Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File:                     CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier:          nE1pgQSpO+5mDIt7Aa1jCypVLO/PgIeXshn4SC2u4Ww=
Subject key identifier:   57:BD:70:42:D1:8B:08:23:A9:9A:07:5F:62:9A:B0:CC:C2:B4:E9:41
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer:       /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial:       01935809356BCC962EE946D487887F610456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number:          100C
Signing time:             Sat 23 Nov 2024 08:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:18 +0000
Files and hashes:         1: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: TcWHjdYiBTU8v6WqmYJsLAH9rtp0zNzbEIjAu1i97JM=)
                          2: fF5Q8NndKkXI_iNF8Th_9a8hWwo.roa (hash: YkVy0MSne/jOU9k11so6dpU4p/7ji16zWL6MPVT2XTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:35:6b:cc:96:2e:e9:46:d4:87:88:7f:61:04:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
        Validity
            Not Before: Nov 23 08:00:18 2024 GMT
            Not After : Nov 24 08:00:18 2024 GMT
        Subject: CN=57bd7042d18b0823a99a075f629ab0ccc2b4e941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:1f:02:b4:90:4d:25:41:57:fb:bf:35:c9:
                    32:7d:40:a6:52:1a:6b:0e:16:3f:f9:cc:83:e5:04:
                    7a:88:d5:20:69:4c:cf:93:8e:13:a5:7e:ef:79:aa:
                    84:fb:70:ad:5f:26:6c:4a:fe:e9:ef:5b:f6:55:22:
                    f5:c5:f2:b0:a0:e8:1d:71:db:91:e8:57:a2:ef:fc:
                    33:ea:20:43:d5:15:82:ec:17:9c:ec:9d:7e:48:bd:
                    88:f9:a2:41:6b:59:87:e0:59:67:d1:b6:f3:58:4f:
                    67:e8:a8:13:87:c3:f7:b2:95:a3:65:f9:db:5b:d0:
                    9e:ae:87:ec:07:2f:de:6c:f5:b9:3b:b5:dc:84:4d:
                    99:a6:3e:37:14:43:9f:88:e0:66:93:63:6e:2c:4c:
                    1e:fb:9a:d1:71:e8:c9:ba:c1:65:f4:0f:7e:84:76:
                    82:6c:7b:65:6f:5d:14:53:03:18:fb:05:6b:3a:21:
                    04:22:8f:49:22:16:a7:70:2b:26:eb:9d:78:fe:7f:
                    73:09:7e:ca:71:d4:6e:a2:17:51:bb:c4:22:3a:0d:
                    cb:36:31:7f:ca:92:76:c0:a9:89:72:11:b7:9d:04:
                    95:65:83:d3:e0:8e:ea:16:e6:cf:8c:62:e0:8a:6d:
                    e6:9a:79:c6:42:3b:6a:4e:09:5e:f4:38:af:b6:63:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BD:70:42:D1:8B:08:23:A9:9A:07:5F:62:9A:B0:CC:C2:B4:E9:41
            X509v3 Authority Key Identifier:
                keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4c:3a:4a:da:2c:2b:6e:83:f5:7d:88:e3:b7:d5:ae:11:70:
         68:a7:11:48:e1:51:46:02:d0:92:e1:19:fd:38:ec:11:c7:5e:
         f4:4b:26:a1:29:60:cd:5b:c9:7e:1d:19:9e:00:9a:0a:78:74:
         6b:ca:4b:ae:2c:1a:07:51:74:ab:6f:f6:f1:09:a3:4b:52:e8:
         b8:73:bb:01:64:30:a0:fa:4f:bd:87:a2:c7:44:5c:8c:a6:27:
         ee:0e:91:98:c6:d8:3e:81:e2:be:63:b3:64:af:da:2c:e6:33:
         8b:39:64:a6:f7:73:2b:3a:93:7f:14:d0:45:4e:a9:af:fb:74:
         ba:6b:62:a8:58:b3:55:e1:ca:f0:e0:a8:f9:62:76:4b:64:36:
         b3:76:13:6c:fd:20:a9:e8:d6:32:53:5b:09:8a:68:59:73:14:
         85:ae:09:76:2d:f5:48:96:d9:2e:9c:b2:0b:9b:42:54:7d:bd:
         59:ba:c3:30:22:bc:be:0c:13:48:6a:7d:80:9a:08:41:35:3f:
         ab:11:db:d3:09:5e:bd:2b:fb:84:b8:61:5e:7d:5a:b5:6d:2b:
         3a:57:f8:6c:e5:87:e4:1d:85:40:59:b8:d0:c6:29:f9:cf:a8:
         48:c0:15:9b:35:30:53:c7:23:2d:f7:66:6f:80:f8:4f:c0:51:
         15:a9:2d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:10 2024 by rpki-client on console-fra.rpki-client.org