Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File:                     1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier:          XoBveKNAOZZo+Zea8I++MGx+NppxCzd2+7BwbsEgRqU=
Subject key identifier:   59:FB:09:85:39:52:39:FE:E6:DD:33:6C:F3:4B:31:1A:F1:BA:9B:A4
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer:       /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial:       01935764E0A9FCD9504C4C3563635BD65269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 05:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:49 +0000
Files and hashes:         1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: 6QCMsFw+cYC61Qwe5I0kbfAifzuyEQFNkUdqTUM2LBE=)
                          2: Buk8nnH06pPmKNnMwDzmJKt-jKM.roa (hash: Wo3ETB1JYrp5xHWsP4RHIhyNnAcEK4VAGLLwD7GuANQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:e0:a9:fc:d9:50:4c:4c:35:63:63:5b:d6:52:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
        Validity
            Not Before: Nov 23 05:00:49 2024 GMT
            Not After : Nov 24 05:00:49 2024 GMT
        Subject: CN=59fb0985395239fee6dd336cf34b311af1ba9ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:dc:c6:1c:37:03:fa:86:cb:07:06:fd:32:
                    f8:08:90:1f:ef:e1:80:5e:12:76:4b:5e:17:44:0f:
                    34:7a:e6:04:67:d0:78:e3:e7:b0:f4:ec:96:3f:a3:
                    02:a6:89:88:60:96:8f:01:4d:d7:04:a3:0b:14:38:
                    dd:51:cf:44:d9:df:40:d3:7b:3c:2a:f5:ae:a2:47:
                    0b:37:58:71:4d:2a:2e:82:9a:06:a9:5d:11:20:79:
                    76:56:1c:43:35:12:8b:9a:ec:d9:48:f1:58:74:6e:
                    1a:7e:b1:4c:68:41:36:26:d3:ab:5f:84:a2:75:2d:
                    67:01:35:18:9b:21:e4:26:9a:e9:ce:76:61:48:a7:
                    49:23:81:f2:61:bb:c0:f2:bb:a5:ac:fd:ae:62:20:
                    1d:2a:15:b1:ce:ae:1c:84:8a:cc:8a:46:51:f4:17:
                    e8:5e:b9:24:f7:c9:76:5d:b1:ce:d9:1c:0a:51:62:
                    41:3a:66:fc:c9:19:1c:37:0b:e4:ba:f9:11:08:41:
                    f7:7d:c4:88:f0:7a:a8:71:d9:e3:7a:92:b8:28:ad:
                    5d:a2:74:b3:5b:19:03:00:9a:66:98:0c:21:18:95:
                    cb:15:89:67:4d:f9:71:d7:bc:87:a5:7e:79:64:59:
                    6e:5e:45:23:58:a1:4d:3b:26:15:fd:ce:15:51:e9:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:09:85:39:52:39:FE:E6:DD:33:6C:F3:4B:31:1A:F1:BA:9B:A4
            X509v3 Authority Key Identifier:
                keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:0b:66:1b:7f:06:39:0d:85:41:0d:ee:83:43:76:07:98:
         28:38:ec:9a:d8:3d:57:cb:1c:89:02:5c:67:e1:29:6e:e4:c6:
         78:94:0e:ee:9f:76:5d:fd:79:e5:17:4b:d4:c3:39:7a:32:3b:
         2c:09:ce:80:e6:ed:d1:98:b5:8e:36:42:43:18:f9:e9:fd:23:
         02:57:50:7a:89:b9:99:5c:54:25:0d:42:af:91:c5:e0:40:01:
         44:93:e7:68:8a:14:67:1d:64:5a:8d:9b:02:fd:2d:c2:ee:ae:
         bb:86:c0:d8:e4:bc:6e:f1:d9:ae:b8:ee:be:7b:79:2f:63:bf:
         56:c6:68:56:50:be:d6:79:19:77:9a:04:7d:5e:ba:de:e3:2f:
         c0:52:59:7f:ba:c8:e4:41:15:9f:f3:01:5b:ea:bb:fb:25:ea:
         78:ad:d2:76:35:c8:1e:4e:ca:3e:aa:1a:21:68:a3:e0:ca:00:
         39:b9:d3:64:6f:0a:87:29:3c:72:eb:00:af:e0:12:4f:2c:42:
         42:56:b0:aa:bd:7c:75:52:bd:4e:8d:06:cc:d6:f9:b2:17:84:
         2c:3a:87:4f:ef:fe:47:d3:bd:bb:58:85:19:5c:51:da:2c:b3:
         ba:1b:82:ee:ab:8e:88:82:a5:1f:d2:50:fb:92:64:a4:22:4c:
         c0:9d:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:36 2024 by rpki-client on console-fra.rpki-client.org