Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
File:                     SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft (raw, json)
Hash identifier:          M4zRxKlcGNEkKNoMlEJwMg9bYVcGMTxXnvqceaET5Wo=
Subject key identifier:   60:94:71:2C:7A:43:F9:29:76:EA:CE:13:20:AD:06:A0:7C:26:34:D9
Authority key identifier: 4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
Certificate issuer:       /CN=4aab65873cb2782f13c378f5543c691443d16f79
Certificate serial:       019352ACC2053D874D831055A1521ED83DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
Manifest number:          0BDF
Signing time:             Fri 22 Nov 2024 07:01:13 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:13 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:13 +0000
Files and hashes:         1: SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl (hash: Li+U7Rf+bNCs+ex3c7s/bA4TXzZciCebp0v8LQA2D+M=)
                          2: bN7oUkyOjKWf5IXm9vdRB_yLWtk.roa (hash: LjibpLjy3Mo93VJC0PxkHu1xI/PC2FCi9UXUSDbAUo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:c2:05:3d:87:4d:83:10:55:a1:52:1e:d8:3d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aab65873cb2782f13c378f5543c691443d16f79
        Validity
            Not Before: Nov 22 07:01:13 2024 GMT
            Not After : Nov 23 07:01:13 2024 GMT
        Subject: CN=6094712c7a43f92976eace1320ad06a07c2634d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:7d:0e:27:dd:88:41:2f:fd:95:3f:07:df:
                    e7:ed:eb:03:1f:6f:d4:bb:17:c0:7c:91:d1:3d:e5:
                    2f:99:6b:bc:f0:a6:9c:50:b7:7b:6e:49:ed:e0:d7:
                    52:83:a4:db:d3:80:bc:b5:1f:6e:b1:de:dd:5c:0f:
                    ee:e0:a1:25:23:f6:ad:c3:58:9c:7e:3c:b6:18:48:
                    77:27:ea:9f:41:64:ac:83:0d:69:14:5f:2c:e7:41:
                    39:b1:60:1c:1f:ad:d9:b2:42:fc:51:49:a9:16:48:
                    55:a6:fe:bb:91:40:38:42:03:75:87:bc:f9:c0:e6:
                    38:2c:14:8e:63:cf:c6:9c:ec:60:d0:a7:77:cd:cc:
                    8a:0f:69:d9:1e:a8:55:0e:29:96:58:9b:c2:06:64:
                    13:ed:84:19:97:5d:8e:a7:b6:51:88:b5:aa:cd:d5:
                    d3:b9:3b:7f:e7:5f:bc:39:32:13:46:80:46:02:15:
                    2a:0c:1f:a2:c9:af:20:fe:63:68:8d:66:2b:51:2a:
                    a6:52:aa:dd:83:fd:a3:9e:42:9d:20:75:f2:0f:a4:
                    36:00:cd:cf:3c:d4:50:09:2c:a0:50:a3:2a:e7:8e:
                    b1:e6:f9:e8:64:bb:31:0e:57:3b:29:95:79:26:6e:
                    48:5c:aa:da:70:d9:51:92:58:bd:cd:4d:49:fa:29:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:71:2C:7A:43:F9:29:76:EA:CE:13:20:AD:06:A0:7C:26:34:D9
            X509v3 Authority Key Identifier:
                keyid:4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:d6:58:ec:83:1f:02:86:1b:17:fd:fb:a9:bd:c5:90:37:
         e5:a4:97:ac:a6:82:cf:78:02:59:c2:6a:f6:da:bd:a9:c0:0b:
         1c:e8:01:03:60:46:4d:f7:6b:f6:00:16:b0:f1:1d:cf:fa:3e:
         dd:5a:9d:b4:1a:cd:b0:e6:6a:54:9e:30:16:43:be:38:0a:ca:
         3b:7a:16:f8:ff:1c:24:6c:44:2e:63:35:86:e5:07:38:de:80:
         bb:69:78:07:29:f8:09:16:84:23:46:cb:5d:80:e9:22:56:d6:
         86:6e:13:c5:1d:47:77:30:1c:85:ff:f6:f3:64:3b:a8:4c:48:
         d7:aa:6b:49:65:52:7f:d2:6a:af:1e:f1:c3:86:35:d0:db:5c:
         e5:d6:e8:9b:5a:6e:08:a3:3d:8c:cf:df:8c:bf:51:af:30:4d:
         47:6b:d1:42:c1:65:3a:5e:4e:fb:92:8b:5c:ab:28:61:2e:5e:
         1c:66:79:45:67:a8:3c:99:78:93:c1:38:42:15:b9:50:be:6c:
         61:30:57:e5:b7:95:0e:6c:5d:69:c4:d5:6c:13:94:22:cc:54:
         73:08:1d:a3:83:ab:e8:6f:ea:5c:56:1c:1d:ba:be:62:fb:f5:
         33:62:ba:77:c2:ed:79:5d:db:9e:47:45:25:fb:8d:29:fa:cb:
         e2:07:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:33:46 2024 by rpki-client on console-fra.rpki-client.org