Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File:                     A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier:          VpuN8VXstPXyGZ4So/rah8zbLxOoSZ2T1wG6KEl5ysc=
Subject key identifier:   76:A3:C2:69:36:F4:1E:3F:8A:E3:07:B7:44:CD:D9:71:08:33:0F:D6
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer:       /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial:       0193579BB77D65B5B25B11C456B64463167D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 06:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:43 +0000
Files and hashes:         1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: w0EYvyaN827EhZTAZPXg0IeHs5TouDMLKeayMrHC+fw=)
                          2: ZSj87iV3hi_E1eRk5vDWG03jrro.roa (hash: oZmVNnO0QDPRhDUzRjOkxi/hZXFTws8ohyMcgwRjEKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:b7:7d:65:b5:b2:5b:11:c4:56:b6:44:63:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
        Validity
            Not Before: Nov 23 06:00:43 2024 GMT
            Not After : Nov 24 06:00:43 2024 GMT
        Subject: CN=76a3c26936f41e3f8ae307b744cdd97108330fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:21:6c:4f:a8:a1:e0:d1:9d:41:be:92:53:
                    a2:1c:8a:f0:03:da:35:39:42:db:1b:27:1b:2c:c7:
                    35:33:5c:f1:4d:77:f5:71:78:65:54:71:6f:c0:13:
                    15:30:ca:1a:fc:36:76:f0:19:ca:bb:bb:62:ae:f8:
                    f5:67:55:78:44:c0:15:56:1e:e0:ef:97:35:56:4a:
                    6a:60:09:b9:67:55:2d:3b:0a:93:36:3e:0f:25:bf:
                    7a:43:f4:87:1e:0b:e8:5b:a6:45:19:0b:1b:17:ce:
                    db:83:61:e7:74:b4:f5:81:94:36:d9:82:90:9d:f9:
                    e0:c0:01:48:71:3c:24:95:59:f1:30:ef:bd:a4:5b:
                    f4:f3:d6:16:c1:02:c9:fc:95:1f:ac:1b:6f:02:3b:
                    95:f6:e1:10:d7:4f:87:55:b0:f0:99:7b:e6:88:f6:
                    25:e4:2b:a2:08:f9:1f:f1:4f:49:c1:ed:3a:9f:3f:
                    21:fe:d9:dd:e5:4d:60:ec:f0:44:fd:06:2f:6f:25:
                    b7:24:e6:82:83:b4:03:24:1f:2c:5f:40:15:45:40:
                    49:c6:5c:01:57:a5:ad:aa:11:79:b8:3f:ad:43:1d:
                    27:a6:56:36:11:95:36:47:fb:75:90:8c:19:ba:4c:
                    48:2a:98:5a:55:2e:21:99:7f:4b:7c:8d:ea:83:94:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:C2:69:36:F4:1E:3F:8A:E3:07:B7:44:CD:D9:71:08:33:0F:D6
            X509v3 Authority Key Identifier:
                keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0b:f1:d1:74:d3:9f:97:df:9d:6f:e7:cb:40:5c:51:d4:eb:
         33:bc:5b:26:c6:41:4c:26:c4:f5:b9:8f:e2:13:16:0a:67:e6:
         12:c2:9b:1f:75:03:22:0e:10:64:81:b2:23:e5:b6:ab:9b:5f:
         11:55:a5:78:af:9f:8c:98:06:0a:9f:18:30:88:29:39:b0:fd:
         d4:b7:5e:5c:9e:a6:65:73:86:af:2e:e1:63:a5:aa:2b:d1:a6:
         ba:28:df:eb:f8:cc:c7:7a:a7:a4:df:34:8d:fa:28:d4:8a:cf:
         a4:a1:11:6d:40:38:37:48:47:44:88:42:87:11:56:b5:6c:b0:
         0b:ef:07:5a:6c:90:a4:7c:3e:97:69:51:5e:88:67:9c:1d:10:
         fc:68:b9:f6:69:1b:2a:d6:b4:f3:e6:10:bf:02:12:9b:38:9a:
         41:00:64:30:16:6e:8a:b5:6d:93:1e:b1:76:d4:64:c5:30:ae:
         af:7c:57:50:49:ab:01:e6:5f:45:a2:69:b6:74:3c:62:95:25:
         be:b1:a6:b0:16:4f:35:72:87:93:9e:8b:20:cf:9f:ab:9c:12:
         2c:8c:14:4f:21:e9:cc:e2:ba:f6:59:12:db:72:de:c3:5d:1a:
         2f:a8:39:13:0c:3c:73:fb:07:f3:f4:63:2b:b5:20:6a:65:bd:
         02:55:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:43 2024 by rpki-client on console-fra.rpki-client.org