Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File:                     gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier:          JkRbqGF7btZcFSFjCyOP+O2ENJAHMWoN/6kn7YKQM40=
Subject key identifier:   42:A4:4F:D8:97:AA:B6:0A:79:92:C5:96:20:01:67:66:09:71:48:C6
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer:       /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial:       0193568A5E2E194BE88E021F5B0BE5DB4201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number:          03F5
Signing time:             Sat 23 Nov 2024 01:02:08 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:08 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:08 +0000
Files and hashes:         1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: uQbf5TWPmQ1tY0d3jLB9uA9VQ8TiqqmdWGJBQ72BBmM=)
                          2: oL0490q0Wl7BCyQ2x88ZS1sNQX0.roa (hash: wNQ8fksfJTaxngr+KerYT8vTJHGBHkmElAH8H/p8XKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:5e:2e:19:4b:e8:8e:02:1f:5b:0b:e5:db:42:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
        Validity
            Not Before: Nov 23 01:02:08 2024 GMT
            Not After : Nov 24 01:02:08 2024 GMT
        Subject: CN=42a44fd897aab60a7992c59620016766097148c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:20:99:10:07:e0:8b:87:78:5e:84:99:a9:
                    55:9e:52:7a:27:3e:27:c7:92:19:bf:e4:90:09:d3:
                    6c:c4:59:d8:fb:bb:04:ec:34:ef:98:42:a0:57:bb:
                    7c:d4:49:d6:04:c7:93:33:09:b0:a0:51:aa:35:09:
                    a5:98:7b:d5:4e:fd:ef:1f:10:cd:54:4b:01:cb:a6:
                    94:45:dd:78:d0:f2:f3:8d:c6:2a:51:00:ef:59:92:
                    35:c2:b5:50:20:23:7b:c0:48:e8:18:6d:9d:ae:2d:
                    b5:86:05:8f:25:e0:d7:cb:21:b8:36:b2:23:5c:f3:
                    f2:2f:0e:3c:68:b8:ab:8f:a7:e8:28:38:5f:d1:de:
                    93:73:a6:d1:07:91:69:b1:0f:a5:7b:dd:58:cc:ac:
                    9a:ae:63:b2:5a:fb:5d:6f:41:2c:7a:ad:b3:b5:44:
                    77:fc:01:5c:f9:e8:3c:bc:e2:94:f8:78:fe:3f:3a:
                    0c:92:ee:ea:a9:97:d3:db:50:5c:ad:47:be:69:00:
                    8b:45:74:6d:18:72:88:fd:a8:75:f4:89:a6:88:4a:
                    49:d8:f4:43:ff:ea:31:97:62:0a:73:a0:f9:c0:6e:
                    48:c1:3d:a7:cc:b2:f0:48:4a:15:f4:48:a3:51:d0:
                    16:1d:a2:10:4c:cb:b6:bb:69:27:9e:b0:67:e3:9c:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A4:4F:D8:97:AA:B6:0A:79:92:C5:96:20:01:67:66:09:71:48:C6
            X509v3 Authority Key Identifier:
                keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:27:ce:07:25:43:7a:c1:6a:87:39:1a:f9:56:af:34:cf:
         35:3a:e3:79:8e:56:53:78:db:9a:93:be:d0:fd:de:8d:51:52:
         6e:76:cb:a6:f7:ea:dc:24:32:d9:f2:cc:fd:95:ff:52:db:48:
         32:96:bf:05:00:ce:7f:c7:db:64:a0:19:ea:25:88:df:43:c1:
         0c:ac:f2:63:2e:ac:a9:ba:f3:8f:ab:7c:60:56:38:c9:99:e7:
         cc:51:bb:05:76:2a:be:69:0f:64:32:14:75:de:09:ee:fa:77:
         52:86:f4:b1:8a:b4:90:35:5c:d1:c5:1e:f6:2e:de:b8:d8:dc:
         bb:76:7c:29:c9:91:69:b7:da:34:9f:4f:b3:e9:5e:f3:77:75:
         f6:c6:ab:0f:5a:c5:9b:3f:e3:a1:10:c1:49:00:0c:bf:f1:5b:
         36:a1:25:bf:fb:06:22:2f:4c:c8:d2:99:c0:b7:7a:7d:8d:58:
         09:47:ab:4c:55:e5:27:a4:bf:61:89:87:d0:77:e6:6e:5b:63:
         f6:37:8d:c1:83:a8:16:d7:98:d7:e7:f2:02:04:02:8c:26:b6:
         6c:af:05:00:82:ad:47:27:f6:a2:41:2e:82:79:77:2d:b2:e5:
         68:f0:2c:8d:52:79:86:1f:79:08:35:39:58:61:0f:db:de:93:
         a0:36:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:13 2024 by rpki-client on console-fra.rpki-client.org