Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File:                     121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier:          GLhKsVzu5q83VpomMNmgwAb4/k2M7Y3ZqiOnaF1zb98=
Subject key identifier:   0D:12:E9:47:77:5E:8F:8B:4E:B9:07:36:DF:3E:58:56:47:A4:D1:1D
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer:       /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial:       01935689A3B8362F1CEC40FF819D260D88A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:21 +0000
Files and hashes:         1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: Fv1SQXABeVedYWm55AkDevxtGD+ycAFTYYwZu4Q+QRY=)
                          2: Gt-pVmSOoYWRvHLgSjbQ-OZG9Gw.roa (hash: jMZU9WxWCEqvNky2H5w95YNRd57AN7v2Ou9+wpKeEU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a3:b8:36:2f:1c:ec:40:ff:81:9d:26:0d:88:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
        Validity
            Not Before: Nov 23 01:01:21 2024 GMT
            Not After : Nov 24 01:01:21 2024 GMT
        Subject: CN=0d12e947775e8f8b4eb90736df3e585647a4d11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:b3:3c:62:55:24:61:56:41:c9:86:8e:bd:
                    e8:1d:54:21:c0:c9:6b:93:5c:52:89:69:52:46:4f:
                    a0:c0:e7:a0:fc:5d:02:e9:68:02:7c:85:62:1f:43:
                    dc:c9:a6:39:06:de:2c:30:95:ae:88:9a:f1:91:2e:
                    df:d7:e2:60:09:9d:8b:e8:98:bd:ce:20:59:ba:46:
                    73:60:43:e7:55:ad:aa:57:bf:e4:19:ce:15:27:a6:
                    41:7a:44:e3:d2:9a:2c:7b:2b:47:47:79:32:ef:51:
                    c3:28:f6:92:17:0c:1a:9a:09:3b:b8:56:e2:81:73:
                    a3:99:55:29:22:50:7a:51:dc:5b:ac:f3:4c:07:ba:
                    01:6c:69:74:d7:e5:6b:8b:0a:d6:eb:9e:e9:56:1f:
                    76:5f:ba:3c:cd:d6:35:12:b8:8a:19:bd:8e:39:29:
                    2f:d1:d1:26:b2:4b:83:2f:04:c3:b4:2f:c4:9f:d8:
                    83:9f:a8:0a:f4:25:c8:2c:49:32:63:b1:be:9c:4f:
                    bb:57:c8:6f:11:2f:70:4d:70:f1:f2:94:ad:fc:19:
                    53:84:9c:ae:ae:0e:cc:f4:fd:f6:92:ec:f9:d3:5b:
                    8a:83:26:98:64:8c:e6:02:c5:99:a1:87:69:82:9f:
                    6d:26:20:cc:af:62:24:4c:ba:23:3b:9e:7b:b5:f1:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:12:E9:47:77:5E:8F:8B:4E:B9:07:36:DF:3E:58:56:47:A4:D1:1D
            X509v3 Authority Key Identifier:
                keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0e:0a:55:93:69:4a:72:c6:38:03:5e:c0:45:99:86:57:98:
         4a:5e:09:89:c5:90:08:59:c1:4b:fb:b0:a5:67:c6:a4:2b:f5:
         cc:79:23:75:0c:d8:23:ea:57:18:99:4f:82:80:8c:98:a9:ee:
         57:90:3b:87:91:b9:a0:90:ee:7b:2f:a7:81:15:ca:85:86:ad:
         7a:94:2e:41:2d:54:8e:46:c1:82:a7:5d:2d:20:b5:1b:51:85:
         00:5e:2f:18:a3:62:2f:34:0f:45:fe:0b:43:00:b0:c2:56:6a:
         29:fb:0c:99:af:33:56:08:e7:28:cc:82:62:af:63:5f:78:2d:
         3b:a2:8d:da:f2:af:37:9e:ea:4e:0a:d3:87:4d:c8:06:ba:cc:
         b6:d4:16:2a:ec:75:a9:2f:6a:e3:29:86:4c:a9:aa:ae:9e:0b:
         ef:b5:22:ef:52:fd:4d:5f:74:1c:8d:c2:2c:f0:86:09:61:e0:
         d8:23:14:e3:16:52:1a:21:87:ce:44:07:3b:be:c5:d8:b6:e7:
         27:7c:89:4b:2f:3d:0a:5f:12:6b:07:45:07:bd:6e:29:85:25:
         8c:a5:ca:76:9b:ea:b6:b1:e4:d4:6f:8d:ab:1e:5c:54:eb:cb:
         20:2e:bc:bd:25:bf:99:b2:57:e7:1f:c8:bd:4e:fe:48:15:72:
         91:55:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:53 2024 by rpki-client on console-fra.rpki-client.org