Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File:                     1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier:          tRdviAd/TlveyXg49kwLRC5DGtVPLXh4vyOCFCvPmgU=
Subject key identifier:   40:02:ED:EB:BE:AC:66:35:A8:6D:BA:D9:09:FB:69:23:CE:C4:A0:E0
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer:       /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial:       019369D9CDAEA454E09F274A7B659AC9995B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number:          0B75
Signing time:             Tue 26 Nov 2024 19:01:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:41 +0000
Files and hashes:         1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: l/SEXsM+miJ7nflXudHwnj0eiQxQCmIMspsBAGynimU=)
                          2: iUODcSrGtjJvDdAU4OtjCtxu8t8.roa (hash: LRjLpCMI/ZidDzOJLtgCuQpJ5zxc5P8icayolBSu3JA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:cd:ae:a4:54:e0:9f:27:4a:7b:65:9a:c9:99:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
        Validity
            Not Before: Nov 26 19:01:41 2024 GMT
            Not After : Nov 27 19:01:41 2024 GMT
        Subject: CN=4002edebbeac6635a86dbad909fb6923cec4a0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:4c:de:15:07:19:b6:60:41:04:97:49:0c:
                    34:df:ac:d0:9a:2a:7d:a1:3b:8e:27:bb:ca:30:72:
                    cb:3f:a1:b8:93:b0:d3:b9:ac:46:45:78:26:66:b6:
                    1f:44:c2:e1:04:f7:22:89:9a:9f:8c:05:50:65:8b:
                    76:db:aa:71:26:c4:f1:4e:32:03:45:50:e5:f9:0a:
                    ef:b7:04:b1:ac:51:a1:79:79:1e:b9:de:02:9a:2a:
                    c6:4e:df:df:18:11:2b:49:d0:52:c8:4d:5e:50:24:
                    b1:17:b0:e4:74:e8:17:7e:4e:52:43:bd:74:f5:f4:
                    88:9f:ab:10:75:6d:25:3e:a0:f5:f4:85:1d:35:c3:
                    31:55:7a:de:42:6a:38:58:40:03:9e:47:e4:9a:3a:
                    0c:84:cc:d5:f0:6a:40:94:a6:8a:e1:26:e7:bf:83:
                    32:5f:16:64:88:b3:8d:46:58:06:a2:f9:8d:1e:9f:
                    6e:18:02:48:59:1d:b6:b4:a0:fa:a0:82:20:0e:10:
                    5a:d4:3d:67:de:2e:41:80:f3:32:b5:40:f0:9b:4b:
                    04:9e:8e:71:f6:c0:14:e6:34:b4:65:81:fc:55:5c:
                    11:50:53:f5:ea:ef:e9:c4:fe:a9:06:1f:fb:ff:d6:
                    dd:37:c0:d9:4e:d0:18:2e:ed:f0:df:d8:f0:18:d5:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:02:ED:EB:BE:AC:66:35:A8:6D:BA:D9:09:FB:69:23:CE:C4:A0:E0
            X509v3 Authority Key Identifier:
                keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:92:d9:3d:d8:01:d8:fb:67:ca:51:b2:48:13:da:97:60:67:
         18:84:7a:77:74:05:b9:98:56:3c:be:4f:3f:32:45:68:78:fb:
         21:15:71:00:5e:8b:f4:91:5e:55:ba:77:37:fe:87:11:58:d0:
         90:ea:5a:32:c8:25:45:d4:2b:a4:8d:a2:e4:62:89:14:dc:3c:
         7f:0e:0e:1b:aa:d2:32:8b:d8:e7:a0:70:05:91:45:64:06:56:
         c0:6c:59:19:cf:71:f3:16:51:c4:a9:f4:7c:4a:26:fd:bc:f4:
         37:fa:a7:1d:96:69:de:0c:40:9b:6d:51:bd:b7:7c:8d:16:a8:
         a4:b9:2b:54:b5:ea:60:0c:31:89:88:81:a3:75:75:f7:09:5e:
         16:90:00:3c:28:24:46:c5:18:ec:c5:c8:d8:b1:d5:14:1f:30:
         cb:41:5f:f6:d0:07:78:c7:52:6c:b5:58:98:c0:97:5b:77:1c:
         56:0e:91:1a:b6:d6:af:59:bc:6b:2c:b5:a6:f3:76:cd:a3:53:
         71:41:f1:64:ed:ba:4d:f7:10:65:60:07:ed:48:0c:b4:63:d9:
         26:e6:50:f2:86:ed:fd:ae:c3:7e:c0:39:78:86:bc:91:3e:4f:
         89:17:3f:61:57:2e:82:b7:3d:e6:12:48:da:f4:00:a8:42:47:
         ec:bd:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:32 2024 by rpki-client on console-ams.rpki-client.org