Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
File:                     hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json)
Hash identifier:          OgVTwwOfEOIbStALHkEFNI857uxljmfLt1mpTXKkYXo=
Subject key identifier:   74:D9:55:11:F9:B1:A6:FC:83:72:6E:C0:DE:A7:5A:23:8F:FD:94:92
Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Certificate issuer:       /CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Certificate serial:       0193568A51A7528F474068569F71E9C4B218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
Manifest number:          0E0B
Signing time:             Sat 23 Nov 2024 01:02:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:05 +0000
Files and hashes:         1: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: L+WUrl6JKay8APwWZAikqAeYYKUOX4NmhaUoGNkpcug=)
                          2: k7YDV32Pm8NmPMhm4W7KU5PZhEQ.roa (hash: CDCu3RyyElSeUdKdTusVV0q45q5XO7ivv1pJCm5l/rE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:51:a7:52:8f:47:40:68:56:9f:71:e9:c4:b2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
        Validity
            Not Before: Nov 23 01:02:05 2024 GMT
            Not After : Nov 24 01:02:05 2024 GMT
        Subject: CN=74d95511f9b1a6fc83726ec0dea75a238ffd9492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:24:bd:29:2c:84:32:a4:17:e5:20:b0:a8:
                    17:27:22:f9:cb:5f:b4:14:46:55:bb:98:2c:dc:4b:
                    bd:34:63:1e:42:08:62:83:39:01:2f:a0:40:07:0a:
                    9c:6e:8e:7a:19:8f:89:9e:2b:8c:9b:99:aa:36:e1:
                    76:d9:fc:8a:16:8f:41:a3:88:3f:21:af:53:43:0f:
                    bf:e2:93:80:d1:6e:89:ad:d1:88:2b:d9:28:5c:42:
                    dd:99:04:c8:97:25:e8:0e:95:be:dc:da:af:55:79:
                    18:b7:68:ab:0a:b4:e0:bb:14:db:23:56:c3:3e:08:
                    b7:a7:d8:0f:45:3f:8e:cf:52:c0:81:d5:f0:6a:5a:
                    fe:d4:03:cf:a1:79:f1:ec:f9:2e:99:7e:7c:79:af:
                    72:57:7e:81:f9:29:a6:62:7c:2d:e1:c8:12:7f:c0:
                    2e:12:8e:c0:c0:a1:f7:c3:9e:cd:bd:a6:bc:07:0f:
                    dc:67:eb:75:ff:05:df:7d:c4:5a:4e:0b:de:11:68:
                    2a:1e:1f:84:7c:c0:9f:34:fe:f0:b2:93:b6:7b:76:
                    3a:6b:a1:6a:e9:35:82:1e:30:11:90:96:28:e6:b4:
                    f7:b0:51:c2:46:8a:d5:bf:ee:87:ef:4f:62:80:bc:
                    56:40:91:36:cf:33:ef:6a:10:3f:f4:72:91:44:29:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D9:55:11:F9:B1:A6:FC:83:72:6E:C0:DE:A7:5A:23:8F:FD:94:92
            X509v3 Authority Key Identifier:
                keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:2a:15:d9:ea:bd:e3:1c:84:c6:21:4e:99:a4:de:43:4a:
         46:0d:88:77:6c:dc:68:0b:a6:50:a0:7d:4f:e0:93:b4:9c:4d:
         ea:32:66:41:52:49:3f:76:cf:4b:cf:c5:38:8a:ad:b9:9c:8a:
         12:02:28:43:24:37:eb:ec:45:be:ae:84:4d:e1:96:2f:d1:0b:
         43:f9:32:e0:e1:be:d6:5f:8b:a6:4f:f7:5e:2b:e3:98:f4:70:
         c3:be:28:04:5b:81:4d:16:33:ea:a4:59:1a:fd:85:56:4c:cb:
         31:cd:e7:a7:a7:3b:a6:dd:52:5f:b2:fa:49:85:c6:9a:5d:d3:
         9a:66:30:cb:0f:f7:73:8f:16:f9:4a:b6:ed:1e:33:d2:73:28:
         9f:08:b7:bd:e1:20:68:32:00:c2:1b:4a:f5:b7:ce:bf:14:9b:
         04:86:ae:cb:a8:4d:6f:c3:6e:18:dd:ec:84:f8:ea:f5:01:f4:
         0e:3d:dd:2c:eb:ab:a9:c2:fa:07:68:2f:00:2e:ba:d9:c8:a4:
         2f:9e:85:dd:46:4d:e1:08:79:29:de:28:cd:4f:f1:16:ef:c4:
         28:c7:fb:23:3a:85:0c:a9:fb:cc:4b:d5:4a:97:62:8b:84:0f:
         bd:61:e1:1d:19:9b:c4:d6:8d:c2:b5:ae:db:8c:2a:fd:3e:80:
         f4:e2:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:01 2024 by rpki-client on console-fra.rpki-client.org