Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File:                     cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier:          LPJzKSv2PrAzoF4j9sTHVjJYvb60A2KjufQhM5SSB2A=
Subject key identifier:   57:ED:CE:89:43:66:BD:28:24:DB:25:0D:F4:5B:2C:E0:AA:20:F8:3F
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer:       /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial:       01935689E4E4C531B529D15EBE044E6958C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:01:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:37 +0000
Files and hashes:         1: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: 0SitjWzXKS4gfNgFy+i2Mnq74YpgoOifL3H6nAURSCk=)
                          2: ixrwAI4BjL07xOmUU6j6v6lzUmI.roa (hash: 6il4hc3+92oIko6DmefThPsvahyiEstL0acGJuUG4n0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:e4:e4:c5:31:b5:29:d1:5e:be:04:4e:69:58:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
        Validity
            Not Before: Nov 23 01:01:37 2024 GMT
            Not After : Nov 24 01:01:37 2024 GMT
        Subject: CN=57edce894366bd2824db250df45b2ce0aa20f83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:cb:8a:44:13:19:b2:71:99:78:c0:34:50:
                    69:ab:8e:06:36:a6:53:bf:19:3b:22:3c:f0:20:05:
                    60:84:98:2b:08:58:c7:91:b1:ce:ac:25:ab:4d:d7:
                    d8:11:67:05:b7:40:74:ae:06:58:80:33:a0:0b:a1:
                    c1:f0:4e:5e:ec:35:7a:53:3e:57:e8:af:c0:3f:7e:
                    a2:d9:4e:ac:ff:e8:57:71:03:bc:8a:5b:c7:b0:19:
                    6b:00:8c:e2:bd:a7:41:81:6a:e5:e5:ea:b9:4c:e0:
                    d5:f7:d0:83:66:d5:15:d5:c0:87:b8:84:d8:28:e5:
                    d2:40:6b:53:cc:ae:bc:e2:8f:2d:c0:03:f8:c1:61:
                    75:6a:86:25:7a:33:8a:fb:53:99:d7:92:65:15:cf:
                    4c:cc:48:56:df:b3:ef:b7:9c:3f:9d:31:3d:03:7d:
                    b0:fb:03:27:28:0d:9d:b3:fc:95:e9:ee:69:b2:f2:
                    2c:2b:aa:5e:80:fc:35:9f:0a:b1:90:49:22:54:a3:
                    5a:85:9d:fb:65:3a:2b:73:97:b2:68:fb:ea:5a:fc:
                    c9:0e:b1:83:77:0b:13:b6:16:bb:41:a5:c4:99:95:
                    31:86:f4:37:f2:ba:00:05:63:75:da:21:d0:8e:ec:
                    b6:87:24:12:13:bf:3c:5a:d5:2d:83:54:5f:47:72:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:ED:CE:89:43:66:BD:28:24:DB:25:0D:F4:5B:2C:E0:AA:20:F8:3F
            X509v3 Authority Key Identifier:
                keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3a:eb:a5:48:23:25:b9:f8:f2:50:af:7e:14:1b:a7:e3:a5:
         c7:da:6c:66:4a:26:cf:79:28:42:d2:dc:ff:cb:07:0e:e2:c7:
         7b:3b:c0:3a:86:ba:d5:3b:d2:fe:c9:4a:92:4a:d6:71:af:0b:
         69:12:b6:06:2f:49:02:61:97:3a:5a:9a:ee:82:ce:bb:72:18:
         6d:a1:09:da:d2:db:88:f7:d4:18:73:b5:12:a9:23:2c:ec:26:
         fc:36:03:01:23:bd:f0:ad:f2:7e:74:98:7a:7d:da:91:cf:67:
         f8:dc:44:62:c1:1c:c9:35:0a:04:4a:de:23:a1:01:70:cd:5a:
         20:90:7c:f7:e3:c2:53:81:c2:26:2b:13:0e:97:d4:1f:90:98:
         04:17:bf:14:bb:7b:b1:80:76:08:90:ae:27:42:ca:21:19:3b:
         b0:8e:16:a3:a3:7a:b4:f8:05:dd:a3:64:d3:f7:25:02:38:84:
         91:72:42:de:81:fd:ce:07:e7:3e:97:5b:e3:90:8d:68:56:4d:
         d7:fa:ff:72:14:c7:63:cc:36:cf:6c:ee:35:51:9c:8d:06:aa:
         29:bc:06:b4:ac:db:94:1e:06:73:7b:65:bc:af:b7:bf:fa:25:
         30:14:42:40:67:69:f4:c9:39:a6:4b:2c:1c:7c:68:bd:02:a1:
         5b:24:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:30 2024 by rpki-client on console-fra.rpki-client.org