Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File:                     mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier:          7Kq9kUIx0O0FvGZHiJ30rB3BNn8eq2wgssn4R89fDWY=
Subject key identifier:   A7:35:7E:77:F1:F1:39:87:67:EB:69:47:E7:19:47:06:F3:41:71:D9
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer:       /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial:       01936BC7F59EBEB98F20C41062B5494D3E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number:          0564
Signing time:             Wed 27 Nov 2024 04:01:26 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:26 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:26 +0000
Files and hashes:         1: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: yqtB8DCNMzOMW7nZXCIpi7skf2aKte8KBksNShb5jeU=)
                          2: vX-nZtMGEO7HOBJRin20dbt55lA.roa (hash: 1vVWjNCsY+9G4+wANVvI/C/WFoAgjRGfMZjo1AGfGbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:f5:9e:be:b9:8f:20:c4:10:62:b5:49:4d:3e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
        Validity
            Not Before: Nov 27 04:01:26 2024 GMT
            Not After : Nov 28 04:01:26 2024 GMT
        Subject: CN=a7357e77f1f1398767eb6947e7194706f34171d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:62:af:bb:df:af:06:5d:23:58:e8:f5:e7:
                    ec:14:03:9e:0a:19:b7:e4:d3:17:34:e2:e8:a6:01:
                    04:3c:45:32:ad:d9:b8:75:62:fa:fe:e0:42:0a:53:
                    41:d0:c1:9f:52:f4:9e:e0:ce:24:ab:ac:18:b2:95:
                    7c:66:4a:fe:08:1a:b9:ad:ff:7f:b0:18:6a:cf:d5:
                    39:58:e3:92:39:00:90:5a:be:92:a3:9e:dc:d4:7d:
                    70:6b:82:70:ae:8a:f2:41:ef:a4:16:79:8c:f3:36:
                    62:e2:17:e0:6c:f8:97:94:36:90:ee:1e:4b:73:88:
                    3b:50:5b:75:01:93:eb:13:cd:cf:e5:5f:18:13:ce:
                    92:15:e0:f5:f1:80:7a:59:a4:14:6a:b3:c5:10:ad:
                    e5:81:55:ee:64:6f:b6:82:0f:d3:06:d2:f1:d2:26:
                    e1:30:0f:fe:ef:3e:db:43:a7:24:85:4d:9e:3e:4c:
                    f6:e5:f8:94:60:a9:d1:01:ea:0e:90:aa:dc:36:79:
                    b7:81:9b:68:e5:2f:0e:56:d4:b6:b2:f7:b1:01:37:
                    ae:a0:56:74:65:82:d3:78:f7:71:8e:70:eb:28:cf:
                    a4:b9:ab:f7:4e:69:4f:ba:4b:d0:f4:0c:58:70:c1:
                    5d:1a:01:91:55:d4:6f:4a:e0:23:fb:3f:00:23:74:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:35:7E:77:F1:F1:39:87:67:EB:69:47:E7:19:47:06:F3:41:71:D9
            X509v3 Authority Key Identifier:
                keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7e:91:99:6d:72:a9:8d:94:6c:29:ce:0a:0e:49:60:f7:17:
         fe:4b:f8:25:f3:43:a7:8b:60:aa:52:82:9b:1b:32:54:56:22:
         1d:99:4e:43:64:38:ab:19:f4:94:f5:be:bd:d1:da:fd:41:a0:
         0e:a5:02:27:db:b2:6f:b2:79:97:71:3a:11:67:19:94:41:e6:
         fa:21:d0:79:14:b4:36:f8:f1:26:90:91:a6:76:0e:17:f3:d9:
         21:41:41:bc:a7:26:23:6c:f8:a9:d0:0e:5a:cd:a8:c1:e3:76:
         58:31:b4:2d:86:db:18:32:41:85:32:b6:40:14:5b:cb:7d:1e:
         79:ca:9b:86:ea:e3:a0:60:b4:b7:c4:95:03:b4:34:7b:1e:a6:
         eb:0f:d3:b8:2e:62:0f:1a:22:c8:ac:cb:9f:83:ea:78:97:3c:
         bd:8c:ac:a4:62:92:88:3d:85:9d:38:1d:81:64:c9:59:9f:31:
         5f:b1:67:1b:86:63:94:5e:3e:85:aa:aa:87:c3:a1:36:07:8d:
         5f:47:34:49:ee:fe:10:bf:13:a6:45:68:56:40:b3:10:7d:41:
         b2:a1:02:db:fc:d1:11:0d:de:43:52:2a:c9:97:6e:0a:31:7a:
         44:96:8f:5e:db:59:d0:51:86:69:8a:4e:eb:d6:74:ff:28:36:
         d9:65:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:16:41 2024 by rpki-client on console-ams.rpki-client.org