Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File:                     1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier:          3INCJKzsnOaLZcYTMH5FfzBRYZIZSZtd1cg+fjCBHHI=
Subject key identifier:   62:CD:B3:1D:13:90:F3:1A:8C:67:E7:D7:11:5D:BB:04:95:07:D8:FC
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer:       /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial:       0193572DCE1DAF6557701566424102C6D6B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number:          098F
Signing time:             Sat 23 Nov 2024 04:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:39 +0000
Files and hashes:         1: 0gh8bAabW9O1VVGGlZkd3NPBbq4.roa (hash: kzTZe+V+rjaIXF6QxgbYAJ7Ie3vSIYF+ifvPtd8gc7c=)
                          2: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: CTctFIsxVNFGy0QkzE8SPBeVZNlBoyhvLIqnI/s9MTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ce:1d:af:65:57:70:15:66:42:41:02:c6:d6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
        Validity
            Not Before: Nov 23 04:00:39 2024 GMT
            Not After : Nov 24 04:00:39 2024 GMT
        Subject: CN=62cdb31d1390f31a8c67e7d7115dbb049507d8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:de:46:50:8f:9f:f9:82:3a:e6:ae:92:f0:
                    22:f8:f3:99:4a:13:30:ed:84:e0:94:b7:72:c3:ba:
                    d2:e0:74:72:2b:d6:3b:a1:19:11:e6:51:c4:8c:8f:
                    0c:70:6a:61:f1:ea:6e:18:fd:26:81:5f:cf:9e:0b:
                    46:be:19:e1:0d:5a:11:b6:36:8e:b8:a9:54:1c:f9:
                    5d:e0:1d:e8:b2:59:58:1b:92:d6:6a:ed:f1:dc:bb:
                    25:79:86:2f:af:84:c1:40:8a:9c:a2:ab:48:9a:1a:
                    ef:cd:57:03:f2:8f:60:b8:43:11:cc:88:38:78:8b:
                    81:9c:e5:d0:4f:14:7c:ca:e2:85:81:dc:4c:54:a5:
                    b6:e1:7a:16:d0:0e:a0:2e:ee:22:58:69:d4:21:29:
                    09:6b:50:dc:a8:1d:17:8c:23:f2:a1:05:91:6f:15:
                    8e:e6:1d:0c:a5:26:ac:64:24:fa:48:32:69:95:87:
                    1e:2b:5f:79:e8:26:d6:1c:10:aa:61:b1:e3:9a:23:
                    be:0a:31:c4:2f:f7:43:35:92:7f:16:1f:25:d2:8d:
                    f7:63:1d:10:81:98:51:17:45:5f:c6:b3:30:2c:bf:
                    f1:21:2a:d4:ff:23:ed:7d:6e:43:5d:d0:74:ac:3a:
                    cd:7a:8d:eb:a9:a9:c0:17:34:e6:2a:ba:7d:ef:67:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CD:B3:1D:13:90:F3:1A:8C:67:E7:D7:11:5D:BB:04:95:07:D8:FC
            X509v3 Authority Key Identifier:
                keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f5:83:17:12:21:7c:d4:59:b3:23:ac:8c:b1:e7:24:e6:49:
         62:96:60:bc:39:74:7f:73:86:e8:af:9d:82:97:a9:14:b9:b2:
         ef:d5:46:00:3d:c3:25:96:54:08:11:67:ec:f9:05:69:55:4e:
         06:c0:72:bd:c5:0d:84:36:d8:7e:c3:96:fd:2d:f8:3d:84:17:
         6f:5e:14:63:66:0a:b1:ea:67:09:02:d0:ca:4a:81:a6:8c:3b:
         9a:8d:1d:1d:aa:30:0d:f4:81:22:c1:39:58:1f:3b:8c:82:53:
         ca:87:28:07:e6:5e:f2:d4:63:5b:84:62:93:db:e8:60:0a:05:
         e3:6e:27:c0:f1:cf:6e:71:8f:6c:2e:34:01:26:01:c7:28:49:
         1c:89:b6:ef:bc:38:de:32:25:e5:b7:5f:df:ea:41:ba:ee:02:
         7b:7e:07:bf:99:74:9f:48:c5:e1:8f:ce:24:af:e8:a4:af:70:
         4d:15:da:c5:df:5b:bd:dd:90:03:db:ed:d4:90:9c:06:a4:60:
         9b:7a:b4:38:cd:26:ec:fc:dc:75:cb:6d:ae:1f:d0:b9:49:28:
         9f:6e:68:09:22:ea:e4:2e:d0:7a:f8:fa:5c:85:e0:50:9c:b2:
         80:2e:bf:14:e0:53:fb:e6:16:7a:b2:31:98:cc:1d:54:9c:fd:
         e8:1e:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:27 2024 by rpki-client on console-fra.rpki-client.org