Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File:                     Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier:          EPiQ2WemcS9s4AexEk8wBHx62HOSpIqx4g1uMlwaJw0=
Subject key identifier:   17:F8:E1:51:49:36:28:A8:39:4A:D4:C7:9A:60:1A:D2:A1:79:74:89
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer:       /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial:       019356BF8B55EC76908D76A7A51CA21AF77B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number:          64
Signing time:             Sat 23 Nov 2024 02:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:13 +0000
Files and hashes:         1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: gwrgtl5/7P/ZxEQgmEu/ALkjI9FJ2FpZr2xzZtB+oR8=)
                          2: tb2XvAiXj-zIkxQAaD28iXxpj1w.roa (hash: HdnWLmMdK7V/DldD851qPmEUVLex9yszkwYaFQwLBGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:8b:55:ec:76:90:8d:76:a7:a5:1c:a2:1a:f7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
        Validity
            Not Before: Nov 23 02:00:13 2024 GMT
            Not After : Nov 24 02:00:13 2024 GMT
        Subject: CN=17f8e151493628a8394ad4c79a601ad2a1797489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:34:18:75:c4:37:5f:01:a8:fc:a4:59:e3:
                    4d:3b:98:bb:00:ba:10:49:06:97:ed:3e:82:da:0f:
                    e2:c8:34:59:7e:19:8d:24:75:d0:66:f0:63:e8:7a:
                    f6:27:6e:51:8c:73:62:b5:c2:21:e6:53:30:ad:71:
                    ef:01:18:ab:4a:49:a7:c1:fa:5e:c5:09:76:05:9a:
                    fe:03:7b:b2:3f:7f:e0:ea:cc:02:80:ef:01:fd:60:
                    3e:de:79:19:33:ab:a5:db:ae:5c:42:85:47:df:53:
                    26:fc:d8:77:f6:e6:0f:87:5d:f4:34:2b:3b:2e:fb:
                    01:bd:62:d4:b6:80:63:49:33:86:56:3b:10:13:1e:
                    22:0b:de:cf:e5:32:00:32:0d:53:4f:e8:b8:92:1b:
                    40:57:58:28:59:e5:57:74:ad:df:e7:5a:f6:eb:8c:
                    7e:63:87:6b:e5:b1:de:11:46:6d:de:fa:0e:66:79:
                    a1:ba:df:ad:da:27:5b:d3:13:9c:ae:28:c9:06:3d:
                    3e:f8:11:7b:6e:32:42:09:80:e2:05:7f:1c:1f:ce:
                    8c:9f:4f:b2:91:4b:b9:dd:11:2f:70:ef:b2:57:53:
                    f1:12:3f:3d:d4:f0:bb:69:ee:a4:70:6c:9e:95:76:
                    c3:41:4f:2d:59:a2:11:f5:88:1f:a4:ca:b5:c1:d2:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:E1:51:49:36:28:A8:39:4A:D4:C7:9A:60:1A:D2:A1:79:74:89
            X509v3 Authority Key Identifier:
                keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:31:42:e2:79:eb:2c:88:4d:e1:31:65:db:e6:16:54:94:0b:
         30:4f:fc:fe:4e:33:fe:c6:66:44:02:4d:21:87:70:68:34:68:
         ad:1e:fc:db:e0:2d:8d:a2:e1:e3:3d:84:be:f8:5a:c3:31:aa:
         b1:4a:fc:f2:88:51:2b:5b:09:0f:c4:63:68:e9:23:8e:dd:34:
         8c:64:57:b4:5b:95:1d:f0:2a:16:fc:48:09:a7:d0:a1:9a:2b:
         00:a1:3b:b2:b8:ee:c5:98:43:9a:05:7a:59:80:ca:b4:73:68:
         4a:39:ca:25:e9:b5:7e:62:52:a1:a8:5c:9d:8e:81:d5:b0:bc:
         fd:c8:ce:2f:d5:e6:f0:67:1f:25:fb:b2:c5:2b:7c:85:60:3d:
         49:fe:9d:ad:3c:a6:7e:1c:16:03:b5:21:3e:67:6b:b8:c0:5a:
         29:b5:42:ef:62:df:37:a3:76:f0:cd:6b:6e:b4:86:05:27:b7:
         c6:f9:ce:a7:bf:c3:59:2c:3a:9b:ee:e9:69:23:1f:42:02:8c:
         7e:62:ea:f1:b1:41:12:da:41:ea:df:2f:b4:3e:a2:de:b1:69:
         80:21:98:74:ca:21:7e:4c:78:e3:c8:ac:cf:96:65:29:45:93:
         98:3a:66:e2:ad:1e:2e:17:02:cf:0a:c8:ac:83:c7:d3:62:fd:
         16:54:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:57 2024 by rpki-client on console-ams.rpki-client.org