Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File:                     ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier:          fPM2muf9a0S+cmMxTrC0aKr/ucOhbbvadGN7gxOyxj0=
Subject key identifier:   1F:1A:37:6D:3E:AE:FC:99:AD:B7:01:27:AB:07:68:E8:2D:5E:00:2A
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer:       /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial:       0193568AA6DD13008E13A559462B3EFE334D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number:          132B
Signing time:             Sat 23 Nov 2024 01:02:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:27 +0000
Files and hashes:         1: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: C+49hg4ptBqpeOtSVWyprXUlvZnTg9h4zA7/W0hqnjQ=)
                          2: jF--zQgHdIkVOLE4zfjP0pth92o.roa (hash: zGquy5ykAdu2cu8VYoYyjXdxbUFC2JptCxZ4kwElY8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:a6:dd:13:00:8e:13:a5:59:46:2b:3e:fe:33:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
        Validity
            Not Before: Nov 23 01:02:27 2024 GMT
            Not After : Nov 24 01:02:27 2024 GMT
        Subject: CN=1f1a376d3eaefc99adb70127ab0768e82d5e002a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:b6:96:d4:cb:31:8d:08:c9:54:59:a7:ff:
                    2b:a2:f6:7b:86:9a:a8:33:0f:a3:32:9f:e6:a0:20:
                    d6:d4:6e:45:16:12:14:d1:ac:eb:53:a8:2d:32:f1:
                    e4:03:b8:df:d7:c8:df:9a:5d:19:8a:dd:43:17:3f:
                    e6:21:be:0a:d3:79:03:98:be:1c:45:6f:24:c2:72:
                    23:21:ad:86:8c:b7:41:ad:de:93:88:c7:37:f5:f9:
                    4e:b2:87:29:6d:27:36:9b:25:5e:0b:6e:86:f4:ec:
                    4a:fe:2b:3a:67:df:f6:6e:6a:d2:93:94:5c:76:82:
                    6a:f1:bd:d6:6a:74:e9:22:58:71:c1:07:8e:cd:b1:
                    d9:ba:a1:5f:10:40:34:95:c3:fd:cf:73:64:4c:18:
                    be:99:93:5a:49:b7:f3:c9:fd:35:00:22:43:1c:72:
                    44:77:26:19:3f:0d:6b:f8:e3:f2:01:2b:87:d1:2f:
                    05:31:ba:9a:5b:4c:77:95:57:4d:ff:5a:27:b9:85:
                    77:3f:4b:97:9e:1e:54:37:6e:a2:37:01:16:8b:d9:
                    1d:de:d9:9d:3f:6a:94:f9:b7:3a:29:c5:b2:5f:be:
                    b5:f5:c0:f5:9d:76:dc:c7:e2:46:a0:7a:f2:25:2f:
                    96:fb:8a:18:aa:9d:f6:66:53:3b:53:02:c2:d1:ba:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1A:37:6D:3E:AE:FC:99:AD:B7:01:27:AB:07:68:E8:2D:5E:00:2A
            X509v3 Authority Key Identifier:
                keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:58:3d:aa:3d:af:69:ab:6c:fb:b7:46:1c:f9:28:e0:41:
         1e:85:8b:8d:d7:2d:9e:b7:c0:bc:04:b4:15:07:30:aa:53:10:
         a8:c8:0e:8c:f1:81:49:5b:37:8b:63:a6:b0:39:c9:42:e0:eb:
         50:6a:26:4f:8b:a1:23:89:25:53:bc:5b:bc:a7:f0:fa:da:31:
         ff:97:7a:89:78:fe:05:62:cd:b6:66:e2:83:b7:42:00:43:2b:
         7e:1b:b8:99:1e:ca:31:78:45:59:2f:cc:37:d7:b3:ef:39:93:
         05:6e:f7:54:0c:4a:67:6a:2f:a2:64:7d:59:4a:34:df:05:af:
         ee:b9:e5:9d:b9:cd:27:f2:a9:b9:ae:74:a2:51:c2:b7:34:ce:
         57:eb:70:05:33:01:7c:62:fb:63:bd:1d:43:81:17:fe:3e:98:
         bf:dc:e1:d0:38:43:ff:9b:a0:bf:be:7d:87:d4:ae:6b:40:70:
         9a:52:14:3e:46:48:6c:4c:6b:50:03:e7:d1:78:fe:7b:f0:9e:
         53:9d:03:6c:6f:d1:4b:13:a7:65:d8:17:76:b2:8b:e3:8c:d4:
         b9:99:0e:6a:de:1d:36:fb:48:4a:62:79:69:26:cd:71:e0:b1:
         c0:f9:61:79:c7:05:41:72:0c:a0:e7:cf:af:12:9c:ac:03:da:
         6f:25:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:38 2024 by rpki-client on console-ams.rpki-client.org