Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File:                     k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier:          1mvRWojyRmFf8XEAHFm7YIh7k3kIOVdAGK7EMsORQi0=
Subject key identifier:   14:FD:D2:AD:91:6C:60:4D:FC:06:E4:05:B7:4D:CB:DA:E3:9E:34:50
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer:       /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial:       019357645B7EA98F9A874AABC2EC71F421F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number:          0335
Signing time:             Sat 23 Nov 2024 05:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:14 +0000
Files and hashes:         1: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: tdBIoZvLctbHq9+iM0ShZk1pzXwsY4j6yLFi88zvja8=)
                          2: ytTGjQCxlOvw2ybz0p7ec9Xg674.roa (hash: aOhsaFnJS5KABW5cAOZEuJeNf7l9bdFKHIxLDGsoV08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:5b:7e:a9:8f:9a:87:4a:ab:c2:ec:71:f4:21:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
        Validity
            Not Before: Nov 23 05:00:14 2024 GMT
            Not After : Nov 24 05:00:14 2024 GMT
        Subject: CN=14fdd2ad916c604dfc06e405b74dcbdae39e3450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:61:16:d2:7a:63:28:47:7d:1a:9a:f5:38:
                    3d:df:7c:4a:ff:04:45:b1:b1:e1:06:e1:43:48:1b:
                    5c:22:09:5a:94:94:f8:fb:b3:0d:7e:75:df:f5:2d:
                    7e:1a:c5:28:b5:08:74:1c:17:d2:d1:7c:ab:14:89:
                    07:1c:7c:55:58:12:c2:40:74:09:31:a6:dd:9f:71:
                    79:61:ae:55:4f:16:d2:ff:ce:2f:4d:51:60:60:87:
                    46:67:c1:5a:73:ea:aa:dd:34:29:49:4e:35:52:33:
                    17:12:49:5f:a2:03:14:3f:a5:bf:db:24:0e:b5:3f:
                    8a:77:e1:ad:29:4f:ce:37:cc:fa:20:c4:bb:a3:cd:
                    51:3f:46:28:d1:d2:32:31:fa:72:79:4a:4c:c1:50:
                    4e:9f:08:85:1c:41:e1:93:02:60:11:22:91:5f:35:
                    f8:2c:f6:57:f4:b7:19:f8:7f:61:b5:2e:29:f4:00:
                    e1:76:c5:13:8e:a2:ad:6b:f0:5f:ac:34:a4:bc:89:
                    3f:0f:fb:8d:7f:68:a7:74:84:f0:7c:a0:8c:60:f0:
                    9a:89:b3:04:28:7d:05:65:25:d4:0a:91:af:4d:f0:
                    15:d3:32:af:e2:d2:75:51:6c:4a:32:e1:0b:e4:2f:
                    45:59:51:8b:35:5d:4e:62:40:c9:7e:44:aa:a7:28:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FD:D2:AD:91:6C:60:4D:FC:06:E4:05:B7:4D:CB:DA:E3:9E:34:50
            X509v3 Authority Key Identifier:
                keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:72:92:43:76:28:9c:45:d4:47:bb:dc:7c:04:b1:29:1c:64:
         b1:a5:f2:7c:93:5a:f9:a1:0b:00:a5:c5:fb:6c:9d:60:a5:20:
         ac:c0:d5:18:3c:f2:b5:68:5b:45:c8:54:03:45:a6:14:e9:35:
         c7:50:96:a1:78:f1:33:32:88:e9:37:30:84:c0:35:2d:60:dc:
         ce:cc:66:ba:3f:c0:31:2e:65:ea:77:8b:2e:62:6a:c4:37:d8:
         5e:c4:4f:13:b9:a9:b7:02:25:24:f6:8b:5b:02:41:e6:72:62:
         54:01:f0:0f:5d:38:4a:0e:8a:96:c4:60:be:87:f6:60:53:c1:
         2d:5f:93:aa:23:da:1a:15:21:7e:99:5f:ff:81:d1:88:6e:5e:
         cb:7f:6c:36:de:ce:d2:52:0a:de:ea:ae:79:46:77:6b:32:f4:
         89:bc:b2:46:3f:a3:76:7f:2d:42:b7:a4:a7:95:b1:c0:93:6f:
         cb:55:ae:a7:b6:f8:59:ab:71:ab:d4:02:79:7d:87:c6:8d:60:
         4a:d6:8f:7d:95:7c:e2:d3:e5:df:92:10:e5:4d:6c:ed:8a:3f:
         aa:e6:0c:06:49:f6:74:03:1f:aa:b0:09:22:43:20:f1:d5:71:
         b1:35:2d:c0:55:29:87:da:74:94:87:bd:2d:cc:2c:92:01:75:
         3b:e0:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:52 2024 by rpki-client on console-ams.rpki-client.org