Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File:                     0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier:          7G7aLPuz50eY++ebXnOQ4UEK9bGND3662nri6trcN/Q=
Subject key identifier:   95:8C:59:82:23:3F:BE:35:51:D6:6B:F8:C2:A0:01:3A:C2:5F:8A:05
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       019356894191E318AF7254E325D069ED198D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number:          1124
Signing time:             Sat 23 Nov 2024 01:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:55 +0000
Files and hashes:         1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: 4A4a+LO1d6soNGHR1aLdt+bC3n2zgCPQH3M9o4YgNFk=)
                          2: DR6ZGbif0VVW1sLPR9dtQznAkWY.roa (hash: CPyIabgiO0KsuC6W1xYHhgaACWq/10vpAPMsePBYrmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:41:91:e3:18:af:72:54:e3:25:d0:69:ed:19:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Nov 23 01:00:55 2024 GMT
            Not After : Nov 24 01:00:55 2024 GMT
        Subject: CN=958c5982233fbe3551d66bf8c2a0013ac25f8a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:83:79:b6:14:b1:74:99:fb:a5:ad:b9:ff:
                    14:cd:04:9e:f1:13:3d:e0:d3:26:dd:92:8c:75:0e:
                    e6:43:66:89:79:89:1c:85:28:34:c3:c8:1b:e6:77:
                    70:19:9d:b7:ea:2e:26:64:e7:5a:d1:d2:a2:d4:07:
                    14:18:a3:10:6e:0f:a6:a8:fe:a4:37:c8:c8:6c:11:
                    ae:85:5f:b6:7e:a8:96:f3:22:86:c6:6f:18:bf:84:
                    c4:7b:29:eb:fe:2b:1d:ef:5a:e9:c1:6c:f8:f2:7f:
                    d3:82:0f:d0:31:24:38:ba:da:df:5f:34:bd:ca:cb:
                    dc:8e:c2:24:eb:80:6a:ce:f4:03:bb:4b:c6:57:9e:
                    e0:2b:20:ac:66:f0:92:b7:d4:01:0e:e5:bb:f6:a1:
                    93:c1:68:20:58:e2:8f:3b:9e:9d:5a:f2:1e:17:a5:
                    f3:b7:67:56:6d:f1:26:72:d1:49:e2:f0:91:64:75:
                    91:b6:c4:32:95:56:58:15:c0:17:31:05:98:f2:28:
                    e4:93:06:67:eb:fc:1c:d4:eb:7c:2c:62:d4:f3:9b:
                    97:13:96:76:52:30:e4:2d:d2:5b:c4:e6:b1:8b:9c:
                    fd:a1:85:83:ce:0a:07:2b:61:81:d8:56:64:a2:92:
                    32:af:1a:39:22:15:97:f9:d4:45:a1:fe:f6:8a:1c:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:59:82:23:3F:BE:35:51:D6:6B:F8:C2:A0:01:3A:C2:5F:8A:05
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:92:12:90:66:d1:69:73:58:c2:8c:61:17:39:fa:bd:8a:d2:
         2a:f0:f5:a6:7c:eb:04:cb:37:cb:8a:60:6d:1d:3a:5a:e9:e4:
         41:ee:4d:30:14:89:e4:72:26:32:ad:bc:b2:4e:8f:fb:45:b8:
         a9:59:f0:c9:ee:73:12:10:3a:6e:81:d7:f2:14:3b:bc:82:0f:
         da:95:46:28:38:45:24:37:1c:4a:3f:32:74:e0:e5:9b:51:c5:
         ed:4b:08:bd:91:25:7f:ad:5b:1e:e4:29:a8:d9:af:37:1f:93:
         15:f6:ca:cc:19:3d:95:0f:96:09:0c:4f:43:be:82:cf:55:36:
         06:0a:58:a2:fa:ac:b0:94:9f:f2:16:91:92:ef:99:9a:76:49:
         fb:38:26:4c:fb:8e:f3:a8:c3:e4:e1:36:f2:8c:2c:63:fd:92:
         58:af:a2:6c:ea:04:63:7c:ee:fe:99:99:bc:01:8e:97:38:06:
         85:6e:a4:ab:5d:a3:4e:d0:7f:44:2a:c2:57:f8:eb:9e:e7:8b:
         5b:62:9c:d5:03:25:0f:fe:48:2c:26:a9:f9:71:de:a3:10:00:
         28:e4:f4:e2:3e:ad:64:74:30:fc:a2:2b:ac:2a:03:79:03:b5:
         10:f6:c4:0c:03:38:b2:5c:21:b7:3e:79:02:f5:94:aa:21:b7:
         b0:7f:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:04 2024 by rpki-client on console-fra.rpki-client.org