Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
File:                     23_SbKX3kUcLC3KbcvYfgABYoyI.mft (raw, json)
Hash identifier:          TTAGtmCJ+Lbcu6HdsrVe/sxq7WZJvKqF5T5LSyssJwk=
Subject key identifier:   B4:2B:87:95:DE:9D:81:6F:23:BE:A6:B4:76:B8:B5:E7:C5:B5:B2:69
Authority key identifier: DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22
Certificate issuer:       /CN=db7fd26ca5f791470b0b729b72f61f800058a322
Certificate serial:       0193579B8807BAF34710B2107204D57F9D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
Manifest number:          1231
Signing time:             Sat 23 Nov 2024 06:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:30 +0000
Files and hashes:         1: 23_SbKX3kUcLC3KbcvYfgABYoyI.crl (hash: azSiwdJCbznq1aXB4r32M7ZaIlIVFcZ+j+4X+UK1Ngw=)
                          2: zqZ7YeHqk0hiMOBiaFjWyV4aSgw.roa (hash: nueI04if8crC0LwyghMW1a+2gA4Ngf7rPXeWCLYQ4io=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:88:07:ba:f3:47:10:b2:10:72:04:d5:7f:9d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7fd26ca5f791470b0b729b72f61f800058a322
        Validity
            Not Before: Nov 23 06:00:30 2024 GMT
            Not After : Nov 24 06:00:30 2024 GMT
        Subject: CN=b42b8795de9d816f23bea6b476b8b5e7c5b5b269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:47:bf:f2:ec:b4:cd:9f:a8:98:28:78:93:
                    ac:15:b9:86:88:ec:cd:25:c7:8e:fe:c6:03:79:9a:
                    49:d3:82:61:43:bf:fe:8f:71:1c:22:6d:49:32:23:
                    eb:7e:a4:cd:bf:64:1c:ed:e2:fb:18:60:f6:04:f9:
                    4d:75:6f:fb:88:78:96:d7:0b:dc:78:02:91:c4:c9:
                    6b:70:f2:a1:1f:89:ef:8f:b8:bc:8d:53:72:9b:72:
                    92:cd:23:b9:48:63:4b:ea:be:4a:18:d3:6c:6f:79:
                    b6:63:17:b2:d0:fb:91:dc:ed:3f:c1:f2:22:8c:59:
                    6e:fb:95:fb:de:64:0c:e0:bd:a1:5b:46:e2:36:c8:
                    ae:7a:69:9d:41:0a:53:b4:09:e9:91:bf:08:03:23:
                    ab:f2:b7:27:21:8c:04:6d:9f:6c:50:41:c3:0b:00:
                    b0:32:a7:0c:c0:98:59:79:31:ec:16:55:b2:0c:27:
                    ed:ca:f6:df:09:2e:9d:ad:d3:aa:fc:f0:32:95:38:
                    18:fd:03:b5:92:6d:16:b3:08:d0:1f:02:a7:47:b4:
                    ab:a9:d2:74:3f:a3:fa:f5:6d:b7:dc:35:50:71:3b:
                    86:60:54:d8:8c:22:49:f6:f9:ce:eb:ba:21:cf:e4:
                    65:c8:ef:55:20:72:84:36:53:79:32:f2:3e:e8:16:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2B:87:95:DE:9D:81:6F:23:BE:A6:B4:76:B8:B5:E7:C5:B5:B2:69
            X509v3 Authority Key Identifier:
                keyid:DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:b7:9f:35:34:3b:86:25:30:49:1b:67:b0:24:9a:db:56:
         44:31:cc:15:fd:50:d5:6c:56:cd:d5:b9:3d:ef:ac:2d:b2:da:
         8e:2f:7e:69:8d:28:de:ca:9c:60:16:d4:93:e6:40:46:fc:cf:
         e9:75:36:82:de:e0:1b:5d:7c:89:e0:9d:a4:5d:bf:dc:6d:f5:
         15:a3:b4:f0:69:01:ca:64:e0:74:be:e4:bc:3b:7e:9a:e5:30:
         b6:0b:8a:58:59:7c:bd:d8:a6:32:11:bf:8e:73:a6:04:06:d5:
         a5:c1:9f:bf:b6:96:94:22:2e:d4:92:94:78:b7:1e:4c:08:35:
         0b:c6:76:61:53:bd:55:88:13:72:6c:a8:b9:ae:b4:c6:09:a6:
         61:d1:e4:87:72:3f:96:f6:30:4a:db:b0:2e:79:8e:7a:fd:51:
         b8:94:84:d1:ea:7d:d7:a0:c7:ff:76:44:9a:af:c9:92:7c:cd:
         8a:35:61:8e:07:b8:84:f4:4c:9d:16:43:dd:fc:f4:e2:24:85:
         9b:3d:f7:bd:09:50:88:62:f2:42:15:af:c8:d7:fd:a7:3e:1e:
         60:2c:d4:46:e0:40:b6:e2:a7:16:a5:38:96:e8:ae:01:2c:e3:
         ae:b3:8d:5f:79:fd:05:a8:4a:2a:64:d9:22:2e:a8:f2:bb:b4:
         4d:b9:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:36 2024 by rpki-client on console-ams.rpki-client.org