Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File:                     cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier:          EmNwR7a/KafPbxJHPtJo55477RLlzl0yAKKxSBI1R4Q=
Subject key identifier:   3C:05:5D:80:9B:10:C0:39:7E:8E:B8:D9:4A:EE:C6:47:81:A1:A3:D8
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer:       /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial:       019354D1249859A2F18D907D866D443BAE9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number:          0179
Signing time:             Fri 22 Nov 2024 17:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:12 +0000
Files and hashes:         1: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: N9jJ3ziXtiLVZsIC8P9Z+up0MycB8O5MtXh43HVDuAM=)
                          2: x4wnEsKHYftOyiDhdcvz3wCqgOk.roa (hash: Ll5jOKkrYE+IoMqtvXxIwtg2/7+xp2hF1LciTvneJbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:24:98:59:a2:f1:8d:90:7d:86:6d:44:3b:ae:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
        Validity
            Not Before: Nov 22 17:00:12 2024 GMT
            Not After : Nov 23 17:00:12 2024 GMT
        Subject: CN=3c055d809b10c0397e8eb8d94aeec64781a1a3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:5e:f3:dd:ac:2e:45:6a:e7:e8:ae:df:2f:
                    c5:e8:0b:83:20:f8:cc:41:bf:bc:81:23:ae:1e:04:
                    ad:0f:74:b5:6a:a5:76:0f:1d:b7:46:52:fa:63:08:
                    0a:4a:7d:05:c1:60:71:bf:b2:5c:7c:28:dd:9c:cd:
                    29:ae:08:3d:44:40:aa:97:e3:7e:7a:a6:66:da:ca:
                    46:7b:e5:c8:49:1d:fb:4b:3a:15:2c:c0:05:df:27:
                    08:4c:56:34:91:7e:ba:3f:30:38:45:99:35:43:51:
                    c0:06:f7:bd:b6:80:d4:07:37:1f:9f:d5:56:ef:43:
                    b1:3a:bc:83:1b:39:8c:d1:58:f0:4d:75:f1:d0:ed:
                    1a:7f:46:c5:0a:3f:21:47:6d:f8:3f:90:6b:26:06:
                    16:1c:f2:9d:3c:e4:32:45:69:64:8d:74:8e:ba:d9:
                    53:3c:99:b9:12:0f:81:95:2f:fe:9f:27:6b:9e:68:
                    fd:72:cf:64:b4:46:d9:30:7b:99:3c:15:b2:a4:93:
                    b2:79:7e:e0:1a:64:9f:0e:26:0a:a3:8b:b6:b6:86:
                    42:b5:55:db:46:13:13:41:65:51:17:9a:73:f0:55:
                    20:18:24:7b:f5:ee:de:ec:57:76:17:70:56:f3:5e:
                    f2:de:97:89:e7:1d:1e:e7:20:f4:cb:2b:95:5f:c2:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:05:5D:80:9B:10:C0:39:7E:8E:B8:D9:4A:EE:C6:47:81:A1:A3:D8
            X509v3 Authority Key Identifier:
                keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:23:d5:e4:d7:6f:b0:7b:85:f7:da:30:5e:7e:75:54:8a:40:
         68:46:5c:bf:fc:1a:65:d2:30:f9:16:1f:93:1f:93:1e:dc:22:
         ab:f0:0c:56:c7:ac:de:15:a2:c1:38:fe:dd:05:54:24:93:f9:
         08:5f:b4:39:84:b6:00:74:b4:4d:b8:46:ea:99:1d:68:ce:2f:
         9a:3c:a2:90:0b:40:e6:86:79:47:a1:21:f0:06:c9:e4:70:bb:
         1f:67:41:89:c9:f3:07:e5:29:6b:85:b7:11:71:ae:84:81:27:
         df:dd:3b:94:7c:e1:02:61:a0:fe:eb:62:ad:87:2c:1c:8d:f2:
         ae:34:f9:98:08:7c:c7:d2:00:c0:5d:2d:79:83:c2:b5:28:b2:
         b3:07:4d:19:36:61:53:ce:4b:be:81:d4:ab:9e:4f:d4:e8:5b:
         6f:3b:a6:94:b2:79:21:25:92:a0:a0:bc:53:6d:89:ee:38:f5:
         1d:97:7f:58:31:51:d3:7d:01:c6:df:90:03:ae:a1:87:f0:33:
         b0:81:ea:d8:77:f7:d4:c9:9f:64:05:b5:3e:47:0d:43:51:04:
         1c:1f:a0:43:57:4d:23:ee:07:c9:fd:a8:12:71:4d:40:19:95:
         38:f3:a0:0f:b0:68:dc:db:0a:71:f5:13:26:b6:04:66:78:cc:
         34:f4:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:53 2024 by rpki-client on console-fra.rpki-client.org