Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          mWAnJf5jDtZ4VjwTrJ9Sycbz/ClQ7srB/wmWwiIHoKY=
Subject key identifier:   74:EF:6E:12:7E:D0:8F:4B:43:F8:FF:B1:22:CE:60:27:CA:66:33:67
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       0193568B0D9E08A6167F00505572F82D28F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:02:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:53 +0000
Files and hashes:         1: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: 2d0KsLegHNgNIf59iyYasbE+UPcdIq6edUVMkI4XIbY=)
                          2: sZmZMcCIuaFfPfZ5LyDD-D0LpUM.roa (hash: UxGwB74pP30MAmFuoHZvFDEzFafjRZgO61jqPzZ5mXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:0d:9e:08:a6:16:7f:00:50:55:72:f8:2d:28:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Nov 23 01:02:53 2024 GMT
            Not After : Nov 24 01:02:53 2024 GMT
        Subject: CN=74ef6e127ed08f4b43f8ffb122ce6027ca663367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:fa:98:26:c1:0b:99:05:b4:c3:51:53:0e:
                    91:bd:ea:ac:00:cb:69:67:03:e5:e4:3e:f3:76:76:
                    ad:a7:d6:46:80:a4:54:16:f5:88:91:cd:30:d8:40:
                    d8:25:f5:9c:d9:6e:f9:54:c9:3b:dc:01:2a:21:16:
                    ef:c1:dd:9b:7e:4f:24:52:21:ec:95:39:81:26:8d:
                    27:37:d9:56:94:5a:7c:21:8c:7c:cc:ed:cf:c8:1d:
                    82:e5:d5:1f:4a:01:e6:4b:f6:5d:57:bb:b0:02:2e:
                    63:45:02:81:c9:0f:21:1b:70:15:f7:fd:f1:ef:17:
                    10:83:41:be:07:9e:ad:02:28:5c:7c:59:89:c5:fb:
                    3e:2b:ad:07:db:f1:63:cd:9b:5f:43:9c:8e:75:8c:
                    40:96:e4:9a:15:55:c5:1f:b0:16:d5:4c:db:e7:05:
                    71:d6:08:a6:72:17:6e:cc:7a:a2:9a:ee:fe:dd:dd:
                    2b:ce:85:99:7c:49:fd:1b:7a:b6:d4:15:da:e9:4f:
                    62:57:57:93:20:18:cc:e0:df:1d:94:67:92:c2:a6:
                    70:c6:da:cb:1f:bf:78:e4:d4:68:60:ec:90:4c:61:
                    f2:8e:0d:fc:44:2c:81:28:41:9b:4f:e5:3f:30:2d:
                    55:5d:13:24:74:3c:c6:55:bb:06:20:1d:9d:67:c8:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:6E:12:7E:D0:8F:4B:43:F8:FF:B1:22:CE:60:27:CA:66:33:67
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:4a:20:49:6d:2d:3d:72:6f:de:34:c4:51:f9:3d:cd:05:
         6e:c2:31:72:06:a0:5d:3b:ae:87:fa:61:7d:eb:17:18:9b:7a:
         35:0c:ab:72:b0:38:2f:68:d9:71:2a:77:e9:c7:61:38:94:c8:
         0b:18:db:08:c1:a9:62:70:30:3d:cf:63:9b:62:db:5a:67:c2:
         9f:42:e1:aa:da:88:7f:e4:f1:56:b6:a9:be:6d:43:bb:9c:0f:
         10:ad:5c:72:e5:26:7c:a4:b4:27:4c:d0:88:36:f2:e2:67:ba:
         75:9f:4b:d3:45:46:44:c6:ee:8e:d7:66:7b:c1:1a:8e:10:71:
         c3:58:e8:4b:26:a9:81:de:6b:ab:f4:6d:e7:d1:78:e1:23:4e:
         b1:b6:46:f3:0d:5c:bf:dc:65:a7:64:86:f4:ff:da:90:3f:e5:
         ab:57:0c:b2:e1:e6:82:15:1d:74:b9:f2:ee:0f:f4:e5:4b:43:
         e3:0b:f6:9f:8a:74:ef:9b:7a:9b:fd:7f:7c:d9:de:ac:5e:95:
         f5:e0:3f:c2:d0:ec:e2:1a:78:9c:3f:56:74:38:09:f8:4a:bd:
         d3:8b:4a:b9:a4:2a:8f:cf:9a:5a:f9:62:5f:9d:72:ac:dd:36:
         35:b2:57:54:09:58:b4:63:ce:07:c7:fd:86:b6:b9:5d:ae:6a:
         e1:b5:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:06 2024 by rpki-client on console-ams.rpki-client.org