Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File:                     A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier:          wkcp44snMkKVWJd5OAUrZYejMi97iEL0zZcr+xSybjM=
Subject key identifier:   EE:47:73:B9:3C:E9:8F:A4:DC:CC:F6:B4:52:34:91:26:65:43:79:44
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer:       /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial:       019358780E9FD075F0E9A0B77DF2DC9BDF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:01:23 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:23 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:23 +0000
Files and hashes:         1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: BanMCZg+KntNqVxkQunKy49ORy0HV4lEftKyXlyCO8s=)
                          2: fYbTnOlCQh378dWEbud-_NfORts.roa (hash: aCNT2qqGFUHsFnlMLmPu4gi2gWv5F3xCWZ5fRmUnVnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:0e:9f:d0:75:f0:e9:a0:b7:7d:f2:dc:9b:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
        Validity
            Not Before: Nov 23 10:01:23 2024 GMT
            Not After : Nov 24 10:01:23 2024 GMT
        Subject: CN=ee4773b93ce98fa4dcccf6b45234912665437944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:4e:b0:8b:fc:ac:15:aa:da:a8:79:c0:ce:
                    ff:12:0c:fd:3d:92:ec:80:39:98:6b:c3:3c:16:f4:
                    4d:6f:e9:29:09:22:9e:96:81:d0:d2:66:57:1f:3d:
                    cd:97:a3:1e:d9:4c:c0:7c:7d:8a:1d:0e:8f:6d:f8:
                    65:0c:99:27:dd:28:3d:21:e8:94:32:1a:df:ee:6a:
                    7f:e3:04:23:dd:a1:a1:97:70:15:47:19:71:61:3a:
                    b6:dd:20:fd:f3:f3:5c:03:02:28:26:d5:d2:90:89:
                    45:98:df:5e:99:3f:8b:fd:e0:40:15:86:a4:f6:92:
                    f0:df:42:67:8b:45:0b:50:a0:6a:53:70:e8:b6:b0:
                    cc:2f:fa:d6:bb:ed:dc:90:1a:fb:99:da:56:89:d5:
                    4f:8f:89:80:a2:2c:94:ce:f3:34:25:50:b7:b7:e7:
                    92:3f:8b:93:73:ed:4a:af:24:0f:f7:61:b3:14:45:
                    ce:ac:6e:b4:63:60:10:29:0d:77:7d:aa:b0:12:65:
                    6e:88:5c:f5:97:3a:47:5f:3d:60:09:63:2a:50:8d:
                    8e:84:09:c4:cc:4b:fe:3b:4b:6a:08:2e:a9:1b:f2:
                    70:7f:b7:d4:3c:06:e7:7c:24:43:49:d9:d6:24:29:
                    fc:9d:90:14:fb:1e:48:a8:af:88:a3:f4:ab:d0:83:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:73:B9:3C:E9:8F:A4:DC:CC:F6:B4:52:34:91:26:65:43:79:44
            X509v3 Authority Key Identifier:
                keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:03:d8:00:fa:7d:df:db:85:2f:d9:de:2f:a8:32:87:aa:
         56:7d:e5:44:1f:d2:de:c8:25:96:71:42:eb:10:4e:92:f7:3b:
         2f:ee:d2:7a:fe:46:26:04:28:43:2c:ca:89:3e:6e:95:4f:9b:
         26:a3:12:22:fa:28:3f:2d:f3:3c:db:57:03:36:e4:09:97:f7:
         3f:61:6c:42:52:9f:03:ab:f5:f1:cf:cb:4e:6b:a2:04:5f:84:
         bc:f5:38:13:67:e2:c3:78:f9:17:53:d8:ca:3b:fd:59:9e:7d:
         9a:0f:3d:6c:4a:ab:7c:27:fb:c9:ee:96:c8:71:a7:64:d7:67:
         98:4d:2f:f3:0d:e9:c7:f0:c0:f9:0b:21:2c:1a:bf:33:bd:97:
         d9:fd:67:9b:03:c1:fb:61:85:3a:91:d7:b4:87:e0:39:43:ed:
         23:3a:f4:e5:4b:10:f6:58:59:e6:fc:3d:90:bf:90:eb:4f:90:
         28:c2:51:f3:ac:0d:3d:37:0b:9e:89:0d:a7:8b:5e:17:b4:be:
         f9:6b:35:ae:0e:d7:05:25:ee:79:ea:fa:d5:8a:d0:8f:7e:fa:
         8c:11:06:52:8a:e0:b0:91:ba:99:be:3f:22:57:93:e4:dc:b5:
         ee:3a:6e:7f:11:93:43:b4:65:f2:9a:23:4b:12:ea:9c:a1:f8:
         79:cd:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:50 2024 by rpki-client on console-fra.rpki-client.org