Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          fXA40vv40KCb9axzKqm8rCHVKQr1JqdZA5fBQhVHCTU=
Subject key identifier:   20:C3:4F:88:75:6B:73:CA:C9:81:85:65:A0:25:CB:99:B5:F2:5E:25
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       0193561AB99D8792F679915FC8ABAA78F63B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          01D4
Signing time:             Fri 22 Nov 2024 23:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:11 +0000
Files and hashes:         1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: J7I0PkY/2F7CQqavrdgXSlhSlrrblRtsmJ3RexUPED8=)
                          2: iKXrrfeiIPRGUxDN_drb5g_jh3Y.roa (hash: mdqmPzDvVtjMvcgFHfkG6bhfrpe6uPme8nfyQ9xpCMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:b9:9d:87:92:f6:79:91:5f:c8:ab:aa:78:f6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Nov 22 23:00:11 2024 GMT
            Not After : Nov 23 23:00:11 2024 GMT
        Subject: CN=20c34f88756b73cac9818565a025cb99b5f25e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:46:0e:c0:ba:06:05:25:d1:b7:85:7e:5b:f4:
                    fe:16:ee:82:6a:3e:0f:98:14:de:5f:94:e2:dd:32:
                    23:de:c6:01:ed:38:56:5d:b6:86:bd:df:67:74:46:
                    e7:6a:cb:41:de:77:9d:db:60:a3:25:f0:86:96:8f:
                    81:a1:cb:c7:49:e5:6d:05:a2:f3:ae:f7:f2:89:51:
                    3c:28:fd:72:1b:cf:1c:a5:78:ae:68:b3:3c:f8:f6:
                    74:e3:88:50:5e:34:67:8b:95:05:45:c5:4b:f9:07:
                    b1:d5:1f:3c:54:78:5d:f0:66:a3:cb:74:fd:6f:8d:
                    00:3e:2f:87:10:9e:02:26:e9:e7:78:11:b2:54:1a:
                    03:4d:97:4f:57:c7:06:06:f0:20:4b:90:a9:0b:cd:
                    ea:b6:66:2f:da:ec:34:f1:99:15:c3:2a:6c:36:d8:
                    eb:96:05:34:20:e0:dc:bc:ab:c2:cc:a3:23:36:58:
                    09:d4:5c:62:f0:c6:2c:97:b6:4b:ac:dd:77:b4:bb:
                    4d:dd:81:fd:7d:f5:26:e5:73:1a:06:92:71:2e:dc:
                    99:3d:62:a0:82:11:43:b3:ec:b6:12:f5:57:da:e7:
                    3f:56:15:9e:59:49:0d:67:0f:16:a1:85:2b:58:59:
                    b8:18:1b:ab:01:98:b1:6d:f7:13:2a:f2:1b:6d:7f:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C3:4F:88:75:6B:73:CA:C9:81:85:65:A0:25:CB:99:B5:F2:5E:25
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:97:f0:5f:87:65:17:34:1e:1a:52:37:02:d5:83:26:ad:
         ec:9e:69:7c:0b:24:07:9c:9c:f5:93:b7:d8:1e:d4:fb:17:d5:
         7d:39:46:b6:2f:59:de:12:88:f1:84:d6:d6:31:cd:8e:69:d5:
         26:a1:96:6e:b1:f0:ce:23:e0:f5:90:c7:d3:1e:ca:f5:8f:29:
         cb:96:a9:35:ab:4e:7b:ac:96:b4:fe:1a:79:b0:e8:bd:a3:8b:
         6f:14:51:5f:50:ca:4c:6d:ab:63:5f:61:41:61:17:33:2a:01:
         12:7e:00:1b:1b:c5:ef:54:5c:a3:9d:7e:1d:07:da:96:2c:27:
         b8:ee:87:c9:85:9b:23:6e:87:41:eb:7f:c9:2e:c1:2c:b8:24:
         59:15:21:60:d4:17:cd:40:42:92:16:82:3d:1f:30:f6:35:56:
         90:ae:54:8f:ee:f9:74:4c:45:eb:ae:c0:86:ff:93:6c:f8:99:
         ce:df:d1:ea:28:86:b9:f7:9d:84:47:14:b1:2a:a5:67:11:6e:
         bd:f3:ee:cc:b0:1f:34:83:8c:31:6d:5f:6e:de:5e:a0:51:58:
         52:ef:f6:12:ed:f3:1b:34:b0:ed:05:57:b9:42:11:88:54:0e:
         72:66:e1:a8:ce:00:6a:be:6a:b2:c7:8f:3e:7f:a5:a5:bb:d7:
         fc:5f:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:32 2024 by rpki-client on console-ams.rpki-client.org