Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          0gae1qsbww+ark2TZOitg2lRL467QxPVXOrEVbhV4i0=
Subject key identifier:   01:48:3B:8A:C9:0D:82:4E:AF:5C:D4:44:F5:49:B9:35:C8:9C:6C:F9
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       0193568A506911E26D9F684624F8E1C1DE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          0A57
Signing time:             Sat 23 Nov 2024 01:02:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:05 +0000
Files and hashes:         1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: A+sXYwafwAlxj/jjPRm581AVHe5e1QVah7FYiOh5TEY=)
                          2: q4_wFNgDEE2-3jtd-r5rMIMTEGM.roa (hash: KcZc2iAbCA5+pXAEXOxHX8+Jmadai7OIdtqree6WDik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:50:69:11:e2:6d:9f:68:46:24:f8:e1:c1:de:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Nov 23 01:02:05 2024 GMT
            Not After : Nov 24 01:02:05 2024 GMT
        Subject: CN=01483b8ac90d824eaf5cd444f549b935c89c6cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:4b:c1:90:89:a1:53:0c:96:aa:c4:09:3f:
                    c0:5d:a2:58:11:1a:52:23:5e:5f:eb:d0:21:2e:6e:
                    96:05:d0:1e:dd:eb:2c:3b:a4:91:2a:91:20:60:46:
                    7b:63:e1:52:37:81:92:b2:71:6f:30:f1:3d:54:11:
                    2d:d8:e4:78:d1:44:7e:e9:e0:88:e0:29:9b:a3:4e:
                    58:e3:93:7b:c6:09:44:e9:c9:83:64:be:e3:74:b3:
                    00:07:29:1d:ef:f5:45:87:a2:d9:8a:3a:ea:ce:f9:
                    36:6b:dc:c4:96:da:3d:21:a5:11:ca:04:c4:51:81:
                    84:12:b6:70:e4:5a:3c:cc:99:33:48:a9:8b:d5:ef:
                    cb:72:b6:22:e0:2d:d3:20:e8:3e:98:83:65:33:96:
                    d5:23:53:b5:cb:e1:ca:6d:44:fc:69:ea:59:ee:74:
                    6c:b5:4b:1d:89:3b:a2:4a:fa:36:35:24:f0:91:73:
                    8f:bb:f7:0d:8b:0b:e2:14:98:4f:02:fc:1b:bf:4d:
                    8f:34:29:f6:9d:e6:8a:6d:22:39:0c:2e:77:b6:2b:
                    1c:38:a0:ee:2d:85:0f:74:ab:11:31:5e:e2:e6:80:
                    53:14:14:ec:55:7b:e1:9b:78:66:91:91:ad:ba:e3:
                    ed:54:be:d8:2a:1c:0b:26:50:ab:5f:cf:d1:45:84:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:48:3B:8A:C9:0D:82:4E:AF:5C:D4:44:F5:49:B9:35:C8:9C:6C:F9
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:77:84:93:a4:2f:11:d6:24:63:2d:72:d2:55:6d:e3:3c:85:
         5c:41:8f:0d:de:70:8d:0e:94:2e:2a:d4:f6:f0:1b:b8:3c:2b:
         e6:5a:f2:d8:b5:d9:12:6d:1c:6b:56:85:11:b3:da:83:e0:99:
         12:b6:c2:83:49:a0:e9:9e:59:d1:d0:ae:39:b1:d5:d6:26:7a:
         7d:69:76:23:a4:62:ff:75:ec:a1:56:a3:43:c1:40:8d:6d:ca:
         6a:07:26:27:b7:1b:8f:77:87:4a:27:48:5e:9a:00:2e:a0:5f:
         59:79:ff:4e:58:a3:43:86:a6:fe:bf:9f:58:0e:67:85:5f:44:
         43:09:ce:3f:41:23:20:bc:f3:a8:e0:d2:fe:4b:cc:95:5c:4b:
         80:5d:5b:eb:e9:ff:eb:d1:1f:84:31:86:39:8a:17:3d:46:9d:
         64:9e:11:ad:f3:c6:88:b4:ee:b7:ab:3b:d1:74:ae:99:9d:ae:
         e7:df:fe:3e:02:cb:d8:17:ee:a7:e0:4c:f0:66:b3:06:d9:7a:
         d3:c6:d7:22:bc:9c:64:d8:07:a9:86:63:ef:41:f0:4f:b9:dd:
         3a:4b:d3:8a:59:0c:20:24:6d:64:c1:1c:fd:fa:be:78:83:a1:
         c8:d9:46:73:92:86:1c:36:14:69:89:da:fe:bf:78:b0:e2:36:
         7f:7c:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:05 2024 by rpki-client on console-ams.rpki-client.org