Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          nA63H2L/ZjlqngICN3/S5fB+5WzOvaFPNS39Xxwsxuc=
Subject key identifier:   83:94:22:67:F0:7E:AC:39:5A:F0:62:7E:53:54:C6:D1:23:DB:95:93
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       019369A1A2F1A12CD7BC1744743BA3C54B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          0284
Signing time:             Tue 26 Nov 2024 18:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:20 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: XCMcAlGx3rYADv7K97lonpOgi89n+++4+KVKvc0Y+ZU=)
                          2: Pehn1_iEoHoCFp6TLxz0OTOdD7g.roa (hash: GXinQeQ9iiCwGY/2f9nhkljJxpofRgYWRv7kqe45tOY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:a2:f1:a1:2c:d7:bc:17:44:74:3b:a3:c5:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Nov 26 18:00:20 2024 GMT
            Not After : Nov 27 18:00:20 2024 GMT
        Subject: CN=83942267f07eac395af0627e5354c6d123db9593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:f7:71:1e:e6:4a:eb:80:35:1d:04:50:36:
                    51:37:74:39:c1:fc:42:e2:2f:86:96:73:6a:2e:e4:
                    36:b2:5d:aa:3b:52:ec:27:d9:af:51:61:d4:97:f7:
                    36:5f:ee:3e:ca:e9:68:da:fe:a5:18:05:d9:5d:08:
                    ba:2d:cf:bb:41:1b:8d:d8:30:8c:1d:93:a0:3e:62:
                    8d:d1:c2:0a:c4:e3:d3:0b:36:d0:64:c0:05:f2:9f:
                    cf:c0:e5:c8:e3:a4:53:ee:ce:82:e8:d3:78:37:46:
                    ce:ad:8a:98:2c:a1:16:7a:37:8e:d1:6f:2f:ee:a3:
                    a0:ab:8e:95:28:ea:3e:28:18:2e:71:fa:55:7f:24:
                    ca:16:b9:aa:47:c3:48:da:28:41:ef:d3:ad:e0:03:
                    6f:7a:4f:63:15:9e:2b:7b:a3:55:ac:67:24:3b:d2:
                    17:1c:7e:26:d2:9a:84:f2:b7:83:90:24:cf:a2:53:
                    d9:8e:4b:67:5a:2b:0b:e0:2a:b1:d3:35:4c:b4:1a:
                    3f:fd:9f:84:bc:de:46:e5:6e:cf:17:74:9a:c2:62:
                    d1:0e:bc:2a:bc:77:5a:65:17:31:d9:4d:b0:23:c6:
                    b7:5b:94:ca:a2:dd:de:02:00:f8:58:83:6b:ce:26:
                    a4:a0:9a:9f:d8:b0:4b:44:31:cc:90:52:92:08:57:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:94:22:67:F0:7E:AC:39:5A:F0:62:7E:53:54:C6:D1:23:DB:95:93
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:a3:61:d8:57:f5:f2:50:a9:5d:2a:58:d9:9d:d2:21:0b:
         da:99:77:85:3b:87:95:ba:ae:30:ce:76:ea:81:34:54:a1:04:
         24:a1:5b:d5:5d:3f:2b:e5:91:41:93:f3:fa:aa:83:00:c4:94:
         76:83:b2:2e:17:1f:fd:a5:a7:0c:28:16:c4:08:1f:4b:b5:ff:
         5d:ed:41:ad:4a:3c:4b:bf:0b:aa:c2:d7:86:02:37:da:b2:52:
         4e:93:54:4f:d2:05:43:aa:5e:34:e4:70:b0:63:c1:15:8e:36:
         f6:a1:6a:5e:fe:c9:cb:20:f7:ff:e6:59:8e:07:3b:d5:3c:a0:
         32:e0:14:1a:b2:b1:3f:e5:2b:2d:e8:23:df:de:b1:50:63:ab:
         17:d9:e7:0b:aa:06:ac:ab:53:24:8c:ad:58:d4:68:e8:74:a0:
         73:7c:66:0f:d9:24:f8:d7:81:e1:33:f3:14:6f:6e:2b:da:f1:
         bf:97:ec:ae:56:85:be:6a:87:f6:ed:50:c8:06:84:11:fe:1e:
         a6:ea:0a:ed:ca:68:0a:78:92:86:0e:28:14:a2:7d:b3:c6:62:
         ba:4c:f5:cb:44:14:68:e1:fc:31:53:f0:4a:3f:1e:1c:7c:76:
         1b:52:9e:8e:80:70:66:ca:57:3e:2a:43:c4:3a:dd:38:dd:3c:
         fd:d0:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:23 2024 by rpki-client on console-fra.rpki-client.org