Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File:                     M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier:          lY2lGH4kS/BWu2SQOWIH9d9HV9efoOWyk+RlrtCTFFw=
Subject key identifier:   6D:3F:19:D0:79:B7:48:EC:9A:3A:38:4A:8F:E3:D9:11:B0:B0:1F:EA
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer:       /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial:       0193568ACDD57B56D73FDB6D71EB3DCA2B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number:          1285
Signing time:             Sat 23 Nov 2024 01:02:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:37 +0000
Files and hashes:         1: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: mOfyX/71Pic5+fp2mPFk2JqsCJdFMSLGY4ZgAtDm7fA=)
                          2: RhE9MMXdfESIIfyqhVf63ERsyI8.roa (hash: 3HEX5IDvCrQdZOdTkttT2N+J0mXJKtSOQ5vnwnytvIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:cd:d5:7b:56:d7:3f:db:6d:71:eb:3d:ca:2b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
        Validity
            Not Before: Nov 23 01:02:37 2024 GMT
            Not After : Nov 24 01:02:37 2024 GMT
        Subject: CN=6d3f19d079b748ec9a3a384a8fe3d911b0b01fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:b7:41:0f:54:84:74:ba:c6:2d:54:43:69:
                    82:bf:a0:7c:4f:bb:b5:de:07:46:2e:91:d0:e4:db:
                    03:c1:26:d5:6e:79:65:a6:79:01:0c:80:aa:dd:c4:
                    a1:42:20:14:02:12:1a:b1:0c:3b:07:f2:85:f9:28:
                    22:d6:4b:c8:3a:73:99:cc:c3:4f:42:0a:9f:10:2a:
                    c5:3c:b7:9e:08:9f:84:dd:2c:2c:0d:e4:12:f5:c9:
                    8a:ce:e9:2c:ef:d9:38:0d:cc:04:fd:af:72:43:e8:
                    07:6a:16:e9:e9:a5:0d:1b:53:5c:cc:e7:bf:8f:0b:
                    9e:6b:c8:4f:06:4f:6c:7f:eb:90:ca:36:1f:f1:3a:
                    5c:99:41:cb:e8:08:88:fe:1f:a7:19:f3:16:b5:de:
                    77:ea:a3:3f:1c:57:d5:29:96:b6:07:c7:6e:4c:3b:
                    cb:c9:5f:ba:d4:0a:b9:c8:50:d8:10:e8:f6:00:ed:
                    3e:58:a9:7c:2f:b2:b7:0b:55:cb:d5:92:1c:bb:ba:
                    94:5e:93:45:b8:af:a6:e7:53:8a:3b:1a:8e:1c:7a:
                    53:95:3d:e1:ba:0c:f3:7e:35:ab:04:b6:a7:72:c4:
                    15:0b:40:96:8b:3d:60:af:75:8d:e4:d8:af:65:d1:
                    9d:d6:2d:88:32:ed:59:a5:8c:b5:1e:83:03:68:ba:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3F:19:D0:79:B7:48:EC:9A:3A:38:4A:8F:E3:D9:11:B0:B0:1F:EA
            X509v3 Authority Key Identifier:
                keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:40:f3:32:24:24:d8:78:dd:92:01:45:0b:8d:b6:54:c9:53:
         ea:e7:7a:28:8c:83:60:75:1e:fc:fb:b5:f3:d5:73:94:26:f0:
         65:ba:fb:b0:96:84:3c:13:4f:72:d8:bd:5e:36:33:82:58:fd:
         4a:60:59:3e:f0:ec:63:3f:5a:f6:8a:39:b2:66:b4:1a:02:35:
         dc:26:c7:a2:30:7f:5f:e9:85:39:cb:d9:5c:d2:72:bd:a4:79:
         81:69:50:44:5a:cb:a4:76:f6:82:b4:2c:8a:78:14:69:ee:f2:
         32:68:09:10:44:f4:d8:16:bc:b4:c2:b4:ba:ee:42:95:25:29:
         0d:00:48:31:d4:76:2f:11:84:69:9b:7a:02:1a:90:e0:43:12:
         77:3d:cc:ba:32:84:53:6d:7b:f2:61:b1:64:cd:14:6b:16:0b:
         9a:8a:a3:12:31:09:2d:c1:b2:ea:04:2d:ee:10:43:c1:6a:89:
         fd:32:fe:b5:24:a5:be:7d:f4:c4:ce:58:02:dc:c7:44:83:38:
         be:bd:4e:ab:2f:a3:b7:18:f4:93:9d:e6:f0:7e:73:e0:68:d9:
         b2:25:53:60:c7:4a:00:2a:21:63:f9:9e:25:06:75:d7:11:da:
         81:6f:29:95:98:b2:16:92:45:2d:f6:31:9e:fa:2f:cf:a4:b1:
         ca:f5:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:43 2024 by rpki-client on console-ams.rpki-client.org