Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File:                     kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier:          r5OWYZ1A/Y0ZYR6yfO/JT57Q36kXgWMjiYiBqAPkKm8=
Subject key identifier:   F3:63:53:56:87:49:20:A6:91:32:77:19:A4:67:61:4B:1E:6E:79:8F
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer:       /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial:       01935689DE76EEDC1189470E7B4986555E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number:          12C7
Signing time:             Sat 23 Nov 2024 01:01:36 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:36 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:36 +0000
Files and hashes:         1: 1-WBlUbDJ1YRSfQ0Meu3V2NWwmd4.roa (hash: CHkmzQWqWE+jFnWLBZ41y1wF4EBPJiYu5W/Umbucb9I=)
                          2: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: nn0ZjjeiIyv9ApLlO2ewNJwYQQota+3nDAAAlt2UNsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:de:76:ee:dc:11:89:47:0e:7b:49:86:55:5e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
        Validity
            Not Before: Nov 23 01:01:36 2024 GMT
            Not After : Nov 24 01:01:36 2024 GMT
        Subject: CN=f3635356874920a691327719a467614b1e6e798f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:7d:da:31:52:eb:df:ca:eb:87:10:33:e9:
                    c1:61:70:b7:e4:e5:f0:04:41:14:68:bb:64:95:e1:
                    18:33:67:d2:2c:01:34:14:3b:44:82:eb:9c:52:d0:
                    ca:40:e8:00:61:f1:f9:1a:60:1c:26:17:74:fd:06:
                    4a:83:f3:b7:ac:52:76:bc:6f:8d:63:a8:f2:5f:55:
                    18:31:23:fa:00:95:3b:cf:02:af:c1:2c:2e:17:ec:
                    d0:72:ed:b1:c6:11:02:16:f9:4c:ff:1a:3d:3d:b5:
                    ae:28:49:a3:e8:20:d8:fa:5e:39:29:6c:10:42:b8:
                    0e:7d:4b:2f:0f:bb:87:60:b0:82:a4:ad:04:dc:3a:
                    0b:9d:8a:9d:0b:c0:30:08:f7:67:5b:d2:38:5e:0f:
                    78:92:97:18:61:d8:35:66:bd:00:04:bb:5f:71:8a:
                    5b:64:9e:21:bf:24:7f:0c:57:bd:56:ab:48:70:9d:
                    0d:96:30:76:7f:0e:e2:3a:97:a8:ae:a2:9f:52:cc:
                    da:f0:78:70:68:fc:88:ce:38:53:9c:5c:48:c3:e4:
                    fc:d4:07:c1:ce:81:c8:58:49:84:b1:b2:7d:2e:d8:
                    93:53:0b:0a:68:dd:58:d3:47:1c:33:4d:88:d9:7b:
                    e5:c6:da:67:fe:10:83:61:30:03:07:ea:7c:57:c9:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:53:56:87:49:20:A6:91:32:77:19:A4:67:61:4B:1E:6E:79:8F
            X509v3 Authority Key Identifier:
                keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:73:9c:b4:9d:05:9f:ca:8e:a6:7b:95:9e:5b:d7:57:e4:
         ff:7f:94:6f:3e:04:0c:63:3e:f6:82:bb:be:1b:07:d1:42:95:
         59:64:ae:14:d1:e6:69:17:1a:b2:4c:6e:48:43:29:0a:67:44:
         46:1c:40:8e:2e:58:97:16:03:38:78:50:5e:05:c3:e2:27:3e:
         f5:14:b0:56:e1:db:47:e6:9f:59:3e:90:4d:ec:fd:d2:5b:a4:
         7a:35:97:40:2c:ab:9e:f8:13:ab:88:f6:9e:69:4d:61:08:40:
         6c:6c:ae:b2:5c:01:0c:72:7e:e7:3e:a7:97:f9:5d:fa:51:ad:
         67:ad:fa:29:8d:ab:e9:aa:4a:76:0c:cd:4d:a7:81:80:5f:5a:
         7c:d1:f6:ee:b6:01:2d:a7:cf:f2:7f:b6:f8:2e:10:81:6d:ef:
         74:16:f5:1e:4a:b8:79:fa:54:04:9c:0e:64:66:34:ae:02:fb:
         f2:ea:8b:18:e3:cc:a6:2a:ec:a8:da:5d:7f:1e:f0:78:ec:4a:
         5a:b0:eb:46:c9:f3:0b:c9:87:42:17:90:69:f8:5f:18:a4:43:
         37:b6:cf:2d:85:bf:57:dd:1e:1b:52:43:1e:05:a2:e0:a7:4e:
         c4:96:10:1e:9c:b8:7f:2c:f9:c9:04:7e:86:34:f0:70:85:01:
         e7:a5:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:13 2024 by rpki-client on console-ams.rpki-client.org