Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File:                     RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier:          aWOqV2E/153kNOraiJxRdUolVyB/CtYyNA+V9bpbqWg=
Subject key identifier:   B6:C1:D2:8B:3F:F5:86:E5:1C:4A:5D:4B:A6:E8:A5:56:BD:82:3E:F1
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer:       /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial:       0193628D302F67A9A1AD6F67B3115496F475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number:          0CB3
Signing time:             Mon 25 Nov 2024 09:00:40 +0000
Manifest this update:     Mon 25 Nov 2024 09:00:40 +0000
Manifest next update:     Tue 26 Nov 2024 09:00:40 +0000
Files and hashes:         1: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: xvyuEVIMo0olAM3LJqa8ikAYSn5wNLj6dCZd0NvOCbw=)
                          2: l8g-uLQJg0JOzS9bbtyK9zs5udI.roa (hash: pYJsKikk1Jr8AySN3sfsdS7KZRIVQdOWSJkc/3HruZM=)
                          3: mtyuTRzC-9JaoORlY8TKyu8b_y8.roa (hash: 2S+z9rT5/2qaxvr4MM+YD7//kX4namDVOC0PxFZMcdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:8d:30:2f:67:a9:a1:ad:6f:67:b3:11:54:96:f4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
        Validity
            Not Before: Nov 25 09:00:40 2024 GMT
            Not After : Nov 26 09:00:40 2024 GMT
        Subject: CN=b6c1d28b3ff586e51c4a5d4ba6e8a556bd823ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:a3:20:5f:08:2a:dd:9e:ac:00:92:1b:c8:
                    54:ee:bc:07:45:46:45:8f:91:e9:52:bf:8c:72:54:
                    63:e3:ac:54:4a:6b:80:91:7e:e3:fb:1c:8f:0d:5d:
                    bc:54:db:b5:68:fe:d5:5d:67:f6:c7:cd:91:da:53:
                    99:f8:76:b2:ad:aa:b3:ec:7c:5e:6e:94:36:1d:ad:
                    57:28:00:d4:db:07:58:a1:df:b4:4d:ef:fa:5c:78:
                    0d:85:17:65:a6:46:7e:a2:4b:c1:5a:72:56:6a:c3:
                    0b:28:48:43:78:ed:d4:a9:32:05:5b:69:95:a1:4c:
                    da:27:c9:94:e8:6b:6a:32:6b:8c:4e:d3:9c:d8:da:
                    ed:d9:4c:48:82:09:b8:41:5c:26:62:40:b6:56:82:
                    98:1b:5b:9c:0e:8c:2c:ed:9e:f4:df:23:78:5d:f7:
                    ef:d7:bc:05:80:cd:a2:d0:49:f1:ba:01:5b:9a:17:
                    ae:59:de:7f:cd:1b:1d:fb:7b:44:ab:7e:a0:5f:d0:
                    37:f5:08:bd:1a:8c:8e:92:a7:53:9d:59:37:79:a5:
                    71:fd:8c:8c:41:ae:67:63:fe:86:84:8f:4f:93:bf:
                    b0:76:2c:a8:40:bf:fc:e2:a7:19:a2:c6:e1:45:c7:
                    aa:be:cd:43:a8:60:3a:ee:ac:e4:28:ed:42:0b:e3:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:D2:8B:3F:F5:86:E5:1C:4A:5D:4B:A6:E8:A5:56:BD:82:3E:F1
            X509v3 Authority Key Identifier:
                keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:79:02:1c:2b:27:25:2d:4f:5c:81:c5:0d:7d:38:f3:a2:bf:
         b1:95:d1:36:2d:8e:99:c4:49:1e:bb:66:2c:fa:61:26:5d:ca:
         2d:d7:b3:9f:56:9b:de:e6:8f:14:a1:91:02:9e:af:43:16:54:
         45:bb:6a:78:75:31:f0:75:cc:cc:d6:fc:54:a6:98:f5:8c:31:
         17:c7:92:4e:47:a0:0d:fc:5d:61:f6:5a:06:fd:2d:b1:64:2d:
         17:2a:76:85:09:2a:2f:f0:4f:bc:db:6e:33:ff:ea:1a:63:30:
         fb:8a:c6:c4:89:cf:aa:a5:a2:c9:1e:60:dc:e5:7a:28:2b:de:
         6a:74:e7:73:68:b2:71:aa:4d:9d:f1:d0:ad:8c:56:8c:97:8f:
         00:31:07:21:cf:2b:cc:76:dd:3d:98:00:ff:0d:f0:89:ff:d2:
         27:f3:fc:36:40:8d:9b:60:f5:a0:b5:a6:96:93:bb:c0:58:6f:
         79:79:5f:7c:a8:67:13:66:67:ed:43:bd:cb:6f:9f:da:4e:cf:
         bf:3e:ec:af:59:06:d1:68:27:f3:52:3d:f6:0b:65:90:8d:34:
         31:93:a4:ef:e9:a9:ba:5f:f7:ae:ce:5b:11:86:ed:df:a5:96:
         b9:63:a4:98:c2:c3:b2:38:19:5d:59:0d:d1:f9:8d:ba:ae:38:
         5e:0d:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:32:33 2024 by rpki-client on console-fra.rpki-client.org