Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File:                     lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier:          DVNyAPwc8pW+lTeZP+D+u/YZXwGlSMYdD6Yjfnvwv2w=
Subject key identifier:   77:98:48:CA:9E:07:27:F3:B0:61:9F:F4:67:D3:EC:8B:78:51:7C:EB
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer:       /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial:       0193549C7CC1260356100ED139904B066C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number:          049E
Signing time:             Fri 22 Nov 2024 16:02:41 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:41 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:41 +0000
Files and hashes:         1: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: 2x/iFCv1x4EBiZoKJS0q+pHam5zoBbTn6s/O7ZIawtA=)
                          2: vcEZ6S0p_RPNsRbn_vGm_hLAEfk.roa (hash: 9gz7om9/32EgMkjPLNA6LWR7kGBjY3Wt7n1JMaYfvKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:7c:c1:26:03:56:10:0e:d1:39:90:4b:06:6c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
        Validity
            Not Before: Nov 22 16:02:41 2024 GMT
            Not After : Nov 23 16:02:41 2024 GMT
        Subject: CN=779848ca9e0727f3b0619ff467d3ec8b78517ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:07:d1:61:17:cc:1c:0f:93:dd:ea:e0:d7:
                    ae:55:bb:60:4a:8b:81:15:47:df:16:c3:c6:60:e7:
                    fd:06:6c:8f:0d:58:f6:a8:7e:96:f6:7f:23:88:d4:
                    15:64:56:39:ef:51:40:4d:bf:52:ea:5f:7b:a1:29:
                    48:d9:44:1e:e3:7b:58:99:07:d5:a7:6b:c9:22:c6:
                    ee:f6:88:bd:05:20:c4:34:03:91:09:ed:62:7e:51:
                    96:3f:af:de:54:60:65:64:e7:16:2f:23:1f:43:5d:
                    57:c0:ba:05:c2:42:31:16:8b:50:9a:37:bd:18:c7:
                    65:bf:42:db:61:63:0d:42:83:e2:17:0b:39:a4:f8:
                    b8:fa:73:78:3a:fa:46:97:9a:9f:8d:c0:9a:2c:4c:
                    27:75:31:46:72:ca:ce:8e:32:45:34:13:c6:48:b6:
                    45:b4:50:95:d6:1b:5d:94:21:81:a9:8f:78:a1:32:
                    94:73:50:8f:50:c2:61:01:c2:db:36:1f:3c:49:2c:
                    33:b0:d8:40:e3:d0:37:8d:02:03:10:8c:24:7a:a3:
                    02:05:25:24:be:ac:14:3f:a0:fe:af:09:c3:38:f0:
                    8a:2a:24:ed:9b:08:fd:a8:0a:20:e4:df:4c:5b:9f:
                    26:1c:57:0a:63:69:26:cd:86:0c:96:cf:26:80:f5:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:98:48:CA:9E:07:27:F3:B0:61:9F:F4:67:D3:EC:8B:78:51:7C:EB
            X509v3 Authority Key Identifier:
                keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:d8:d5:71:55:ca:53:fd:5c:5d:d3:d1:8e:a8:06:cd:83:
         79:88:50:e0:f7:01:53:3f:c6:c1:50:88:ee:75:d3:7d:1a:7c:
         48:43:49:15:37:64:88:be:08:8a:08:46:b1:26:54:ed:96:fa:
         e2:af:29:76:1c:93:ed:a8:5f:37:c3:91:42:05:e6:db:de:cd:
         9c:f1:14:00:6e:a9:cf:72:ce:bb:92:17:ef:25:45:df:3a:00:
         06:06:ea:a5:a5:66:b0:4a:67:99:b6:90:27:07:ed:4f:33:78:
         ba:b6:d3:df:f1:f1:6e:6a:f0:f5:b5:6a:58:5c:72:5d:c4:c5:
         3c:0e:c2:14:be:c2:bc:20:77:d2:26:a9:92:fd:23:c5:cb:8d:
         62:70:05:fb:ba:00:13:c7:d2:f5:b0:3c:01:86:00:bf:7c:09:
         02:60:62:67:80:df:dd:59:36:1b:f9:a8:d4:08:bf:3c:d2:5f:
         43:c0:d6:1c:b6:7c:a1:ed:ec:15:df:7b:7a:97:ae:6e:db:0f:
         b8:a1:e3:2b:bb:22:0b:a5:4f:21:33:60:4f:81:2c:7d:52:c5:
         40:fa:50:a3:c7:9a:c4:4a:07:1a:fe:68:d2:d4:e0:53:21:7a:
         34:0e:3e:77:2a:07:64:ed:b1:a0:3b:49:5c:28:ad:a0:dd:4f:
         fe:03:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:55 2024 by rpki-client on console-ams.rpki-client.org