Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File:                     1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier:          N3PIyb01+siu75erLnw1k/nDzMZL3pC9ombrTk4gQzE=
Subject key identifier:   5C:E7:D9:12:5F:12:79:8A:63:A9:39:CB:87:70:FE:02:05:DB:7C:AE
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer:       /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial:       01936557798BEF35AB2F4F2141F1F61A745F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number:          100B
Signing time:             Mon 25 Nov 2024 22:00:51 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:51 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:51 +0000
Files and hashes:         1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: gmuBd0Y3mOSFBNqmNwpkUEvDs8Q9QLgpeigIvlzy+rg=)
                          2: aiE702Zd5GaCNb8bLtQv8NUT4Ms.roa (hash: BiVX83mW634ATk+GWHwue9YyQ7AXW+g+HkVsNX8b5I4=)
                          3: qzru0SildJEFQokwxeUWNRByBr4.roa (hash: AdLPlPqknDTy/2sBGfrw/u4fVLWijeimU8dIYt7VvDA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:79:8b:ef:35:ab:2f:4f:21:41:f1:f6:1a:74:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
        Validity
            Not Before: Nov 25 22:00:51 2024 GMT
            Not After : Nov 26 22:00:51 2024 GMT
        Subject: CN=5ce7d9125f12798a63a939cb8770fe0205db7cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:7d:f9:e4:cf:91:28:38:b7:94:6d:d2:36:
                    2d:24:36:30:e5:c2:1a:7a:e1:98:43:9e:67:7c:32:
                    fa:02:51:58:1b:23:e7:82:f2:af:7f:ff:3e:7d:6d:
                    1e:a4:35:7c:33:3c:d4:3a:39:51:24:95:fc:b9:83:
                    50:8e:61:9d:10:d5:c4:82:7a:bb:9d:e2:51:30:00:
                    3f:90:57:64:4f:42:ee:2d:60:59:f9:50:c5:7f:ed:
                    80:83:9b:18:23:bf:be:62:85:e2:45:06:87:57:63:
                    99:ec:40:13:f5:f5:e3:1f:c0:e3:a8:c6:0a:20:26:
                    9f:89:08:db:11:24:84:86:1e:05:65:b9:bf:e5:28:
                    a7:3a:81:1d:6d:14:99:38:52:c6:87:7c:9a:cc:98:
                    6c:69:e5:8a:ff:35:a1:a2:14:2e:25:5b:19:38:a0:
                    b6:95:15:a6:20:7d:30:17:e7:cb:8c:c9:64:11:d4:
                    c9:c9:89:4b:aa:0f:94:99:92:55:50:73:3d:8e:65:
                    b3:5c:68:0e:35:8d:3c:9f:e3:e4:69:f1:46:65:cd:
                    92:7e:f5:aa:0c:59:23:50:8c:83:68:c7:b8:a1:f0:
                    0c:e1:65:f2:24:51:df:23:84:51:e5:fd:b0:69:b9:
                    d4:8f:d1:75:0a:4e:25:52:33:17:3b:67:22:98:48:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:D9:12:5F:12:79:8A:63:A9:39:CB:87:70:FE:02:05:DB:7C:AE
            X509v3 Authority Key Identifier:
                keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:b2:8d:b3:12:b8:9b:f4:47:82:ac:73:04:4f:b3:80:16:
         ac:81:26:7e:72:21:7d:13:24:8d:d7:7e:45:7b:fb:41:dd:94:
         e6:94:03:d3:15:15:c1:bd:2d:41:17:d4:43:4e:85:5a:56:de:
         ce:57:a9:26:8a:fe:e2:2f:4f:2f:89:68:d2:2c:17:3f:43:b1:
         ce:30:f1:0e:2b:8e:e9:6b:c9:ef:0c:40:ef:2e:85:ca:10:a4:
         7c:0d:55:6b:29:8e:39:f4:c5:94:5d:7f:b3:f8:65:d5:e0:5d:
         61:b7:e3:91:b5:37:d4:1b:0f:43:99:4f:13:b1:5d:cc:2d:47:
         70:11:2c:e2:3b:1a:ee:15:ac:77:1d:a6:47:4c:fd:4a:46:7d:
         27:c3:db:1c:f8:69:df:d6:b0:1b:40:8d:f2:84:99:2b:f5:fa:
         6a:d4:6c:0c:25:48:ce:d1:75:cd:c1:71:d6:38:82:33:26:01:
         95:46:08:c1:8f:6d:6e:00:c4:9b:b5:75:50:23:77:cf:1f:20:
         1c:68:b2:24:51:e6:48:7c:46:4e:17:47:5a:62:fb:3a:3d:06:
         e9:14:15:94:4e:ca:2b:84:c7:d5:56:9a:8e:2f:e6:9e:a6:61:
         3d:70:32:90:bb:bd:9d:73:75:09:87:82:1c:81:95:6a:64:03:
         c6:6c:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:53:40 2024 by rpki-client on console-fra.rpki-client.org