Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File:                     RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier:          kIHkS7rJ/Xx/0hGVrXlproaQuo8sygQDsST6c252oTU=
Subject key identifier:   03:1E:D9:63:1C:83:13:81:9D:99:DA:38:E6:01:66:4F:A0:CE:DE:37
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer:       /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial:       0193579B5EB2BDBB1F84AAD4F284FB00339C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number:          0761
Signing time:             Sat 23 Nov 2024 06:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:20 +0000
Files and hashes:         1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: Ems/uwMpldKJtj0rK4JMGaWOm3HY2R79+IU0LJQ2Imc=)
                          2: _hiZ704kvsA4HFAjaSul7sh5OpA.roa (hash: Y1V4bBH/ixCgTjTe7lvatipN2jxHBC7svovX4gfxxGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:5e:b2:bd:bb:1f:84:aa:d4:f2:84:fb:00:33:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
        Validity
            Not Before: Nov 23 06:00:20 2024 GMT
            Not After : Nov 24 06:00:20 2024 GMT
        Subject: CN=031ed9631c8313819d99da38e601664fa0cede37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:9c:41:c6:d5:6e:c5:82:16:45:ca:6a:77:
                    be:93:94:68:68:f8:0d:b5:d6:86:c3:e3:16:94:85:
                    a3:a3:d7:bb:27:ca:88:f2:6b:0f:0b:64:09:b8:3e:
                    1e:ce:db:5e:03:05:05:07:11:9a:de:cc:d4:92:a5:
                    49:99:ea:ce:3c:d0:72:36:2a:0a:69:39:92:13:5c:
                    71:a0:1c:cb:c2:86:c8:18:e4:cc:3b:27:c1:a2:b6:
                    7f:b6:94:71:70:a6:56:ae:7c:1b:86:0d:a6:26:a5:
                    d1:06:4e:fa:3a:c2:97:e0:b4:5a:3c:f9:72:08:97:
                    00:5f:9b:ef:36:23:4b:08:c7:dc:07:ab:0b:f1:f4:
                    e2:b0:1c:ec:05:4f:49:59:54:ad:aa:47:f3:ec:56:
                    41:b8:05:7c:ff:11:98:98:8b:69:e7:8e:e7:53:87:
                    2d:d2:98:03:5f:16:2f:fc:c4:59:17:29:46:cc:59:
                    28:9f:fa:5b:24:cd:1c:30:7e:e7:40:7f:28:12:1b:
                    2e:1c:aa:4e:ca:fe:8a:d2:29:4c:48:73:5e:e4:9f:
                    14:38:c6:aa:95:de:04:2b:1b:66:f6:d6:29:c3:3a:
                    f9:3a:f6:74:37:2a:4d:7a:9c:07:69:a8:0f:3f:13:
                    c5:71:72:e4:75:21:5b:bc:34:96:d4:ce:b6:46:e3:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1E:D9:63:1C:83:13:81:9D:99:DA:38:E6:01:66:4F:A0:CE:DE:37
            X509v3 Authority Key Identifier:
                keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:05:08:9e:4a:45:8e:cc:44:cd:40:1f:9b:c1:44:c2:07:
         8e:7d:a0:34:d4:f1:39:43:ef:7d:0a:a1:36:d2:86:a1:6e:79:
         cf:5f:46:44:f4:2b:37:b0:20:78:9e:1c:e5:f4:95:72:77:2e:
         a1:68:84:a0:fc:87:e7:6e:0f:82:eb:51:06:ae:4c:47:79:5b:
         d1:b4:c0:25:13:35:68:69:8b:bd:93:4a:36:d7:df:d4:15:97:
         16:48:6a:df:77:56:21:58:c1:f7:9d:30:d5:24:93:82:ae:ae:
         b8:d0:52:5d:53:a3:d2:c0:55:7b:27:0b:d8:d1:e7:12:0e:13:
         4b:9d:cc:08:13:ea:53:95:f8:16:f2:21:c6:51:28:95:cb:e0:
         20:db:a4:44:0b:e3:34:2e:cc:36:6f:3a:f3:c0:b4:54:ed:1a:
         d9:c0:e9:3d:a6:0d:40:0c:10:8d:12:26:75:4e:ca:87:f3:5a:
         61:12:01:e4:d0:4f:0a:56:e4:38:df:67:11:46:3c:af:3f:c6:
         fe:83:c0:8e:a0:8a:fd:7f:ed:65:61:e0:18:ab:38:5b:53:ca:
         56:60:de:c7:eb:88:94:c6:4d:23:9b:a8:f9:32:d2:27:87:fe:
         f3:9e:00:f8:d5:b5:a5:72:b6:1d:6d:79:9a:15:e6:5e:b0:56:
         a2:2f:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:03 2024 by rpki-client on console-fra.rpki-client.org