Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File:                     I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier:          7168YB+ae+t2FoK9AVHhXRM+fTo7W34IxshLmTPqFJY=
Subject key identifier:   5D:A3:FE:1F:C5:31:C3:62:29:1F:94:6D:EE:63:C5:9E:14:54:D1:64
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer:       /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial:       019357D2747A858C987324F819C0393FA462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 07:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:30 +0000
Files and hashes:         1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: 3pzveJ3+rASM02VEb97bKav0s4vxUuiUSiaY+dLbPEg=)
                          2: RhLlNCw6qtpA4ux3xjQBOcMl7rc.roa (hash: 6gKAvupDMRAyfbro1TkW10sjIg2UaJNJ9gnashg98fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:74:7a:85:8c:98:73:24:f8:19:c0:39:3f:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
        Validity
            Not Before: Nov 23 07:00:30 2024 GMT
            Not After : Nov 24 07:00:30 2024 GMT
        Subject: CN=5da3fe1fc531c362291f946dee63c59e1454d164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:ad:d0:c3:f9:d8:70:22:e4:95:70:82:ef:
                    af:97:c5:28:f5:2f:2f:ff:98:02:3d:68:23:12:36:
                    1e:a7:3d:2b:6f:65:53:17:ce:e1:45:b6:b6:3c:2d:
                    30:56:6b:82:38:8e:7f:8b:6f:37:06:ea:97:21:79:
                    17:c2:07:c3:18:fa:80:7f:45:d2:88:5f:86:08:bb:
                    e8:cc:53:fd:86:b1:38:36:b3:e0:fe:27:04:e7:7f:
                    87:b3:5f:dd:9b:6a:ae:6e:3f:30:3a:2f:6c:bb:fe:
                    63:65:de:ec:3a:e2:86:f4:c1:6e:94:49:90:24:8a:
                    94:f5:61:59:84:a9:41:5b:69:03:c0:24:98:eb:b9:
                    66:4b:4a:56:7e:5f:bc:92:65:09:47:1c:aa:9d:ae:
                    88:5f:78:58:49:bf:41:cc:4d:d9:61:77:53:c0:2a:
                    8f:f6:99:1f:db:bb:09:1e:a9:e2:68:11:0e:f9:f1:
                    1f:81:6e:5f:be:84:90:c5:81:07:c1:f8:8e:fc:8a:
                    02:6d:3f:46:35:38:99:25:81:d4:bc:6b:7f:98:83:
                    1a:22:c2:44:93:f3:26:c3:72:18:74:93:fe:98:f4:
                    ef:5a:c0:c6:35:a0:7d:d5:4e:6c:ab:98:aa:8f:d8:
                    67:8e:23:08:51:7f:93:55:1e:e3:68:4d:87:ee:3e:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A3:FE:1F:C5:31:C3:62:29:1F:94:6D:EE:63:C5:9E:14:54:D1:64
            X509v3 Authority Key Identifier:
                keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:ae:5d:0d:a8:d0:4d:b6:95:e6:ed:18:92:f8:fd:65:d8:
         34:53:54:e9:64:d8:4e:a1:3f:d7:5f:63:0d:88:83:71:b7:7d:
         22:46:96:1b:27:17:a7:e3:dc:c7:c9:1f:33:c8:3c:0b:28:d0:
         22:ac:eb:67:3b:60:06:36:26:5e:1f:2a:96:a5:d6:77:fc:4f:
         d4:48:49:d6:80:43:8c:02:93:b0:4c:bc:a3:2a:43:e3:19:0b:
         ed:6e:e4:37:87:9d:3e:43:33:8c:ad:89:85:65:cc:1a:a4:df:
         fc:2d:e6:2b:2d:4e:85:0d:c9:1e:bf:5d:6e:53:c9:20:43:5c:
         c9:af:b5:0c:0f:98:d2:48:46:0c:8f:b0:ba:b5:54:9d:ef:2a:
         da:44:d8:6f:68:c3:6d:4c:bf:58:2f:2c:6c:54:ef:7e:fe:e5:
         36:6d:24:0b:b6:d7:33:ef:9a:2d:0b:c6:20:bf:dc:12:9f:3a:
         c7:48:41:40:5c:25:04:c8:50:06:ae:d8:7f:4e:d8:98:e6:27:
         0c:03:75:30:a7:53:2a:c7:9c:c5:94:d8:1e:5e:a0:df:45:0d:
         71:49:2a:ef:8a:56:97:96:bd:8c:f5:85:f0:6c:7d:36:4e:c7:
         b2:49:96:b9:a0:40:25:aa:9e:a7:33:44:5c:b3:d6:63:3c:06:
         c2:73:fd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:00 2024 by rpki-client on console-ams.rpki-client.org