Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File:                     CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier:          Sv52FF3QoPm1Ny8rH74hedYuCmvKiwDv1/0rAvUphpU=
Subject key identifier:   80:FD:58:74:65:24:29:90:0E:13:49:BB:B2:32:02:0D:49:C5:1F:0A
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer:       /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial:       01935764704AAB571FBBE150CF4C4A479B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number:          08D4
Signing time:             Sat 23 Nov 2024 05:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:20 +0000
Files and hashes:         1: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: ErT1U+nSb26o4ilgU60azF5tnyQrdFcUMMH3Dxug9LU=)
                          2: JdmjzqSa6s_LVQmtMiPpiR4HvPA.roa (hash: f/tEDEx/MRPdglmTAN6lAtoLW+Mrxn2/TDTqZ3gxYFY=)
                          3: _yNzTIjilXTlC5M7e6jW-gNlh8M.roa (hash: EfyknfqRXmW6PM4OFVtDskFgNLaDFbVAD+wv4RsQLn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:70:4a:ab:57:1f:bb:e1:50:cf:4c:4a:47:9b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
        Validity
            Not Before: Nov 23 05:00:20 2024 GMT
            Not After : Nov 24 05:00:20 2024 GMT
        Subject: CN=80fd5874652429900e1349bbb232020d49c51f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:2a:bd:0b:21:a9:74:9d:7c:8b:36:dc:63:
                    ac:f1:57:bc:1e:12:24:1d:32:ef:f4:c6:fb:0e:ef:
                    78:64:c7:94:fd:67:06:7e:55:c6:e7:18:b7:eb:ab:
                    ff:a7:6d:6d:5b:3c:d5:36:4c:12:24:68:2e:2d:43:
                    8f:61:fb:a9:12:7a:a8:52:58:4b:1b:29:57:c3:4f:
                    12:12:c1:f5:d9:bb:97:c0:89:78:31:dc:00:57:ed:
                    56:93:59:fe:e5:cd:2e:c3:ca:16:79:ce:18:5c:f7:
                    a7:8c:9c:6e:56:3a:bf:06:c5:f2:7c:79:af:33:a5:
                    27:49:ae:bc:18:b1:3c:fc:5a:0c:c6:d9:85:03:0a:
                    97:77:18:1d:88:75:cd:c6:f5:97:35:dc:9a:3e:19:
                    4b:31:59:8e:e1:d0:3a:f0:14:9a:54:33:85:61:8c:
                    6e:e5:55:01:10:01:b7:3f:75:d0:21:df:1d:98:6c:
                    1a:9a:74:e8:12:ad:f5:0c:bf:91:d5:bc:59:de:c2:
                    75:d5:97:f5:e4:56:3b:aa:04:fd:5d:40:25:be:b8:
                    c0:b4:cc:7f:ff:77:7a:85:95:3d:77:19:b3:a2:ba:
                    6b:35:af:da:1f:12:f7:64:83:a7:b2:28:7a:7c:2a:
                    c6:e1:9a:e9:21:22:d9:98:0d:ec:9b:e1:17:b5:cc:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:58:74:65:24:29:90:0E:13:49:BB:B2:32:02:0D:49:C5:1F:0A
            X509v3 Authority Key Identifier:
                keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a3:48:92:c1:3f:9a:11:36:d8:ed:dc:29:4d:4f:91:a5:68:
         f0:ac:6b:a8:02:78:ed:8b:0d:3e:06:7f:fa:78:c0:f4:cb:0d:
         99:a5:54:54:b2:16:c6:b2:fd:fd:71:49:88:87:de:fe:6c:16:
         09:55:37:ae:03:9f:cc:1d:63:8b:d4:a9:25:e0:1f:69:bc:ee:
         ef:35:24:24:28:b8:4b:61:6d:d8:0a:c9:55:92:f1:07:db:6b:
         79:ae:ea:4f:3f:b3:db:e0:ba:97:73:61:c2:7c:6f:e1:5b:8e:
         9c:1c:7e:56:6f:b1:fc:15:23:59:26:e8:f4:ad:d8:61:04:57:
         de:f4:b2:bc:87:cb:57:aa:4f:f5:a4:41:2a:ed:30:dc:59:7c:
         dd:08:d6:f1:ee:ce:62:96:90:6e:02:d3:a1:90:be:23:1b:f9:
         0d:c0:20:02:b7:d1:93:23:3a:91:7b:62:a6:06:89:a5:fd:7a:
         e3:be:2f:b8:64:ec:d4:ae:87:7b:cc:c7:54:ce:90:dc:f4:96:
         f9:09:be:53:36:22:9c:58:83:1d:3e:ab:fa:c8:29:62:2b:bb:
         11:cd:8c:38:d7:45:da:0e:99:eb:ec:36:35:d4:b2:81:68:d9:
         04:22:82:ba:c2:6b:bf:0f:07:63:16:1d:8a:d4:39:25:31:64:
         fc:f9:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:45 2024 by rpki-client on console-fra.rpki-client.org