Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File:                     1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier:          d1Px1Rxz36SH4HV2j23CN9EBu1PODI7dhhyV9c32piQ=
Subject key identifier:   B1:2C:1F:E9:B8:6A:6F:35:1C:88:DD:8C:D7:30:A6:D5:27:15:5B:C0
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer:       /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial:       01935350B2DB8BABF4D7AFF071648BD34738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number:          034F
Signing time:             Fri 22 Nov 2024 10:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:17 +0000
Files and hashes:         1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: 3wVMeidkqqTMaIiDPRaOGQJLRH4ydzsGxXnqw3XpV8c=)
                          2: y0CWjlNWCadWfz4mHrC7gdGKuws.roa (hash: TweKFOqJTzEMoEWAKdQJhQr7xxHPnhJ5VlTHQ9qidz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:50:b2:db:8b:ab:f4:d7:af:f0:71:64:8b:d3:47:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
        Validity
            Not Before: Nov 22 10:00:17 2024 GMT
            Not After : Nov 23 10:00:17 2024 GMT
        Subject: CN=b12c1fe9b86a6f351c88dd8cd730a6d527155bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5a:94:aa:c7:1f:63:15:a2:ec:35:fd:81:0e:
                    85:a9:79:10:98:24:2a:d3:54:4a:42:21:cd:9c:91:
                    ca:9b:88:3e:96:6a:90:00:55:1c:82:0e:c7:63:a4:
                    3d:46:02:83:cf:3f:21:a3:85:fc:8b:fd:fc:cd:cc:
                    06:56:d2:ce:b8:06:bd:dd:c8:44:02:d9:c1:d7:fd:
                    70:0c:ce:95:db:1a:e6:7e:10:bf:97:c7:56:77:fe:
                    36:d1:f5:48:b4:18:9e:0e:32:20:5f:ab:56:b6:2c:
                    c2:32:ad:aa:6e:42:de:6b:01:fb:9a:23:17:2f:8f:
                    b5:64:c9:74:2a:43:e6:dd:5d:8b:2f:71:92:32:35:
                    31:d0:44:69:00:34:75:99:e9:ca:2b:05:51:df:bf:
                    d4:ba:0e:b6:2f:8e:19:d0:c6:fc:c9:6c:7e:73:e6:
                    51:f9:9e:67:8e:97:c6:b8:f4:f5:9a:e0:71:63:eb:
                    aa:5a:24:6f:43:34:63:f4:7b:1c:81:ef:58:a6:64:
                    0a:2c:6a:59:ae:05:98:4f:bd:74:de:f5:9a:9c:cb:
                    b2:73:c1:30:9f:5f:2e:54:77:eb:c8:70:87:1f:b5:
                    9a:6b:9d:d4:5d:1a:b8:34:b8:af:de:e0:52:08:c8:
                    7a:1b:86:ff:fb:d2:b6:52:f5:f3:aa:14:37:2c:e9:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:1F:E9:B8:6A:6F:35:1C:88:DD:8C:D7:30:A6:D5:27:15:5B:C0
            X509v3 Authority Key Identifier:
                keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:64:cd:29:4d:d8:bc:e0:28:0e:9f:9e:e8:23:68:da:8a:
         a8:c6:88:29:3c:d5:e3:4b:84:ef:c5:a5:69:a0:c6:09:6d:1e:
         12:02:30:68:f4:70:c1:cc:da:8b:92:88:18:da:14:4e:24:e0:
         0e:0b:4b:1a:9f:2c:58:08:97:82:11:cc:11:2f:3a:63:dd:ad:
         9a:6c:f3:be:d7:02:1d:f8:20:69:74:82:41:63:f7:f1:34:0c:
         72:3e:f0:67:e9:c5:f9:22:dc:55:9a:08:15:4f:1c:c3:45:e3:
         71:7f:64:1a:b8:27:e1:23:7b:ce:02:28:a1:96:7c:bb:b3:65:
         51:83:17:1f:20:6a:07:7e:7c:a1:e0:ab:a6:ab:41:ba:eb:a7:
         81:b3:e9:da:05:78:bf:ec:1a:28:29:b1:3f:5b:1d:37:6e:17:
         9f:82:04:09:ef:58:5a:dd:86:4e:de:2e:de:ad:4e:74:b3:be:
         f3:b6:e2:5a:26:52:ee:ee:75:aa:51:f7:45:c6:a7:3e:4b:d9:
         c7:d7:17:af:e9:fd:ee:39:53:c4:d7:09:92:0f:81:db:82:b3:
         77:11:f6:f2:6d:89:e4:07:56:0d:1e:74:fa:a4:2a:ed:03:ae:
         ec:9a:92:8c:b2:d4:5e:b3:fa:cc:d0:55:b8:d7:80:bd:5d:b0:
         c5:38:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:46:34 2024 by rpki-client on console-ams.rpki-client.org