Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File:                     Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier:          a13MeJ8sT2T1+y6EpWMU3iRyXOjsOXAI4u9f+D52L+I=
Subject key identifier:   B3:D8:BD:5C:AC:DD:20:BD:7B:F1:22:96:3E:EA:56:15:11:60:FB:0F
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer:       /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial:       01935764EA673931FA473B7DC692A14576D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number:          120B
Signing time:             Sat 23 Nov 2024 05:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:51 +0000
Files and hashes:         1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: Nxx9N3LBYtQqzU5oil+7aHTVgCx7cGtUDmncM+nQS2k=)
                          2: hSz3H9J3YoUwwG1Kyb2Z6cFJ6oI.roa (hash: xWWYwNBt1Gvrd4jQPIKDBfXxI0d9nLCTturg36+QTI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:ea:67:39:31:fa:47:3b:7d:c6:92:a1:45:76:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
        Validity
            Not Before: Nov 23 05:00:51 2024 GMT
            Not After : Nov 24 05:00:51 2024 GMT
        Subject: CN=b3d8bd5cacdd20bd7bf122963eea56151160fb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:85:ab:8c:6a:96:f0:14:bd:c6:6e:0c:a0:
                    7d:d9:23:aa:ba:03:c2:dc:16:f5:2d:08:e4:54:c4:
                    29:42:27:c4:c5:d7:3e:0f:78:35:d3:9e:a2:25:77:
                    1b:8e:e8:2a:83:d3:30:87:de:38:ed:15:e0:e1:59:
                    f7:54:35:a9:a7:c9:39:4d:c8:01:f1:00:a6:9e:3f:
                    af:6a:93:5d:37:bd:f7:da:b4:a2:ed:ff:aa:ad:cd:
                    c8:a5:e2:3a:f8:35:eb:97:2e:a7:df:6b:b8:75:43:
                    51:ad:e9:53:9a:3b:85:38:cc:a9:45:f0:08:5a:c5:
                    c0:57:18:f5:7e:72:f0:ab:d1:b6:d2:4f:d7:53:5c:
                    39:7f:c6:1e:13:cc:88:fb:88:a2:97:d4:93:14:a0:
                    fc:00:45:c5:a8:ee:1f:60:59:32:d3:46:18:e1:3d:
                    6e:da:51:07:16:31:c1:f5:b6:67:cb:5a:e6:65:a8:
                    a8:ca:a2:bf:35:c8:e5:7a:ce:9d:1a:96:7a:1d:31:
                    83:38:bf:c7:ed:b7:54:07:df:ce:8d:8d:73:da:ed:
                    70:67:1f:18:92:6a:e4:5d:37:de:35:fb:04:fd:09:
                    69:e5:7a:ae:23:e3:59:f2:c5:24:b3:4b:88:08:0d:
                    7c:8d:0a:7f:54:cc:4e:90:3a:26:e4:b0:76:03:6c:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:BD:5C:AC:DD:20:BD:7B:F1:22:96:3E:EA:56:15:11:60:FB:0F
            X509v3 Authority Key Identifier:
                keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:09:37:b1:34:94:8f:32:b9:61:27:a2:78:41:aa:99:d1:
         53:91:b8:25:d1:14:5f:d6:1d:02:40:c4:c0:90:15:0a:18:bb:
         46:e8:04:e4:b8:88:c9:14:d4:aa:05:d6:b3:12:13:b8:5e:0e:
         5f:c5:40:cb:94:62:d4:e6:8c:6a:f2:93:ba:d3:5d:80:47:e6:
         66:77:28:6d:9e:f1:50:19:5d:26:ee:4c:da:41:d4:9a:88:84:
         c5:59:24:c6:1a:82:97:1e:38:81:f7:dd:d6:2e:d0:a1:ec:f3:
         ba:a7:ab:17:1a:d4:42:61:a4:3a:3e:4e:8f:ea:fd:81:9d:11:
         74:4a:a5:4f:90:1e:6e:ca:52:b6:87:84:57:a0:52:05:0b:c5:
         d2:63:4f:1f:03:3a:6a:3a:88:f4:9b:f2:c9:3a:03:0a:5f:21:
         49:19:8a:9e:14:9c:7e:1b:a4:53:5e:81:80:d2:d1:a0:e6:fc:
         5a:11:f7:ab:d2:97:53:c1:d2:a5:07:af:7b:47:7c:08:59:f0:
         a6:0e:af:5f:15:d2:f0:2b:ae:85:b6:11:ce:9f:62:7c:a7:63:
         e1:35:f4:fa:ad:78:c5:1f:05:f5:15:7e:2f:bd:43:05:8b:a5:
         76:a8:e3:8d:80:dc:db:f0:09:07:a8:f2:1c:13:f4:f0:dc:32:
         f7:6c:15:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:22 2024 by rpki-client on console-ams.rpki-client.org