Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File:                     152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier:          KlahQtif5UTQWpqkC1wySrFjYKhaGQfnIJVHvbbx5Dw=
Subject key identifier:   1C:3D:05:73:44:7E:DE:AD:09:2D:8F:6C:EB:DE:42:7C:49:10:31:47
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer:       /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial:       019355086748591EFC5789ECCC884B2396FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number:          0D2A
Signing time:             Fri 22 Nov 2024 18:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:34 +0000
Files and hashes:         1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: 6HUWnP/hUyfgOvzVLsXXTzXiprsF5LgTqPlGiX0Q8Bs=)
                          2: ZmI9zHGr-xXV-t9JmsYql9Kb-vc.roa (hash: 8sItW5jlxUxH/hxYtjZMf/oGPuNaLBD3qKG25g/1VPE=)
                          3: v7pJ3KFMCt_D0rmruuFkRBDw4bc.roa (hash: YkO/fceJnXfMT9WjDwRcVYVuq9Iu7bLHSYtr27YhJjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:67:48:59:1e:fc:57:89:ec:cc:88:4b:23:96:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
        Validity
            Not Before: Nov 22 18:00:34 2024 GMT
            Not After : Nov 23 18:00:34 2024 GMT
        Subject: CN=1c3d0573447edead092d8f6cebde427c49103147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:81:dc:0a:a8:9d:9e:93:20:a2:d2:ba:7a:
                    7b:05:da:b4:fa:bb:df:b5:74:f1:f5:e3:34:3c:43:
                    eb:a1:c4:2d:62:6b:11:2e:8f:15:74:19:c9:82:b2:
                    b4:7f:c6:29:61:dd:45:2f:1f:53:86:3f:69:4d:3b:
                    5e:70:bc:f2:d4:a2:01:d9:9c:e3:6f:e4:dd:47:93:
                    34:f4:c3:c4:6c:e0:91:ed:ed:a8:53:9c:bd:6a:b9:
                    ac:47:c2:b9:ae:3e:7d:ea:9e:65:ed:ba:e5:75:b1:
                    51:e4:da:f8:51:8a:40:cb:93:ef:f5:d5:0c:14:b6:
                    29:be:d3:3d:88:5f:e2:fb:89:1b:61:1d:11:76:83:
                    fb:e4:3c:4d:2c:c7:3f:6a:7f:2f:f3:9f:0e:a0:8f:
                    03:2e:c1:3d:da:34:95:ba:93:05:63:df:fd:5b:81:
                    46:8c:b2:76:78:8f:ae:44:9b:0b:a8:03:f8:61:d3:
                    83:61:e7:11:97:21:b0:a3:f1:e7:f8:de:42:76:8b:
                    78:e3:28:22:3d:1f:61:bd:23:08:26:15:bd:15:12:
                    37:bc:73:64:b1:b4:92:13:cf:39:4a:26:4c:0c:b7:
                    2b:a9:b1:a8:b1:ed:9c:16:0a:ae:5d:a5:bc:20:28:
                    37:70:ac:a7:7e:31:1e:c4:0c:18:d1:67:d2:de:f6:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3D:05:73:44:7E:DE:AD:09:2D:8F:6C:EB:DE:42:7C:49:10:31:47
            X509v3 Authority Key Identifier:
                keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:fc:7f:d7:1d:63:88:39:92:ee:b7:af:1b:a5:3e:99:3c:
         6d:ba:8b:2d:9c:59:31:7c:9b:09:8a:5c:01:cb:ba:c7:4c:c9:
         5a:b6:8a:c3:66:f9:bf:9d:39:c1:14:ad:23:1d:f9:21:5a:5f:
         dc:ae:07:f1:9b:03:f1:c8:50:a4:c5:d1:c4:82:f7:1e:8e:e4:
         d7:3a:54:db:23:54:8c:4c:e6:15:91:52:52:2f:06:82:0e:c7:
         6b:d2:2f:12:50:93:58:7c:66:24:a7:e3:e3:cd:bb:7a:d3:3b:
         86:aa:0f:c1:9b:81:67:e2:50:21:a5:97:f2:b7:85:ee:0b:ca:
         24:05:48:2a:2d:d3:26:85:b3:70:9f:ee:09:4a:6e:96:37:37:
         91:9e:cc:e5:22:21:b2:6a:81:89:23:75:8f:6c:87:18:e7:33:
         97:0f:b7:a7:d6:91:01:32:2a:57:66:ad:a5:7c:5c:39:51:c1:
         c7:f0:dc:e3:9b:d4:c3:cc:26:9c:e8:ad:69:dd:b4:ca:b5:29:
         ea:54:68:f2:5f:9a:57:a8:a3:4e:36:f6:8d:3e:e5:78:6e:2a:
         fd:15:63:b6:e9:19:b7:f8:35:39:22:3f:34:7e:1b:ed:77:81:
         34:4e:40:54:91:e2:29:9b:a2:e3:f9:ed:00:cb:6f:5d:46:ca:
         fe:48:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:07 2024 by rpki-client on console-ams.rpki-client.org