Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File:                     _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier:          sgOg2XSKHAxaPhywAwC/UCLlVIJs2F1Fktvp6qRpJbc=
Subject key identifier:   7B:66:CB:33:C8:C1:BA:98:84:59:C9:66:EE:42:76:61:01:BC:9C:32
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer:       /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial:       01938B8921E0DB006CF471F2F7E69A357695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number:          112E
Signing time:             Tue 03 Dec 2024 08:00:40 +0000
Manifest this update:     Tue 03 Dec 2024 08:00:40 +0000
Manifest next update:     Wed 04 Dec 2024 08:00:40 +0000
Files and hashes:         1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: YnwvdlyOKvLKohqyNKG8NE6kn/nOPyU49uaFZ5k4ox8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:89:21:e0:db:00:6c:f4:71:f2:f7:e6:9a:35:76:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
        Validity
            Not Before: Dec  3 08:00:40 2024 GMT
            Not After : Dec  4 08:00:40 2024 GMT
        Subject: CN=7b66cb33c8c1ba988459c966ee42766101bc9c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:cf:87:f6:aa:f4:09:27:c7:44:59:48:3c:
                    95:82:64:ee:c9:65:31:de:4a:05:8e:e5:0b:7d:e4:
                    3a:0a:39:83:2a:4e:97:8f:cf:31:84:a0:99:04:27:
                    59:aa:de:14:a0:5e:56:c7:f0:c3:9e:47:74:61:5a:
                    ca:8c:10:49:de:83:25:f6:08:e2:eb:e2:20:ce:b3:
                    e5:34:c3:80:6d:36:5d:bf:71:52:44:4b:0d:57:3d:
                    bb:0e:1b:c1:59:35:04:b0:46:55:f8:a8:f9:2f:57:
                    dd:ee:5d:63:cf:70:63:3d:97:dc:d9:e1:45:e2:31:
                    3f:a8:3a:37:f5:47:0e:2b:44:90:7d:a2:b7:cf:41:
                    82:14:bd:cd:9d:a7:30:ec:90:51:52:d4:46:d4:43:
                    5f:cc:81:e6:dd:1c:1f:f8:85:85:05:0d:95:e0:8b:
                    fc:1a:ef:11:81:d0:04:39:6b:15:e4:3e:5f:68:d6:
                    23:13:a1:d7:61:68:52:62:a5:b8:6b:ac:97:e6:07:
                    a0:94:48:65:7f:9c:ff:0d:d5:6f:25:11:f3:23:8e:
                    03:17:a2:93:ba:6b:a3:2c:94:79:95:d9:67:1f:77:
                    e5:20:80:f2:7d:e5:08:32:a5:7e:21:9b:f5:b6:f9:
                    3d:cb:5c:8d:c7:18:59:4e:f4:ef:42:43:63:d7:be:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:66:CB:33:C8:C1:BA:98:84:59:C9:66:EE:42:76:61:01:BC:9C:32
            X509v3 Authority Key Identifier:
                keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f8:7f:c2:9e:d7:db:8d:01:b1:95:af:2f:2d:50:ac:dc:b2:
         a4:44:37:b5:0b:cd:77:f4:b3:88:cf:aa:12:25:26:81:53:2f:
         07:c0:b4:40:cb:24:c3:6e:5a:b2:59:1d:2f:f7:05:ed:5d:0c:
         43:ab:4b:6a:19:55:54:cd:9f:3e:64:8a:68:f0:af:60:6a:84:
         47:af:22:93:20:c4:dc:34:d9:85:ab:31:4e:53:d2:46:db:41:
         a8:f1:89:cc:6f:10:5e:10:4e:be:87:02:8e:0f:cd:cc:14:6e:
         55:0b:dc:6b:d9:e0:6f:86:7b:89:5d:74:a2:22:8c:08:83:5e:
         4a:a3:fa:58:a9:4b:b1:0b:fb:8c:54:2b:15:7a:4e:ad:99:73:
         20:3f:7c:3f:23:1d:55:9e:16:69:e9:17:39:be:1c:d7:f0:52:
         4b:d3:02:e7:bc:3c:0b:54:3f:f9:30:6b:a6:19:80:d5:04:18:
         c6:3e:84:64:c8:f2:70:cb:d7:ca:57:ee:8c:cd:59:fb:25:20:
         1d:5a:b3:2a:09:ac:dd:a7:9e:76:b8:ff:5e:e1:2f:ab:db:7e:
         7d:48:a8:61:af:5b:38:aa:fb:a8:66:58:f5:27:94:77:e3:e5:
         4a:f2:a6:32:35:9c:10:f5:79:82:bb:0a:e2:1c:21:3b:2c:0c:
         77:34:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:28:12 2024 by rpki-client on console-ams.rpki-client.org