Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File:                     G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier:          DDWnIAb+2ybVRgJb27iDm2hwiYbpfUBzKlyRv0xXoOY=
Subject key identifier:   EF:A3:9D:FE:47:FE:E5:A5:4B:35:49:56:B5:92:72:04:51:E9:D6:CB
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer:       /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial:       019356F6D8B038A40AA93ECC688821243FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number:          0CEB
Signing time:             Sat 23 Nov 2024 03:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:38 +0000
Files and hashes:         1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: hUwZkOaXmle/J4K8hr4aqf/GYO32Ln712BHNeGYHsf4=)
                          2: IJceaMVA9DeypT82zYAHcTPcaKY.roa (hash: fKsEW3AeOcfRLhduOXtE+cPvnM4G9kg8N7vHIbOWxrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:d8:b0:38:a4:0a:a9:3e:cc:68:88:21:24:3f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
        Validity
            Not Before: Nov 23 03:00:38 2024 GMT
            Not After : Nov 24 03:00:38 2024 GMT
        Subject: CN=efa39dfe47fee5a54b354956b592720451e9d6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:43:cd:3b:41:39:48:02:df:37:98:66:0b:
                    ba:66:ab:c6:07:08:30:a8:4b:7b:73:ef:54:16:da:
                    81:7a:76:a6:2e:52:74:77:bb:f9:43:01:ff:43:1f:
                    2b:ad:7e:44:fd:e4:7b:9c:8a:f4:ea:aa:67:b1:0c:
                    9d:f1:26:90:bd:19:46:95:6d:66:2a:3b:82:6d:32:
                    77:90:6a:d6:47:e4:36:75:b4:c8:be:c7:68:4f:49:
                    cc:db:19:04:12:74:d0:4c:f0:eb:e8:9c:6d:09:a8:
                    b1:2e:4a:d3:dd:cb:7f:1c:ee:e2:bc:ad:e2:53:64:
                    51:2f:f7:aa:a9:a7:b3:27:8f:a4:06:9c:e0:4d:d6:
                    9f:2c:49:82:5f:2f:3c:a6:e1:7d:60:c1:0a:f9:57:
                    e1:fc:29:2f:c4:ac:79:0f:95:d0:b7:bb:19:4a:7c:
                    35:61:23:51:63:49:15:1b:2b:12:7a:49:33:97:66:
                    ec:b2:89:a7:69:a1:9e:04:c0:19:73:c1:fb:fb:f4:
                    46:63:ae:54:68:69:5d:c8:be:38:a1:0f:bf:32:89:
                    da:3d:e4:7e:a1:ce:ed:95:83:57:12:8a:a5:9d:e4:
                    cd:85:86:11:66:50:26:34:1d:0e:73:e7:2e:7b:60:
                    a5:c1:f1:c7:cb:bc:c4:b8:ba:2e:7e:52:7c:4a:ee:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A3:9D:FE:47:FE:E5:A5:4B:35:49:56:B5:92:72:04:51:E9:D6:CB
            X509v3 Authority Key Identifier:
                keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:71:b0:75:72:19:48:65:ce:0f:8b:75:f6:33:bb:55:83:17:
         e9:bb:5f:fc:57:b7:d0:05:08:4d:90:61:36:31:b9:3e:54:6c:
         45:81:a2:89:a7:e6:d8:c8:23:59:13:fc:48:75:c4:35:87:ba:
         94:0c:61:d2:83:c6:09:82:37:41:6b:20:92:90:b4:54:f2:54:
         f2:e1:ee:a8:45:3b:ff:f9:3a:31:59:9a:38:17:82:ac:e2:29:
         b1:7a:51:0a:57:66:23:84:16:11:94:b0:14:5d:0c:69:20:b5:
         7a:a0:f0:b1:eb:ff:64:77:49:d5:ed:61:e6:89:ff:7c:ca:f5:
         70:7c:91:a4:2a:1a:33:40:36:b1:63:eb:8d:82:bc:dd:7b:8c:
         2f:6e:76:dc:ca:0f:d4:75:3c:07:14:dd:fa:63:c7:72:ce:c6:
         5b:00:6c:e3:57:b3:63:19:14:7c:ad:a8:6c:4a:9a:4c:f5:45:
         b7:36:0d:14:01:b0:10:4d:af:ff:f2:79:ce:52:8f:b9:35:c3:
         c3:65:65:9b:a0:10:36:3a:08:e2:60:89:3a:c7:2d:e1:4e:db:
         03:6f:96:1f:ae:65:e3:f1:da:8c:d1:e7:9e:47:2a:e4:94:a1:
         77:6e:fe:e5:34:90:c7:b5:6d:57:e2:39:5f:5c:0e:bc:b3:46:
         17:ab:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:44 2024 by rpki-client on console-ams.rpki-client.org