Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File:                     L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier:          UfmvKUYaHtpb33w/OEAV1J/3fgYmQ7Z3M4Gd7eNBg7g=
Subject key identifier:   C1:14:FC:42:11:51:45:19:E3:13:CB:85:50:FF:E6:53:BD:DA:AB:59
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer:       /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial:       019356F6F3548EAF65F55B0EAD76484734E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number:          0A51
Signing time:             Sat 23 Nov 2024 03:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:44 +0000
Files and hashes:         1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: /BwrB1LB0/obPCotLI7Djnq+A63Vdusx4K2JiP90MX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f3:54:8e:af:65:f5:5b:0e:ad:76:48:47:34:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
        Validity
            Not Before: Nov 23 03:00:44 2024 GMT
            Not After : Nov 24 03:00:44 2024 GMT
        Subject: CN=c114fc4211514519e313cb8550ffe653bddaab59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:dc:c5:f9:13:92:73:ff:d8:b4:f0:d5:0b:
                    ac:43:b3:e9:8f:d3:39:ea:a8:58:e6:c8:7d:68:87:
                    bc:0e:d6:7d:33:7c:46:bd:0f:79:95:ae:e3:f1:58:
                    6f:94:56:84:46:75:d1:3c:37:1f:1c:db:65:48:c7:
                    f9:b0:fe:ca:0d:a3:9d:ec:e5:ef:ea:db:86:4d:9c:
                    f9:c7:7d:ec:84:3b:86:1b:f8:c0:21:b0:b0:e5:70:
                    ea:9f:b6:e9:b0:4d:28:0f:f4:79:0b:1f:6e:51:38:
                    95:2d:1e:43:17:cc:e9:85:1a:72:22:89:4f:23:e9:
                    2a:8e:c8:f2:f7:6f:78:be:47:98:b9:11:66:c8:20:
                    0d:06:21:bc:9d:28:67:01:18:75:90:90:52:3c:97:
                    91:74:d4:0f:81:49:fc:50:85:a1:25:a5:39:48:2d:
                    10:18:8c:81:de:bf:40:3a:df:cc:1a:83:04:73:99:
                    7a:e4:57:19:03:6f:a1:8f:51:cd:97:3c:32:32:8f:
                    36:27:66:49:05:6c:79:8c:6b:3f:b3:06:f7:17:4a:
                    1b:62:b8:5b:f7:e3:b2:5d:8f:78:fb:7d:72:7c:37:
                    bb:08:78:3d:6c:f5:90:1e:b5:a3:41:ee:19:84:07:
                    47:9b:7e:fb:27:3d:0a:c1:82:b8:a7:47:00:38:6e:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:14:FC:42:11:51:45:19:E3:13:CB:85:50:FF:E6:53:BD:DA:AB:59
            X509v3 Authority Key Identifier:
                keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:70:8d:5e:79:c0:a6:ed:11:36:76:43:e6:bd:c8:1e:6a:36:
         0f:59:d1:b0:d3:36:cf:6d:f2:0d:2b:8c:f2:1a:f7:a9:42:4d:
         45:a2:53:d6:79:1c:86:ca:76:91:59:b3:a9:9f:87:11:7b:12:
         13:9a:7e:fb:b2:0e:56:56:ed:44:64:c6:ca:96:a5:fe:91:df:
         1a:db:36:5c:8f:b5:e7:d8:a7:a5:16:bf:b2:53:1b:2a:3b:a2:
         ce:26:11:a0:d8:3c:26:98:5f:98:e3:4c:61:9c:82:27:9e:f7:
         8f:10:9b:c1:be:a6:86:5d:82:a2:6a:c5:af:72:54:75:2d:b7:
         df:cf:7b:77:ca:9e:53:cd:28:1b:21:ed:56:f8:f4:47:56:d4:
         30:f2:12:dc:8d:bc:c0:d2:9a:55:e5:a1:7c:7e:39:53:f9:80:
         f6:72:4d:85:d4:83:9d:ad:f2:03:10:9b:15:78:73:19:19:48:
         4a:f8:a2:05:e3:76:46:07:c2:2f:f1:9b:df:25:54:65:11:b2:
         a8:44:bf:2e:64:d1:ed:76:41:3d:50:01:a7:85:04:46:6b:89:
         0f:11:9f:99:9b:23:43:46:5f:1a:d6:59:83:39:f2:95:e8:38:
         ce:e3:8c:7b:ed:bc:a1:e2:b9:b0:9f:87:90:8c:6d:5d:d8:4e:
         82:25:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:46 2024 by rpki-client on console-ams.rpki-client.org