Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
File:                     1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft (raw, json)
Hash identifier:          xZ1yeklyXODdmjcUsjt+mUfzagePEMXUNDGh0vGtndA=
Subject key identifier:   51:95:B7:C8:28:FC:F2:C7:9B:F3:B8:0E:C3:88:52:5A:15:E7:81:BC
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Certificate issuer:       /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial:       019357D2D217631BE419D3E332AD6C40A108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
Manifest number:          10B3
Signing time:             Sat 23 Nov 2024 07:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:54 +0000
Files and hashes:         1: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl (hash: V4hJL6wsFNTAO7BOSyJBS6lnLxadMbq/qijcI9BK1W8=)
                          2: wQW0c6qrDXRFXYZ_tc8bQrwPVtY.roa (hash: TZ1XHNJBOAJCx37CCDL2BkyTJ/t7EqdCn2rkgk+YUPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:d2:17:63:1b:e4:19:d3:e3:32:ad:6c:40:a1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
        Validity
            Not Before: Nov 23 07:00:54 2024 GMT
            Not After : Nov 24 07:00:54 2024 GMT
        Subject: CN=5195b7c828fcf2c79bf3b80ec388525a15e781bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:47:09:ac:95:a9:09:f5:59:64:a8:11:93:
                    af:17:d6:4c:69:d5:a6:84:14:dc:fd:70:eb:f2:88:
                    28:97:00:5a:9f:b1:bf:9d:68:7a:4d:e9:a4:94:aa:
                    08:b3:bf:52:80:54:2d:ea:4f:3e:38:2c:e1:0a:34:
                    fc:2c:d6:dc:fc:89:f2:b9:b0:79:4d:77:f0:c2:88:
                    4d:8d:a4:07:60:be:2e:68:09:44:62:7f:61:de:60:
                    fe:9a:25:28:54:3f:76:c4:d5:bc:fc:16:16:4f:0e:
                    55:40:b7:07:77:33:a3:07:f7:d4:af:83:89:0f:fc:
                    88:4a:13:e5:65:a5:b9:51:8a:8b:3a:c8:b1:f6:c3:
                    95:92:57:35:7b:d0:66:c5:07:e3:49:50:cb:df:72:
                    0d:0d:a6:05:aa:3d:c7:2e:a1:5a:c0:0e:49:fa:00:
                    34:63:2c:6e:76:9e:83:23:9f:3f:1c:53:09:ee:bf:
                    1c:1b:d6:c1:56:37:e9:ef:14:58:0c:2a:b4:0c:df:
                    9b:73:eb:63:58:d8:50:22:3f:d6:4d:a5:7d:ff:73:
                    d8:aa:ee:22:fa:eb:89:b0:fd:2b:f9:24:34:93:ae:
                    5d:46:4e:28:f0:17:57:f5:7a:9e:1c:2f:89:d2:94:
                    59:50:ad:9b:30:8e:28:00:1e:3e:21:03:4b:3a:d0:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:B7:C8:28:FC:F2:C7:9B:F3:B8:0E:C3:88:52:5A:15:E7:81:BC
            X509v3 Authority Key Identifier:
                keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:13:87:30:20:ee:55:ca:35:4e:f7:34:78:aa:15:52:61:d5:
         12:79:66:68:4a:ff:c5:77:79:7a:44:55:eb:2a:2e:2e:e2:31:
         01:a7:1a:37:0e:9b:13:eb:43:cc:37:30:9a:9e:c2:f5:d8:52:
         f5:e2:84:d8:21:9f:06:89:1a:db:1d:81:c2:00:45:65:0d:72:
         9e:06:69:57:1a:bd:03:0c:fb:38:5b:ff:7b:9f:7d:f4:ee:5f:
         1d:90:9c:60:89:6c:02:29:29:cc:8c:b1:73:c6:95:39:97:bc:
         da:16:67:75:47:d9:57:aa:10:59:ff:1b:8b:61:9a:68:a8:b0:
         09:61:1c:63:ac:18:7e:c7:44:52:3f:35:63:7c:a5:3b:37:10:
         8e:00:2f:5d:4f:9e:66:87:e2:34:3f:3a:dd:b7:2a:c4:4b:6f:
         25:74:98:96:85:7b:88:39:1a:f5:53:43:30:02:90:ea:31:9a:
         42:8b:43:d3:e9:f5:05:68:ac:39:06:34:ad:32:5c:77:22:ad:
         02:3d:05:ab:5b:ba:7b:4b:f1:46:62:3e:c6:6b:aa:75:ea:13:
         71:27:05:12:5b:85:b0:a8:d9:9b:f8:ab:32:0f:c3:52:65:ea:
         10:37:3a:cf:6d:94:e2:4d:1b:02:54:00:94:a3:a3:45:ef:18:
         53:b8:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:24 2024 by rpki-client on console-ams.rpki-client.org