Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File:                     RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier:          +G687UIqTbG0bZ/cce+C+ZXN3xeSvTbsGtU3KVs/soQ=
Subject key identifier:   F9:21:24:F1:BF:D9:6A:59:D7:D5:A9:AE:C4:8D:40:01:7F:B6:8A:39
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer:       /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial:       0193549BD6A0D57B753A62B457B709A8A46E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 16:01:59 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:59 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:59 +0000
Files and hashes:         1: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: BOXuVqaUxJvVgb6enR92r9KzeRRmvTC39E1tYX8Cl50=)
                          2: gY7QijF71QkzlQtHTqNoQJFQvjg.roa (hash: i4A8VjP3AJ38m/sfLcQYDx6as2Xym4xpMtB8eGMdOMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:d6:a0:d5:7b:75:3a:62:b4:57:b7:09:a8:a4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
        Validity
            Not Before: Nov 22 16:01:59 2024 GMT
            Not After : Nov 23 16:01:59 2024 GMT
        Subject: CN=f92124f1bfd96a59d7d5a9aec48d40017fb68a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:38:ee:48:86:c7:3b:d1:fb:50:d0:8b:47:
                    19:e9:ec:41:3c:ac:4b:5c:10:ea:20:d5:8c:ed:87:
                    06:af:52:00:bd:62:22:b8:83:ea:29:61:93:95:75:
                    b9:61:b4:0d:46:d9:4f:9f:b7:d7:bc:c8:4b:fa:63:
                    f8:e3:e3:79:71:c7:83:09:17:a7:b5:6e:69:37:26:
                    9a:57:60:8e:f8:43:c9:df:11:19:ed:04:49:61:aa:
                    36:93:9b:16:3f:3a:3b:ee:59:8b:1e:0a:b1:e5:a9:
                    3a:a0:0a:25:ea:81:dc:b5:1f:2e:51:9c:d0:77:65:
                    0e:e3:c5:3a:c9:7a:b8:7c:da:52:7e:22:e4:74:60:
                    51:09:ff:15:ac:d2:68:4d:73:4b:61:19:96:94:8f:
                    50:6f:ed:48:a0:39:3e:bf:23:b8:ed:18:fb:d8:a4:
                    40:d7:17:ed:d2:68:02:b0:52:73:1f:56:09:a5:37:
                    90:ca:a0:d5:7f:f8:2f:17:d1:4d:cf:5b:7f:6c:27:
                    84:51:f7:cf:b8:ca:c3:b8:fb:57:c1:c5:6e:a8:04:
                    bf:68:bc:92:40:a0:08:36:0d:08:c4:81:af:97:31:
                    92:49:45:cd:b5:1f:93:54:cb:8c:ea:15:d2:d8:ee:
                    08:38:98:f2:85:21:75:75:2e:46:24:6c:9f:99:93:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:24:F1:BF:D9:6A:59:D7:D5:A9:AE:C4:8D:40:01:7F:B6:8A:39
            X509v3 Authority Key Identifier:
                keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:98:0d:fe:b3:0c:23:a1:31:10:1d:d4:2d:7f:cb:8c:36:
         7a:ad:ee:59:9c:6a:27:e5:f4:7a:7f:ee:dd:4d:e6:10:ea:7f:
         df:87:5d:b3:8f:5e:5c:48:94:b9:6f:10:da:91:58:b1:42:ba:
         40:f4:ef:b4:57:37:d0:81:5f:df:6e:cc:87:28:cf:c3:0e:ba:
         68:13:2d:38:51:51:d0:36:2e:3c:eb:6c:5d:a3:d1:a9:c4:85:
         c8:d6:66:16:1f:55:2e:6c:8c:52:95:3d:26:88:d0:8a:19:0d:
         60:10:f3:42:1f:24:ce:0c:13:80:4a:3c:9a:88:39:fe:4a:0b:
         56:e9:d1:9f:6e:2f:42:57:50:99:4d:8a:a6:db:5c:d9:d9:88:
         fa:12:24:fa:8f:1d:43:b3:f6:4d:52:c5:ac:01:ed:73:43:ad:
         b5:eb:17:fa:bc:6a:e5:ee:68:93:aa:95:c6:4a:e3:ae:1e:08:
         4e:07:d3:68:95:77:32:62:55:64:9b:ef:48:f6:2e:00:1e:b4:
         74:5e:89:57:1b:00:d4:7f:bd:73:33:11:f0:f9:c4:88:fb:88:
         b8:c4:d1:94:ed:aa:d7:18:bc:8b:54:e6:8b:63:43:38:c3:a6:
         a0:a4:63:00:de:27:4d:c5:d7:2f:3b:fe:b3:06:6a:96:b8:75:
         2e:6f:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:59 2024 by rpki-client on console-fra.rpki-client.org