Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier:          N9lH4bIk/IKLliK5h0/VCnNnqLFyR+omKleqVlwZU+k=
Subject key identifier:   AC:63:6A:CA:54:AD:0C:16:37:34:AE:01:78:AE:AE:D2:E5:99:BC:A5
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer:       /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial:       0193572D8EB4149A7D1C7E6BF53928A81D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 04:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:23 +0000
Files and hashes:         1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: /qiapwiJL90S9Npaj4fa982Zvn7af+MxR+eOF8RCCCw=)
                          2: SOKJYGFoEAA6OH3zSnIqDRi5wbU.roa (hash: g1iaUyHJT5IFTgq7hydEBdvjofhs2Ldzbb44tTYrAWE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:8e:b4:14:9a:7d:1c:7e:6b:f5:39:28:a8:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Validity
            Not Before: Nov 23 04:00:23 2024 GMT
            Not After : Nov 24 04:00:23 2024 GMT
        Subject: CN=ac636aca54ad0c163734ae0178aeaed2e599bca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:dd:03:a6:5e:bc:d0:cd:c0:ce:5e:98:15:
                    05:f9:ff:8a:45:41:9d:93:09:bf:77:4f:55:28:be:
                    fc:86:0f:d2:41:8c:39:77:9e:d4:5b:ba:fa:cc:92:
                    80:65:a1:74:8a:a1:2f:84:1c:da:45:30:0b:fe:77:
                    88:e6:ce:54:1a:a3:71:b5:da:e4:f1:e8:07:ca:38:
                    85:23:88:f1:30:4f:8c:63:f2:8f:1b:dd:7c:07:04:
                    71:8e:e2:00:a5:81:eb:c1:05:50:12:d8:ca:6a:34:
                    cb:f6:c0:e9:f4:11:d3:b5:a3:35:08:1e:1a:27:ee:
                    39:94:03:0e:d3:75:44:04:b0:5d:d2:02:82:b0:3f:
                    34:14:17:3b:eb:a7:92:40:5c:9c:12:53:54:d2:bf:
                    14:d0:47:9c:8c:84:cc:e8:5b:60:90:c7:22:63:0e:
                    a0:70:b6:90:f1:b2:5a:05:fa:4a:d9:01:41:93:c0:
                    e2:c1:dd:65:c6:24:1b:53:cb:0f:3d:97:e1:28:28:
                    e6:77:e1:06:a5:8f:db:51:7c:a3:27:cf:f4:4a:d9:
                    ba:5b:49:17:65:e0:a1:5d:2d:28:5d:f6:95:85:e1:
                    1f:d2:74:85:14:e8:a5:bd:95:22:3b:49:d3:45:1c:
                    72:19:b7:45:eb:97:ad:8d:95:16:97:57:04:45:57:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:63:6A:CA:54:AD:0C:16:37:34:AE:01:78:AE:AE:D2:E5:99:BC:A5
            X509v3 Authority Key Identifier:
                keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:81:7d:34:e7:79:83:dc:de:9f:a7:29:ef:cf:7d:cb:d1:07:
         ba:d3:3f:77:7b:5b:1c:db:9c:a8:93:51:ba:2c:d1:70:3e:5e:
         58:4b:ea:68:f0:0c:89:ed:25:fa:84:8a:89:ba:4b:06:3c:6e:
         10:b7:1f:a5:0b:92:29:17:f7:91:51:5a:46:fb:85:d7:27:ff:
         c5:79:b5:c3:9d:4a:ad:4f:10:ac:ac:74:55:e6:96:af:ef:35:
         e8:91:9c:f1:eb:94:c3:89:0a:cc:ad:03:47:6e:13:d3:da:6d:
         2d:8d:e8:c6:4f:b3:86:8b:4c:5f:a8:eb:e7:c8:05:f9:83:5d:
         43:93:a6:f5:15:99:e9:ba:1b:cc:00:39:37:af:32:93:b5:56:
         51:0f:ad:c4:53:ff:0a:62:05:d1:e8:44:a9:1a:29:85:0c:a3:
         f3:9b:c9:13:e6:e2:ad:ce:73:e0:77:e2:af:64:0f:5a:70:0d:
         d0:29:28:12:74:43:57:3e:5d:a7:f4:92:62:db:19:cb:cd:f5:
         f9:6e:94:5b:c7:39:47:1b:f6:32:ab:c0:19:1b:0b:2b:43:40:
         9a:e8:18:df:6b:8f:71:da:64:a6:13:2e:6b:2b:7c:a9:2e:4c:
         d7:d2:5d:ee:55:3e:10:f7:53:38:0b:60:89:5a:80:f8:49:e7:
         2e:e0:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:09 2024 by rpki-client on console-fra.rpki-client.org