Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
File:                     ILDaIC0sNKRzptdq8JPo3gMRuVs.mft (raw, json)
Hash identifier:          gptdEaWUCzPf7xUAcXr9R6WFMDPh81H6gMIEUt4NNkA=
Subject key identifier:   F9:FF:D6:73:EE:07:3E:85:B8:3E:C8:4C:00:4B:DF:55:0C:69:45:44
Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Certificate issuer:       /CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Certificate serial:       01936031A689B18F00F4FD81EF36524E17FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
Manifest number:          1374
Signing time:             Sun 24 Nov 2024 22:01:26 +0000
Manifest this update:     Sun 24 Nov 2024 22:01:26 +0000
Manifest next update:     Mon 25 Nov 2024 22:01:26 +0000
Files and hashes:         1: ILDaIC0sNKRzptdq8JPo3gMRuVs.crl (hash: 2bkuWFaWWHjBLXjgA5/Q1RJHmZ6RERZKmHERusYWXV4=)
                          2: q8pW9fE0BJkjjjesFUH330E3DtA.roa (hash: +ZfM2AgB8tHKfXOXilDRngBbAVFJbIdEd1HTM192bm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:31:a6:89:b1:8f:00:f4:fd:81:ef:36:52:4e:17:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
        Validity
            Not Before: Nov 24 22:01:26 2024 GMT
            Not After : Nov 25 22:01:26 2024 GMT
        Subject: CN=f9ffd673ee073e85b83ec84c004bdf550c694544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:cb:c4:cc:8b:c6:fb:ad:a7:cc:04:6b:99:
                    88:80:e3:5f:6c:80:31:73:01:bf:d8:f0:a2:2e:1d:
                    65:5b:5e:24:ca:92:88:ac:87:28:8f:40:01:2c:92:
                    2b:e2:db:2f:cd:fc:bf:b8:77:49:f5:70:ca:8c:6a:
                    eb:11:ed:fa:7c:31:97:f8:43:f6:db:63:3b:40:27:
                    43:2d:c8:b6:f5:67:a2:0d:1c:db:7b:44:d3:d1:33:
                    85:51:f1:dd:5d:94:51:08:54:e3:0c:1f:08:7a:1c:
                    80:da:d7:f1:ce:63:8e:a7:9c:0c:d0:c2:fe:d3:3c:
                    ec:d2:39:b7:dd:a8:3a:48:5e:b6:35:75:89:97:f7:
                    49:40:f5:1e:9b:2f:1e:41:12:23:60:bd:19:d2:57:
                    de:b9:2b:9e:61:c5:59:05:b1:51:15:72:7f:0f:1d:
                    94:b0:e0:a8:19:ef:fd:09:ad:26:20:0e:1d:9e:20:
                    20:0a:67:ee:7e:75:4f:c3:10:86:fa:ad:48:8a:56:
                    0b:c5:52:62:d3:c3:9b:5b:31:24:a3:8b:59:e5:5b:
                    78:80:35:3f:e9:32:f7:3a:ca:6b:b1:f2:e1:ef:92:
                    de:0c:80:cb:e7:0d:b0:f0:f5:11:00:d6:38:c6:e2:
                    d9:b0:1c:9e:80:72:82:a0:25:9b:17:d4:2e:01:c3:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:D6:73:EE:07:3E:85:B8:3E:C8:4C:00:4B:DF:55:0C:69:45:44
            X509v3 Authority Key Identifier:
                keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:b6:65:45:0d:2c:d2:de:4f:43:be:5a:f4:9f:8d:07:9c:
         9d:4e:a0:2c:a6:57:ff:0f:98:93:1f:07:71:0a:32:9d:c8:3e:
         32:28:03:30:e1:fe:38:3e:0c:93:01:37:18:f5:95:96:ce:b7:
         8d:76:3b:c4:9b:40:f6:5d:19:ff:64:bf:c7:ba:1d:88:ca:4d:
         2e:9f:b9:53:0e:0b:39:1b:16:bb:5a:cf:8d:43:2d:7c:22:ae:
         3a:25:aa:7f:ad:97:1a:aa:5d:43:40:10:7e:9a:ac:2a:ef:d1:
         ad:fb:1a:28:82:59:4f:c0:1b:5a:7b:61:cc:ba:0d:51:b0:9b:
         c9:a6:ed:a3:3a:f9:0b:43:4a:41:39:e8:06:31:89:f8:24:d9:
         f7:20:98:97:d8:9d:7d:45:c9:fa:c2:fb:3a:98:a8:7b:26:9f:
         a5:70:d3:72:c6:39:39:ea:4d:d9:b4:36:ed:ce:2d:e2:3e:bb:
         2b:8c:89:08:a6:2e:1e:23:33:ba:31:14:58:78:f4:95:75:49:
         84:26:70:b3:f1:59:69:1c:0a:3f:0f:37:b1:f0:de:32:64:32:
         17:e2:e9:68:10:47:80:61:c0:49:cf:46:de:66:01:3f:68:e1:
         0a:e8:83:42:b1:80:64:9b:b0:5c:ec:96:1a:ce:3c:4c:50:74:
         1d:d2:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:03:04 2024 by rpki-client on console-fra.rpki-client.org