:52:67:f8:26:ff:ea:27:d0:c6:48:8c:4b:3c:39:72:df:1a:
         b6:5f:58:4a:cb:36:36:93:9c:91:28:d8:a7:cf:ea:71:e2:fd:
         5a:98:7d:23:23:2e:e6:be:50:3b:6a:0f:c5:39:af:89:ba:60:
         f4:7e:a7:b3:56:e2:5f:0c:05:39:5a:e7:7b:1b:ab:0a:1b:76:
         db:04:41:38:08:82:e3:74:94:73:da:f9:3f:65:09:4d:12:38:
         64:81:10:c0:3b:fc:ac:0b:12:2a:4b:ef:c6:03:91:1d:56:16:
         12:88:49:41:0b:e0:65:84:e0:35:79:fe:f5:6c:a6:8d:0c:a8:
         d4:b7:74:9d:4d:db:0f:55:a5:c9:96:5d:78:0a:37:0c:8a:5d:
         cc:e3:94:bc:a8:11:27:fd:08:79:96:aa:7a:25:2e:25:df:64:
         b1:f5:9c:f8:a1:16:29:93:f5:9f:02:2b:25:f2:b7:c0:6f:4f:
         1f:f8:80:35:6d:a3:3c:93:0b:8b:4b:13:18:df:b0:24:19:38:
         a0:e7:9a:05:00:22:2b:24:17:eb:0a:d5:58:73:4e:eb:c4:5e:
         ce:95:79:9e:17:4f:0d:39:a5:9b:f7:ab:ca:9b:06:18:ed:8e:
         56:cd:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:20 2024 by rpki-client on console-fra.rpki-client.org