Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File:                     3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier:          +G1fsCRWDSina8PU52waWaGaG7sKbXaaHbUIdyHGsy4=
Subject key identifier:   1A:73:CD:E8:F2:F1:BB:E2:4B:5D:89:1E:BC:92:05:36:D5:5D:6C:87
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer:       /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial:       019356F714F715819B0848C15A0A29BC8CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number:          0A7F
Signing time:             Sat 23 Nov 2024 03:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:53 +0000
Files and hashes:         1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: gk/lO06NxHX1cJMv/tZlpPiOViG0ateHiUG7LvPvHTo=)
                          2: DqwslfxNxkJf3D6Iz33UZe9WvGU.roa (hash: AeVzZIbXNRbxbFA5orZKt4/2eKp7JTNT9axy4N1vS1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:14:f7:15:81:9b:08:48:c1:5a:0a:29:bc:8c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
        Validity
            Not Before: Nov 23 03:00:53 2024 GMT
            Not After : Nov 24 03:00:53 2024 GMT
        Subject: CN=1a73cde8f2f1bbe24b5d891ebc920536d55d6c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:af:70:ef:25:17:bd:0f:63:70:fd:d0:91:
                    3b:ba:8b:e6:1d:93:91:12:df:7c:89:04:07:58:49:
                    dd:95:69:9b:18:ea:e1:26:2e:86:35:c4:2a:2b:52:
                    93:e3:24:3d:bc:3e:28:da:ac:fd:4c:02:18:27:6e:
                    20:42:8e:13:24:7a:f2:1d:52:b3:35:c3:b0:ea:9e:
                    4c:aa:6f:7d:bd:00:a4:56:08:39:cb:a3:e5:40:f5:
                    41:5e:b1:db:41:88:cc:54:20:9f:9b:c1:66:d7:3b:
                    88:af:b9:c7:6d:79:b3:30:8b:94:a8:2f:68:01:2b:
                    66:55:ff:55:b9:81:03:f4:b4:e6:04:68:57:ab:da:
                    21:f7:15:52:ca:bc:ad:91:a3:f9:5a:69:d4:45:30:
                    e0:52:f9:a7:88:da:c5:bd:26:79:b0:33:9d:fa:9a:
                    94:ca:d3:6a:b8:91:58:44:2d:f5:cc:0d:bf:e1:22:
                    91:f6:4a:50:06:8e:ba:72:8e:4a:c9:b2:b8:1f:36:
                    4f:2d:dc:7c:88:e0:41:39:88:f2:bc:8b:85:ca:b1:
                    f0:e2:d9:d3:95:ed:67:63:da:81:a7:6b:21:08:94:
                    01:1d:ab:28:13:f4:2d:11:10:67:f1:95:7a:de:5a:
                    c6:a5:d8:6f:cd:6b:57:17:fc:aa:82:3f:b2:40:42:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:73:CD:E8:F2:F1:BB:E2:4B:5D:89:1E:BC:92:05:36:D5:5D:6C:87
            X509v3 Authority Key Identifier:
                keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:b3:35:52:f4:5f:7b:e1:be:e8:69:38:03:62:a5:a8:3f:
         21:b6:ed:0f:bc:60:23:bd:20:ba:2f:8a:cd:3a:ac:82:3a:fc:
         73:80:99:2e:36:73:0f:6f:e7:24:0f:44:5a:42:ca:9e:34:6d:
         eb:64:67:39:47:2f:4c:33:47:bc:86:a1:07:64:1b:33:80:40:
         a9:fc:d6:6f:95:70:3e:1e:62:db:7a:71:3f:03:61:b5:5a:5c:
         65:3e:4f:cb:a5:83:b7:a8:1d:eb:46:ba:1f:ed:87:a3:be:d8:
         21:35:d0:18:b4:36:71:82:e9:01:ec:1b:40:b2:3c:d4:d2:d7:
         d6:fd:6c:95:77:29:0e:96:e0:bf:af:ce:33:b4:ed:93:6f:d9:
         4b:29:51:c6:ba:b7:72:d7:5b:04:3d:01:27:b0:bc:d5:60:03:
         25:a2:f5:cd:94:12:63:0d:1b:9d:3c:4a:fa:4a:b8:47:e1:d8:
         b8:44:78:8b:a3:2f:7b:7a:52:31:bc:92:89:01:42:cb:24:d9:
         9a:d1:19:31:60:e5:8e:1c:b0:23:2d:c5:fb:12:0e:4e:20:79:
         48:a2:66:d4:6c:fc:f1:a1:41:ba:f9:8f:d5:5c:ac:d4:3a:ce:
         1d:9b:57:98:a5:4c:b6:9a:91:e9:5b:28:09:a9:8e:1e:87:d9:
         c3:e8:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:33 2024 by rpki-client on console-ams.rpki-client.org