Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File:                     1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier:          paCnjsipMfskOHzeYZOcysJ3NGmdMmTgv7e5bZto8lg=
Subject key identifier:   62:59:28:14:B7:A0:24:BF:1E:23:9B:2D:37:D0:1D:BB:0F:C3:74:1C
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer:       /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial:       019367ECC18238157B43F80A288D0DE640AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number:          0E8D
Signing time:             Tue 26 Nov 2024 10:03:09 +0000
Manifest this update:     Tue 26 Nov 2024 10:03:09 +0000
Manifest next update:     Wed 27 Nov 2024 10:03:09 +0000
Files and hashes:         1: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: OVyKPWjsUMT1nOXyolQ3MFaKlvLbdGYCQg60Z+KHpnI=)
                          2: LkN4qMLmZa3r3JoBZM5u1Gja6r0.roa (hash: Orn0OZqn+7ofawOcNzVnOAVEFVwk3t+vplZ7mfvJ4xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:c1:82:38:15:7b:43:f8:0a:28:8d:0d:e6:40:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
        Validity
            Not Before: Nov 26 10:03:09 2024 GMT
            Not After : Nov 27 10:03:09 2024 GMT
        Subject: CN=62592814b7a024bf1e239b2d37d01dbb0fc3741c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:bd:dc:b0:7f:14:c1:9f:c6:88:db:88:42:
                    24:84:4d:7e:c1:14:45:a5:82:56:33:51:c4:72:70:
                    3b:e0:85:c3:f5:c7:15:2b:73:af:85:71:f2:14:98:
                    bf:09:80:c7:b9:8e:9d:6d:31:ed:7b:04:34:9e:52:
                    d7:02:0b:03:3d:62:c3:c6:63:c8:76:91:28:c4:66:
                    8a:96:2d:e5:59:bf:fa:75:32:b4:5e:fc:ba:b9:05:
                    c8:74:b5:33:aa:bf:ae:2b:63:f5:52:18:e1:d1:51:
                    52:e0:03:17:05:6c:f4:02:c3:6d:85:30:af:73:01:
                    86:4a:1e:b7:ca:b5:80:9c:9a:1a:e7:a0:0e:8e:5d:
                    ea:0b:a1:64:07:bb:97:b2:65:14:56:5d:c6:81:77:
                    60:ab:fc:c2:28:1f:92:08:19:bc:83:93:14:cc:38:
                    ce:f8:da:79:28:8b:ce:66:d3:58:95:ad:f1:36:df:
                    f4:6d:de:7b:69:be:15:ef:b7:4c:1d:97:20:64:8c:
                    0c:37:e9:53:b9:f5:db:66:60:3a:40:d8:b5:a9:a7:
                    65:af:18:c1:22:e1:36:16:99:50:1f:24:17:67:63:
                    c4:66:d5:e0:36:23:59:54:30:a0:c9:bb:72:9f:60:
                    2c:7a:ee:69:a2:0f:a4:29:16:11:ce:c3:fd:2f:92:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:59:28:14:B7:A0:24:BF:1E:23:9B:2D:37:D0:1D:BB:0F:C3:74:1C
            X509v3 Authority Key Identifier:
                keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:4f:12:6e:ac:07:0a:47:97:25:d2:9a:73:a5:cf:9c:23:
         c4:aa:5c:f6:c4:e6:25:e5:1c:ef:49:3a:4a:ca:d1:cc:8e:34:
         5c:87:75:79:51:ab:8d:d5:02:28:0a:e7:a3:64:23:a3:3c:3a:
         4a:f2:0f:41:78:16:7f:f8:a8:51:f3:2a:49:8b:4b:91:0c:af:
         0c:4c:05:75:dd:cd:2f:a8:53:a3:b4:f2:41:64:0b:07:18:c6:
         bf:c5:2b:5e:5f:f6:70:6f:46:46:db:88:ab:58:e9:69:87:0c:
         d5:74:b2:4a:c6:97:6f:79:89:c0:1a:7f:f5:05:9f:d0:61:43:
         f3:ee:1d:6b:24:55:55:2d:4d:f3:7e:f2:a1:10:b0:8b:1d:5d:
         56:77:11:65:96:48:6b:7e:76:b3:65:0c:72:8b:fa:b4:09:9c:
         05:72:67:17:89:db:7b:37:db:7e:92:ed:90:09:78:da:4a:34:
         6e:8a:83:71:db:f5:1d:5e:e9:69:b8:4f:dd:49:e3:05:5a:0d:
         f9:39:49:52:14:f1:45:27:65:65:09:0a:00:de:74:4e:1b:af:
         52:9e:d2:42:1b:24:18:de:0d:de:d4:18:aa:a7:7c:db:30:39:
         94:31:7e:3c:c2:1f:9e:7e:15:9f:ab:85:4f:85:77:ee:4d:fb:
         31:27:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:41:43 2024 by rpki-client on console-ams.rpki-client.org