Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File:                     ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier:          pMvkNxOtFbnD4rPKveasWHIV87YNaRrzJxzKQB+93uc=
Subject key identifier:   2C:A0:9D:FC:FA:64:EE:AD:50:6B:27:46:10:33:BA:DB:78:31:F9:AC
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer:       /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial:       019369DAF7B2BA9B11B1087E8BDD595915B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number:          0CBE
Signing time:             Tue 26 Nov 2024 19:02:57 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:57 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:57 +0000
Files and hashes:         1: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: q6FBBtIHj9qy0D0u8nChiRgi5XuvKn1QUtJOstolLfw=)
                          2: oBTygKGwKj9GpV8w7kXgFFbBAyY.roa (hash: NRP2CeLFEZZJ08VAhvieKpvPkAZ/TiLmZY+f/uUJ6oo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f7:b2:ba:9b:11:b1:08:7e:8b:dd:59:59:15:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Validity
            Not Before: Nov 26 19:02:57 2024 GMT
            Not After : Nov 27 19:02:57 2024 GMT
        Subject: CN=2ca09dfcfa64eead506b27461033badb7831f9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:76:05:ed:00:9f:3e:03:df:df:36:d9:7f:
                    37:37:88:86:35:a2:6b:5b:59:bd:9c:f1:b0:e9:13:
                    da:6d:99:ed:d4:52:e0:b6:b1:16:e8:37:ba:64:24:
                    89:d8:6c:98:30:f5:2d:15:3e:84:65:70:77:c4:34:
                    bb:6f:c1:70:91:af:5e:86:eb:95:c3:34:a5:0a:5d:
                    9b:a0:96:d8:dd:8f:08:44:2c:71:c0:69:5c:47:c4:
                    10:00:17:d6:dd:d5:73:67:b1:76:25:e9:c9:c7:07:
                    e3:f4:9b:46:5d:29:df:50:5d:61:76:55:45:33:5d:
                    0a:00:b5:f7:63:ba:60:bb:24:43:16:6f:f8:78:85:
                    8d:9c:bb:da:cf:a8:79:57:74:d4:33:f2:77:e0:af:
                    8c:46:ed:73:79:c1:6d:7b:df:a7:10:88:4c:63:09:
                    d6:4a:40:94:fe:c1:0e:8f:2d:bf:6e:fa:7c:77:60:
                    97:d0:3e:8b:9e:33:c1:71:fa:9e:fb:ba:5d:87:f2:
                    d5:eb:88:22:28:16:10:9b:2b:33:eb:f6:1a:db:64:
                    95:00:af:89:2d:45:87:d3:93:2d:55:72:20:a7:b5:
                    b5:8c:15:b6:0c:9d:83:fe:6c:02:1a:7b:56:ba:bf:
                    45:3a:1a:3f:65:9b:7d:73:4a:70:4e:68:6f:c1:86:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:9D:FC:FA:64:EE:AD:50:6B:27:46:10:33:BA:DB:78:31:F9:AC
            X509v3 Authority Key Identifier:
                keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:fa:23:9e:14:1c:37:9c:2d:a8:e9:45:96:c8:44:13:2b:
         56:d4:7b:50:61:53:4d:0a:36:06:3b:b7:e8:f5:2e:5d:78:16:
         05:27:f6:a1:b0:b8:da:7f:b3:2c:5b:c5:7e:0a:3e:c2:c7:7e:
         db:ba:c0:f5:3d:90:d3:e6:7e:72:11:94:72:85:1b:74:ea:50:
         01:81:a8:3e:35:18:f3:4b:a1:fe:cd:4d:13:07:70:e2:c5:5e:
         51:34:d3:71:b8:80:35:1b:f1:eb:42:19:87:ea:2a:b8:8d:17:
         48:8d:64:c0:ff:d5:11:21:4b:0b:00:6d:5c:a1:a0:c6:75:aa:
         6d:35:34:95:a7:2d:94:1d:c3:77:96:79:b1:d0:1e:27:f9:8a:
         72:aa:dd:2c:83:60:6e:3d:08:88:b6:95:20:df:72:51:2f:b7:
         2f:bd:31:8d:01:b8:2c:23:f0:59:b4:e0:3c:bb:c0:92:2d:0f:
         18:72:67:20:33:d6:1a:07:b7:26:54:58:4d:5a:ca:d3:d6:af:
         cb:41:6a:99:e8:36:bc:bc:97:7e:87:2b:aa:07:a9:f3:89:21:
         d5:e5:b1:ca:e1:05:ef:33:da:90:67:34:71:5c:8e:53:3a:82:
         6b:97:f3:cb:12:6d:da:98:98:22:db:2c:89:5a:da:66:9a:0f:
         a0:7d:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:47 2024 by rpki-client on console-fra.rpki-client.org