Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          cwPQ9oLcAmq5fmKDFic55dHxaizBsxB9cMwNdfUdelA=
Subject key identifier:   6B:E3:8C:50:2C:D6:6E:F7:32:D4:10:2C:CE:C8:A9:64:0B:81:13:44
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       019350BF0DF89A527532DEFD2C0D4FEFD9E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          0A67
Signing time:             Thu 21 Nov 2024 22:01:58 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:58 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:58 +0000
Files and hashes:         1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: 1R9zoai06NIf6rbTO4PnRB8101ps3SsCW3Z0U1aKlVA=)
                          2: CyPPbBbvJZMI7toNLlEpCBzqEo0.roa (hash: 9fuLmuuKEFStHEZHtEymT6/CklZhm7FGMKGfnlY4J0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bf:0d:f8:9a:52:75:32:de:fd:2c:0d:4f:ef:d9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: Nov 21 22:01:58 2024 GMT
            Not After : Nov 22 22:01:58 2024 GMT
        Subject: CN=6be38c502cd66ef732d4102ccec8a9640b811344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:8f:a2:5b:b1:86:ee:22:eb:b8:e5:27:52:
                    b6:fb:8a:c2:26:e2:6d:f6:61:4a:bf:d7:fd:e5:26:
                    4a:c7:1f:a4:e4:d5:b9:18:24:20:1c:b3:1f:54:73:
                    66:e2:cd:8c:ed:ba:e9:ce:bb:1a:e9:94:00:4c:9d:
                    61:bb:d6:09:e5:af:c8:84:dd:06:51:ed:88:c7:3e:
                    f2:00:fc:ed:56:88:de:9b:a4:10:6f:4d:b7:71:bf:
                    12:9a:bf:af:a4:07:57:06:58:49:dc:c8:2c:e4:41:
                    1d:14:5e:44:a9:13:d3:42:e5:25:23:37:9a:37:56:
                    59:7f:0f:f5:64:ab:51:1a:cc:38:9f:cc:56:d5:db:
                    d2:23:7a:4d:f7:49:10:f0:1c:dc:3a:04:dc:85:d9:
                    29:39:4f:cb:b2:99:48:a6:01:51:a1:19:8b:e4:40:
                    1d:a0:30:9f:70:17:c7:34:ef:cd:01:01:ae:57:cf:
                    f9:da:ac:f7:81:e5:c5:05:c4:28:7e:7a:09:9d:2e:
                    ba:75:ad:e2:38:cf:9d:a5:5f:d4:5d:3c:e2:9b:44:
                    f1:24:51:fb:50:da:eb:e8:fe:55:05:80:7b:81:c7:
                    62:52:97:a2:ef:31:4a:c1:6e:42:20:7e:9f:6b:29:
                    0d:be:62:11:ed:e7:99:99:3a:7a:61:3d:a7:c4:a7:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E3:8C:50:2C:D6:6E:F7:32:D4:10:2C:CE:C8:A9:64:0B:81:13:44
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:4a:ed:52:ea:d3:6e:59:1a:e8:c4:09:d1:5a:46:93:68:
         b3:d3:38:1b:24:0f:f7:8b:cd:8c:9f:4e:ee:02:d6:e7:39:36:
         5f:12:b1:70:ec:5b:15:f6:46:d8:4f:d3:27:3a:ba:8b:d5:b0:
         30:a7:e3:b3:c4:00:ff:58:38:8e:73:1d:4e:12:4c:6b:22:9f:
         b9:0a:3b:d7:c3:2d:8b:5b:b1:34:c3:01:b1:eb:16:ac:cb:51:
         60:44:8c:e5:0d:34:0e:06:8e:c2:bc:f4:39:52:be:1e:cc:53:
         3e:bb:e6:91:e9:32:49:2e:dc:30:2a:4c:a6:df:44:d8:91:c7:
         e1:02:ca:8f:e5:cb:65:05:9a:f0:99:25:1e:64:4d:e0:c9:94:
         2c:ae:a5:6b:b8:f0:a8:93:f7:8c:34:88:ea:0e:3e:85:9b:83:
         e4:e7:1b:7b:3e:6d:81:fe:14:ee:fb:0e:aa:bd:74:9b:c2:bc:
         1e:e8:24:a5:18:7a:5a:10:6e:8e:b3:f2:eb:8a:59:03:97:11:
         a9:63:44:0e:ac:9a:9d:a4:bd:c2:34:a3:d1:c4:b9:34:e2:be:
         e8:0a:2c:03:96:03:36:b9:4c:7d:70:8e:8d:5c:18:32:7b:aa:
         94:d2:b3:3d:8a:1d:ac:67:12:ac:3d:35:c1:c8:84:77:53:a3:
         f8:90:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:48:01 2024 by rpki-client on console-fra.rpki-client.org