Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File:                     II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier:          FN6GN+SMCU34DWrmVtFFbVHan9aOaQsS1flO5U1i3TI=
Subject key identifier:   41:F1:9A:16:D4:14:AF:CA:FC:2F:1E:82:50:60:34:B9:9C:E6:73:F6
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer:       /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial:       01936AB44093B0C7A70B101A1EAF59AA76E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number:          10AD
Signing time:             Tue 26 Nov 2024 23:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:18 +0000
Files and hashes:         1: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: VguZGZmIlXinCETt7vSHQ9zFnSyMgy5k4Yu2tbMgWjc=)
                          2: Y7dsZCunr_cu4eTWzr5E74RvFCY.roa (hash: BKOmMZUQrThu7ve8hitRYitUXZ0Yjrs3IyK3O6Krko4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:40:93:b0:c7:a7:0b:10:1a:1e:af:59:aa:76:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
        Validity
            Not Before: Nov 26 23:00:18 2024 GMT
            Not After : Nov 27 23:00:18 2024 GMT
        Subject: CN=41f19a16d414afcafc2f1e82506034b99ce673f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:77:7d:3b:48:31:99:11:e9:fc:78:cc:1c:
                    9b:19:f7:9d:98:34:e3:9b:92:a1:5d:94:09:b5:3b:
                    fa:eb:b1:00:c3:34:fd:97:bb:ac:2b:d5:ba:60:a0:
                    08:06:56:2a:3e:04:f2:4f:99:99:51:f8:d3:44:b4:
                    45:87:65:91:27:f1:31:e2:13:7c:07:60:e8:a0:13:
                    f8:64:84:c5:2f:c8:4a:c6:40:14:91:94:ba:5a:d9:
                    08:dc:05:d7:93:2f:ba:0a:14:58:36:5d:12:f4:7f:
                    da:5c:87:90:ea:8a:69:91:6f:fb:37:3c:49:fe:a5:
                    79:6c:3a:7a:81:2c:b2:8d:02:5e:40:bb:a8:80:c6:
                    b0:50:a9:8f:a8:44:9c:78:ea:83:40:cd:eb:e4:12:
                    37:3b:ce:ec:66:e1:c7:29:c2:a1:43:29:9f:dd:ac:
                    ae:c7:80:b1:35:78:df:f4:b3:e5:ac:f7:42:9a:88:
                    4d:02:87:0d:33:79:3c:13:00:77:ad:b2:f5:9a:23:
                    0d:6f:e8:d2:42:fa:96:f3:e4:bd:1a:21:83:3b:c9:
                    d3:96:86:d8:0c:73:cd:41:cd:f9:17:6f:3d:ed:0d:
                    1e:66:73:83:61:ac:09:55:2e:b3:65:de:18:45:df:
                    2c:e8:d5:2d:9a:49:aa:e3:79:fb:06:10:82:53:96:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F1:9A:16:D4:14:AF:CA:FC:2F:1E:82:50:60:34:B9:9C:E6:73:F6
            X509v3 Authority Key Identifier:
                keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:94:ee:06:de:e5:01:58:26:52:d2:62:62:18:50:f4:34:dc:
         3f:63:98:e5:80:cf:a2:3d:fc:02:09:8a:86:06:63:85:5a:e2:
         29:a8:88:3f:ab:c5:88:2e:b5:1b:84:de:50:c4:48:7d:f5:13:
         4c:7b:9c:91:da:96:4e:77:40:89:15:54:0a:10:be:68:71:41:
         a0:d3:72:02:6c:9a:49:5b:61:55:69:63:f5:1a:61:88:38:78:
         e6:75:4a:c4:50:05:bc:97:bd:51:63:37:4a:f9:2a:7c:3e:7b:
         ef:ab:a6:38:d2:a4:f7:5b:ee:7f:20:fc:89:d7:15:f9:c7:3f:
         2d:e4:ab:c9:f2:0c:03:2f:f5:d3:aa:02:13:2e:23:d4:df:9f:
         e0:f9:cd:db:5b:3d:35:3d:c8:55:a3:3b:c6:e6:e0:e6:96:96:
         0f:3e:90:01:75:5c:40:0a:f7:be:3d:37:58:f1:c3:a7:fb:d9:
         66:fa:4d:e7:d3:f3:46:38:06:de:20:1d:fc:f2:43:b4:50:83:
         ce:09:14:c8:9d:6d:01:34:2d:db:4c:42:2e:7a:a8:ea:25:c3:
         96:27:70:f8:3b:0c:40:67:fa:97:35:f5:c5:6f:18:58:6f:3b:
         45:0b:c6:50:0f:5d:64:f0:d7:ee:fe:55:3f:33:d8:dc:7c:1b:
         42:51:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:10 2024 by rpki-client on console-ams.rpki-client.org