Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File:                     CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier:          QcUHjyfVt0bY5mlklpjxvjznV1dgDu6tnGYCRwt8b1c=
Subject key identifier:   E2:0B:D5:63:42:94:98:39:31:48:DD:CB:67:F1:2F:8A:AB:A4:CC:0B
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer:       /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial:       0193579B5A89301756E1DB2B1B807018907E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 06:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:19 +0000
Files and hashes:         1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: Q0nJWKukjbl3qoDjTMaXzFoevEOgcR8IoE4SxL7eSV0=)
                          2: pBduEXeJe7CWLYI1dzrSRIFWDTk.roa (hash: VyxqF9GZ6xD01NEGZGy/4Yw22QAHhbk5WHmFUVWO/ig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:5a:89:30:17:56:e1:db:2b:1b:80:70:18:90:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
        Validity
            Not Before: Nov 23 06:00:19 2024 GMT
            Not After : Nov 24 06:00:19 2024 GMT
        Subject: CN=e20bd563429498393148ddcb67f12f8aaba4cc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:95:46:48:99:d5:09:81:60:6f:2f:b3:05:
                    95:50:01:7e:0f:80:f2:30:a7:87:bb:b9:bf:78:2b:
                    30:40:1c:f9:4e:99:3c:61:af:94:c8:44:e2:5a:f3:
                    70:1e:9f:2a:2e:d8:59:1a:28:cc:6d:61:10:52:7e:
                    d7:52:38:d4:a3:a5:c1:4f:88:60:2a:3e:36:43:5d:
                    35:7f:b5:1d:72:2c:9c:70:eb:9b:49:ec:9a:c2:f4:
                    14:61:9f:b9:26:05:06:ed:34:b9:f4:19:34:46:5f:
                    95:c5:0e:a5:ce:5d:54:9c:2b:80:ae:b2:71:b9:2f:
                    e2:0a:4e:13:e9:11:47:db:d3:e3:95:00:7b:3f:67:
                    09:10:45:97:e4:0f:94:bd:d7:4a:a8:6f:89:8f:dd:
                    e9:d5:10:36:02:90:b4:d8:73:cc:64:e7:a1:32:de:
                    bd:e8:33:68:b6:80:eb:eb:01:30:29:79:bc:d1:c5:
                    1d:56:a1:d3:c7:f9:f0:b9:7c:e9:4e:f6:61:73:d5:
                    d4:69:ba:cb:d6:52:ed:95:38:cc:9f:97:59:99:46:
                    07:b8:2b:f0:f0:0a:a4:60:81:2d:49:22:43:56:f3:
                    2e:d6:0e:c0:ba:25:ce:02:d0:9b:d8:94:9c:7e:bd:
                    a1:0b:38:d4:24:5c:9f:cc:44:38:fd:47:2d:02:85:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0B:D5:63:42:94:98:39:31:48:DD:CB:67:F1:2F:8A:AB:A4:CC:0B
            X509v3 Authority Key Identifier:
                keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:21:ae:73:8e:c6:f4:14:80:1f:48:06:d8:54:4c:a9:ce:87:
         68:66:e1:f5:a3:1e:83:7e:38:83:7e:23:62:0b:c8:f2:24:2d:
         26:75:98:1d:3a:72:cc:15:5d:ab:34:27:44:2f:84:fd:f7:32:
         cb:47:af:62:1d:12:1e:b0:e9:e5:03:b7:4f:82:9d:90:c2:2a:
         ce:de:7b:12:3e:ee:1d:b0:c9:ae:4c:e8:60:e8:13:ea:c4:78:
         3d:41:ce:0d:2e:4c:a0:d6:9c:be:2a:02:97:33:78:20:9f:3e:
         95:a6:77:2d:0f:b1:d5:87:53:24:80:a0:86:0e:45:e2:15:6d:
         bf:36:9d:e5:da:7d:e9:62:80:73:31:de:3b:c4:15:10:63:9c:
         0a:8e:55:e6:58:9b:fd:21:5e:24:45:e5:bc:e2:fd:5e:a4:6f:
         83:7f:95:38:30:b9:e8:a0:67:88:e2:28:e1:2b:2f:a1:20:ee:
         85:f2:e0:b7:80:93:4c:4c:77:bf:12:ec:aa:65:9b:a6:e1:a7:
         fd:04:25:77:19:4f:60:56:8a:d5:51:3a:6d:b8:7b:5c:9d:63:
         e3:b9:1f:e4:d2:30:f2:99:45:bf:72:93:10:15:82:30:8c:d4:
         76:d7:82:a9:f1:08:d4:32:3d:b0:4b:b3:30:d2:7d:4e:9b:57:
         e3:ef:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:41 2024 by rpki-client on console-fra.rpki-client.org