Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          r3k+5TXSip6eGyefVEKehTUPICZLQS4nyWu0Fel6sRQ=
Subject key identifier:   31:07:2D:8B:7F:35:F7:A2:39:83:61:D2:D4:37:91:57:16:D8:63:5F
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       01935688D9CD73C79C69FFFE55CA33A17076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:29 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: FKb4TQ/O92h7Ke1Q8/l5C6UkKhkKeWHR5sJzOzzOTRQ=)
                          2: nII3pZwQDU7j1fij2uYYFJylgMk.roa (hash: cwmNAtyDJwjgsjaTPG6eEoLJLHxYgkQ6MZBYpvCELZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:d9:cd:73:c7:9c:69:ff:fe:55:ca:33:a1:70:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Nov 23 01:00:29 2024 GMT
            Not After : Nov 24 01:00:29 2024 GMT
        Subject: CN=31072d8b7f35f7a2398361d2d437915716d8635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:c0:66:97:43:6f:ba:90:75:f9:05:55:60:
                    c5:24:b3:61:ea:43:94:1a:b7:c9:a2:2d:1a:c8:14:
                    ea:b2:11:be:1e:8c:d1:ce:3c:bc:45:01:64:2c:ac:
                    5a:76:63:15:bf:20:5f:e2:d4:f2:2d:be:af:ee:aa:
                    dd:14:15:a4:59:54:94:69:ec:8d:39:3d:3d:e6:3c:
                    0f:78:9d:0d:a0:16:09:80:78:01:70:67:06:84:58:
                    7f:12:37:b4:e2:2e:d4:17:d6:93:76:3a:68:9e:05:
                    10:41:e9:ab:f5:0d:96:7b:ac:a3:21:44:75:40:1b:
                    85:42:df:d0:ec:b9:c3:ea:52:b5:b6:86:d5:c3:20:
                    7d:c7:eb:2b:8a:d3:0c:78:99:d1:56:95:40:c8:bd:
                    e4:98:dd:16:13:fe:c5:5b:42:4c:94:b6:64:ed:27:
                    40:47:f0:05:f6:d8:87:06:b0:03:99:79:d9:60:b2:
                    4b:46:4c:5c:ae:7f:38:4f:7e:8e:72:98:db:db:56:
                    90:6f:05:2f:9c:aa:a5:1d:31:0d:8f:c6:01:e9:cd:
                    7d:46:d2:31:fa:8d:54:52:05:13:06:ef:8b:2b:23:
                    da:da:a3:bc:da:ae:ad:03:23:b4:8e:dd:28:f7:64:
                    70:95:fe:e7:c6:73:1a:07:6b:bf:39:95:42:ab:5d:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:07:2D:8B:7F:35:F7:A2:39:83:61:D2:D4:37:91:57:16:D8:63:5F
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:9f:24:04:7b:e7:2e:a6:a3:b6:ae:1d:2a:32:56:6d:f6:
         b2:0e:8b:dc:55:c9:b4:a8:2b:0b:96:95:6c:53:2e:d8:4e:2e:
         2b:60:c1:1d:a7:86:45:06:47:ff:da:a1:cd:3c:9d:8e:1d:36:
         2c:4f:98:83:57:31:a6:e1:71:cc:57:17:3e:de:ea:b6:a9:5a:
         f9:7a:b3:cc:10:49:20:b1:ce:b6:91:32:c1:f3:dd:70:1e:52:
         b8:31:07:4b:fe:31:a7:5a:56:3b:74:f7:63:8f:1f:6c:23:d3:
         e8:6e:3a:99:98:2a:7e:be:56:36:c8:db:12:51:76:fe:d3:17:
         c5:8e:28:35:dc:e6:60:aa:b0:9c:c1:bb:59:bb:bb:53:c6:9d:
         12:46:c9:7d:8a:37:09:74:2d:62:6a:16:de:27:14:44:30:03:
         f7:ee:ee:71:6d:4c:23:dc:3c:5b:bf:7d:98:0a:b7:61:6b:30:
         ae:bd:15:18:da:8f:54:d7:05:b7:11:48:8b:43:9b:cf:97:ed:
         3e:bd:79:c9:5a:cc:a0:20:1e:5e:56:35:28:8d:01:b9:fe:5d:
         86:2e:33:1f:93:f5:fd:75:1c:04:ba:0b:a8:ba:8f:28:f8:0b:
         3b:b9:93:c9:ac:f8:cf:55:8c:8c:bf:6d:87:28:4d:b4:b9:cd:
         0e:41:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:34 2024 by rpki-client on console-fra.rpki-client.org