Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File:                     NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier:          pRCSZEY6cic0mVIExp4tTaXPrpK+4FGrC506eUUGdCs=
Subject key identifier:   10:2D:3D:D1:BD:8C:94:9E:76:30:32:62:FC:0E:F5:7D:2F:5E:F6:13
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer:       /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial:       01936C34F372C10C219A881147E2816BD960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number:          052C
Signing time:             Wed 27 Nov 2024 06:00:29 +0000
Manifest this update:     Wed 27 Nov 2024 06:00:29 +0000
Manifest next update:     Thu 28 Nov 2024 06:00:29 +0000
Files and hashes:         1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: 05XhrEuVBsXaQXxJ3nM3cTEuokLNGKO/Jlil4ZYMdkk=)
                          2: lEyl1skeWL3RHdQAoRMWYWMhT1w.roa (hash: ViAIbkQXKSQR6vXkXI0Zusjnv3veGyPBdE2Uoca9nN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:34:f3:72:c1:0c:21:9a:88:11:47:e2:81:6b:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
        Validity
            Not Before: Nov 27 06:00:29 2024 GMT
            Not After : Nov 28 06:00:29 2024 GMT
        Subject: CN=102d3dd1bd8c949e76303262fc0ef57d2f5ef613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:41:26:9b:d5:9a:c2:c3:5d:ed:ed:13:d8:
                    81:bd:17:ce:cf:ac:1f:89:8c:85:55:4b:b3:13:9c:
                    3b:64:c1:d6:84:45:40:1c:c9:18:ed:b2:2d:06:6a:
                    06:93:55:06:9c:6a:b9:c9:5e:c3:13:ce:91:a7:6b:
                    22:70:15:57:61:59:bb:af:0f:ab:dd:ea:83:eb:aa:
                    c8:14:f3:ab:3b:1f:6d:6e:7c:ae:e6:0f:7d:5b:fe:
                    05:33:7a:cb:e4:54:a0:20:d8:06:06:43:46:8e:c5:
                    9e:5a:9d:c7:8e:e3:23:d4:1a:17:89:e7:11:90:14:
                    a2:dc:15:a3:d0:db:9a:ed:ba:58:84:a6:6f:63:b2:
                    06:dc:ed:ef:41:05:a5:dd:9f:11:82:2c:e0:c3:0b:
                    71:b5:c6:c1:43:7a:c9:98:f4:2b:71:ed:47:a8:ae:
                    57:c1:13:38:ac:2e:95:1a:4a:c8:7a:ca:67:50:0f:
                    b6:83:1e:e8:dc:3c:e9:52:81:db:7c:e7:7f:ce:3c:
                    3b:5c:87:2b:5d:27:c8:15:82:7d:dc:74:a5:97:b7:
                    a4:a8:a9:28:37:72:fc:ed:89:c6:73:c3:e1:c4:96:
                    06:48:87:44:13:4b:c4:1d:ca:26:da:29:85:be:f9:
                    a4:d3:c0:69:ea:0d:a2:b5:56:15:39:78:0c:57:c1:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:3D:D1:BD:8C:94:9E:76:30:32:62:FC:0E:F5:7D:2F:5E:F6:13
            X509v3 Authority Key Identifier:
                keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:6f:03:90:d6:dd:6b:83:4d:cf:83:6f:ac:4b:3b:6e:06:
         d2:a4:a1:43:3c:2d:5a:11:fb:a1:7e:68:0e:d3:7f:48:a6:d6:
         4d:56:ea:b3:57:e5:f8:d7:0f:db:12:c9:ff:10:81:24:25:e8:
         a2:74:76:80:f3:a0:8c:b7:c1:7e:8a:b5:ab:f0:9a:ea:6c:25:
         82:2b:de:4f:34:74:df:ba:38:e3:7d:a6:99:f1:f3:d6:d8:6c:
         46:27:d3:7d:06:6b:08:79:20:23:30:0a:80:2e:f9:4e:7c:40:
         04:2b:8c:75:ef:41:07:e4:50:9a:11:b5:f9:37:29:ce:87:21:
         7c:7d:05:2c:53:08:cb:90:18:ea:d4:c5:f5:93:e2:e6:f1:ea:
         58:bb:21:c4:82:01:29:0b:b2:12:69:2e:24:e7:3a:97:a7:63:
         85:bb:9d:4e:f3:06:2d:ce:7d:73:32:77:9e:9b:b3:44:c2:b9:
         42:c6:b3:a9:9b:99:dc:4c:57:93:b6:e6:40:cf:ee:58:c0:ff:
         e8:79:9d:a1:5f:60:89:2b:dc:ea:c9:ff:ec:f6:83:e1:d6:49:
         de:90:92:19:d7:7d:22:c9:d7:75:b4:4a:9f:01:7e:41:47:3c:
         40:4d:2b:c0:2e:95:2e:59:c4:c4:fd:70:d8:a2:88:1b:98:ee:
         1e:9a:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:39:01 2024 by rpki-client on console-ams.rpki-client.org