Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File:                     cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier:          xN9J4tW9D1utnDZAZwI8pdwG4PTPGLyPQnVEkWJ8h1I=
Subject key identifier:   1F:C7:4A:90:A9:1D:E0:E9:50:5B:7F:DB:BE:84:3B:FC:53:5B:69:49
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer:       /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial:       01935764A3C0893B0F5805AC4A945B4B65F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number:          0C37
Signing time:             Sat 23 Nov 2024 05:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:33 +0000
Files and hashes:         1: UWd5z3Flv5pBPD8qWf3IQbpc-Mg.roa (hash: yTav2cL5IqwqxUtuT45GaBA+XS+4snC9uPlVVN8GvEk=)
                          2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: X9+FaViu1DWYtGQDLwv8PiqR9ItwMteWgUqbMOOr0dc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a3:c0:89:3b:0f:58:05:ac:4a:94:5b:4b:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
        Validity
            Not Before: Nov 23 05:00:33 2024 GMT
            Not After : Nov 24 05:00:33 2024 GMT
        Subject: CN=1fc74a90a91de0e9505b7fdbbe843bfc535b6949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:35:bf:c5:d5:44:72:f1:d2:a6:2a:c8:c6:
                    c5:3f:79:32:48:4d:a7:2b:94:21:8e:74:2d:38:2c:
                    f9:f9:0d:da:69:14:10:67:b7:50:6b:44:34:68:ee:
                    6f:d4:e7:7d:ca:de:76:ed:c7:39:4f:30:02:61:f6:
                    64:89:0c:57:5b:f2:03:38:d1:5b:d9:d0:0b:38:82:
                    27:dd:5d:57:68:2b:4a:6b:6e:6e:86:91:b8:3f:84:
                    78:b1:14:42:ed:61:41:de:33:0c:8e:d3:2e:6e:88:
                    87:a6:3d:f1:bd:a2:3f:73:4a:8a:2f:6d:0b:26:ae:
                    ff:0d:dd:e1:62:12:44:83:0a:c3:80:18:be:17:aa:
                    16:25:64:69:3a:43:f1:8d:64:c2:e5:5d:04:1e:f3:
                    16:bd:79:52:71:99:8c:ca:b1:83:d2:f8:19:63:40:
                    b5:1c:9c:e4:c0:8b:20:52:40:db:19:d2:78:52:b0:
                    53:43:6c:0a:e8:11:c1:d6:24:3e:c9:68:04:f0:05:
                    16:4d:4d:f5:be:75:bd:d3:98:c5:a1:8c:31:bc:a5:
                    29:cd:40:54:be:d3:bd:ff:89:74:bf:1a:b6:b2:bc:
                    77:9f:72:8a:46:35:36:64:0f:05:ef:12:6a:5e:f3:
                    49:72:9d:42:1e:5d:1e:09:a4:6a:2c:89:7d:73:d2:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C7:4A:90:A9:1D:E0:E9:50:5B:7F:DB:BE:84:3B:FC:53:5B:69:49
            X509v3 Authority Key Identifier:
                keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c5:41:c8:43:2e:5f:6c:ad:a2:c3:03:f8:20:d9:60:b8:8a:
         6b:33:ac:de:9d:2a:04:af:0d:b3:64:e8:5c:6f:60:c7:7d:37:
         62:c7:98:b2:e0:b3:23:2c:61:08:16:e7:2c:9e:6c:20:82:6c:
         17:27:77:e7:1e:a2:ee:a7:8f:55:0a:29:9f:b8:b0:1b:75:0f:
         d6:34:96:31:a6:71:75:85:b8:6e:e8:ac:cb:c7:b3:35:e5:7c:
         e3:6b:d0:38:3a:43:d3:1b:a1:40:25:56:d9:0e:a1:e0:94:e0:
         9b:26:b7:ab:5c:06:b8:04:0e:36:ba:77:36:b5:3d:2f:7e:37:
         e5:14:f3:ac:5d:83:c4:26:a1:2e:0b:f6:69:8b:75:89:42:be:
         10:91:bb:e0:e1:4f:84:80:13:d1:01:fd:a2:5c:50:42:4d:80:
         a1:13:3c:5a:c4:2e:39:24:46:c1:f3:85:89:04:18:22:ee:84:
         99:c4:9b:ae:c2:03:9b:a1:28:1f:1b:37:0e:86:e9:64:5b:cd:
         1b:38:36:86:f6:12:e0:4c:b0:a9:6b:da:d5:4c:ea:97:e8:28:
         a6:46:23:e2:64:fd:ca:10:ab:47:5b:73:0e:b1:da:ec:72:cb:
         0b:0a:ba:cc:97:19:e2:98:74:ca:52:e9:35:40:9f:ec:36:93:
         da:b9:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:08 2024 by rpki-client on console-ams.rpki-client.org