Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File:                     Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier:          NYO0sSY+47NPbJW2gHDBehPq8jImwd5Q92MBalKIdfM=
Subject key identifier:   24:F5:83:13:87:0E:97:50:AA:02:77:04:02:28:43:79:90:BB:12:FF
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer:       /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial:       019406B408C18A0FC4978E0C71CB12F4BB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 06:00:49 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:49 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:49 +0000
Files and hashes:         1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: YHonsD0fLBnGTcNrG9quMWWqe1Qik9d5hVA5Os8E56Y=)
                          2: zPeth8kr-6sq0cvod7M8JqkXh4E.roa (hash: FRt03JJvJvJT7oigfkRucxUNcwt/8YQ440/MEF3u7/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:08:c1:8a:0f:c4:97:8e:0c:71:cb:12:f4:bb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Validity
            Not Before: Dec 27 06:00:49 2024 GMT
            Not After : Dec 28 06:00:49 2024 GMT
        Subject: CN=24f58313870e9750aa0277040228437990bb12ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:46:37:43:3e:5c:3d:34:a2:a6:48:e1:d2:
                    f0:92:90:f2:08:aa:9f:61:1f:4c:a3:02:44:69:4f:
                    69:5a:7e:02:4f:7d:22:7e:52:4f:f5:95:bc:9c:19:
                    6c:ec:97:5e:9f:11:d5:9b:f8:61:4c:d7:5a:f7:61:
                    b2:d0:f7:78:b7:b9:0f:92:20:69:e2:02:b4:3d:12:
                    19:6d:50:02:3b:41:7e:ae:89:5b:46:bb:c4:f7:62:
                    d8:5e:43:6b:7f:d7:0f:d5:67:46:aa:0d:22:bf:e3:
                    79:4e:d5:37:8e:b9:37:84:22:b2:98:de:4a:63:2d:
                    4b:f8:49:92:41:46:8c:6e:5a:49:50:a2:57:1c:b2:
                    32:83:f4:96:a6:e6:9d:c1:60:6d:f0:d6:c9:ac:c9:
                    d6:b2:4f:56:a4:75:18:b1:9e:09:86:9e:07:c6:10:
                    d5:ef:c3:d5:79:bb:a6:72:86:30:9d:1e:23:47:4f:
                    96:8d:e1:0e:46:21:a9:27:36:bb:23:ab:07:32:80:
                    3e:25:59:0c:be:b8:91:f1:b4:f4:5e:10:7c:13:d5:
                    b4:9a:ac:61:d8:34:e5:fd:41:7c:0d:b5:e6:d7:e2:
                    ea:3e:04:ca:45:a4:bb:80:36:3b:e7:22:4e:bf:24:
                    72:9a:db:1d:a5:63:97:4f:22:6c:b0:56:75:d1:95:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:83:13:87:0E:97:50:AA:02:77:04:02:28:43:79:90:BB:12:FF
            X509v3 Authority Key Identifier:
                keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:85:eb:09:5c:91:ea:2d:e0:63:12:d2:c8:d1:6a:30:85:ca:
         c3:18:dd:d7:8e:6c:5d:a7:71:ec:8a:e1:9d:72:87:bf:3b:01:
         95:c9:99:6e:96:c5:f2:9b:93:3a:ad:ff:3b:77:53:2d:87:05:
         e4:43:ac:38:25:23:30:e9:ff:bd:f7:72:9e:8f:7d:54:fd:cc:
         b7:96:6d:d2:1d:f1:2e:90:a4:7b:e8:56:5e:11:9a:07:2a:f5:
         3f:c7:3c:99:b6:31:68:a1:46:76:26:ee:14:f4:17:2c:5f:f1:
         fc:5a:94:10:45:d6:0f:ad:17:e7:ea:dc:bd:70:5e:96:05:f5:
         74:b6:7c:03:21:88:85:2a:a8:69:30:41:7a:87:0a:96:53:25:
         48:b2:0c:f2:c0:60:55:e3:5a:bd:06:70:54:9b:4c:f9:72:74:
         2a:74:b7:aa:25:b9:ee:f5:ac:eb:34:b2:8a:31:cb:21:e2:4b:
         9e:63:bb:76:b1:03:4c:16:0b:9e:f0:d9:90:81:5e:90:65:05:
         90:20:32:cc:51:85:1f:fd:e2:af:f2:d4:73:6a:d6:f2:7b:8d:
         45:7a:7b:e8:0d:c2:ca:7e:cd:a9:32:0f:7d:0d:ac:08:59:b9:
         60:76:99:54:4c:00:bd:b3:ed:90:c6:a2:e1:cf:4c:75:01:c5:
         ed:dc:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:56:14 2024 by rpki-client on console-fra.rpki-client.org