Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
File:                     5-aiybui7N1AdLMVN1mDXoI6uOQ.mft (raw, json)
Hash identifier:          FTV7uVioEY4MME+mlYoaVqD5+3d+qsqXyu+01xM2bUY=
Subject key identifier:   2E:59:07:55:CC:A5:9A:39:39:F0:08:0F:A7:7A:B8:0A:C6:4F:45:DA
Authority key identifier: E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Certificate issuer:       /CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Certificate serial:       019367EB5C86990670C1436D2E847AFE8553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
Manifest number:          0A5A
Signing time:             Tue 26 Nov 2024 10:01:38 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:38 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:38 +0000
Files and hashes:         1: 5-aiybui7N1AdLMVN1mDXoI6uOQ.crl (hash: WldmjQ5x/3wscillRvw7QbZQs99XpV8mSheYKuqtu0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:5c:86:99:06:70:c1:43:6d:2e:84:7a:fe:85:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
        Validity
            Not Before: Nov 26 10:01:38 2024 GMT
            Not After : Nov 27 10:01:38 2024 GMT
        Subject: CN=2e590755cca59a3939f0080fa77ab80ac64f45da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:34:7c:f3:d6:02:9e:9c:3c:a7:cb:94:0c:
                    e0:99:7c:4f:fb:4a:94:d8:21:e4:27:3e:ef:57:6c:
                    1a:09:ba:e8:7b:89:dd:5b:84:e9:4f:78:3d:5a:b7:
                    19:2a:dd:f1:cf:20:ee:16:40:5a:6f:ef:f5:f6:d3:
                    92:e3:1c:0f:8a:94:cc:c8:25:86:79:e0:08:df:e1:
                    77:e7:70:04:3e:50:b8:d5:f9:42:2b:e2:ea:3f:5e:
                    ab:47:ae:e6:e5:78:69:db:4a:00:8e:97:0c:a7:94:
                    af:fa:a2:cf:c3:ca:39:87:67:88:ea:9a:6d:ea:44:
                    b5:93:79:58:ba:47:fe:df:25:b8:10:99:53:cb:c3:
                    d5:37:97:56:a3:eb:0b:10:94:8f:84:ea:72:86:46:
                    e3:49:87:c8:ce:98:30:6b:db:05:c0:f7:9d:2e:29:
                    85:45:e7:25:41:cc:08:9f:cf:67:24:94:21:f3:d1:
                    70:69:f7:4c:67:68:4f:4e:b1:67:70:9a:7a:d3:91:
                    91:08:fc:71:ac:36:b8:a0:17:32:df:f2:a1:2a:23:
                    0b:1c:a3:4f:4d:8e:08:3b:7f:11:3e:6d:59:9e:b6:
                    6d:1a:c3:d2:9b:a0:34:c6:35:b6:6d:7d:84:33:aa:
                    29:9f:6b:c0:19:da:c7:82:74:1a:b0:d0:a9:c0:4c:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:59:07:55:CC:A5:9A:39:39:F0:08:0F:A7:7A:B8:0A:C6:4F:45:DA
            X509v3 Authority Key Identifier:
                keyid:E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3d:b8:b2:ee:73:81:a1:9e:d8:dd:e3:a2:be:c9:07:0d:c1:
         01:96:5a:76:1b:56:6b:8c:7a:68:8d:5d:0b:27:d9:eb:da:3a:
         2a:cc:67:9a:b4:80:03:96:fc:2b:30:de:27:a4:54:d4:9a:e6:
         cd:a1:ac:46:22:43:f8:f4:e7:3f:80:9c:88:99:a8:95:e0:f8:
         5d:2e:c6:c9:56:84:3f:62:5d:10:c9:1b:b7:ea:d7:15:92:72:
         58:9f:99:a7:ff:cd:19:6b:03:b9:3b:15:f5:7c:1b:d9:d6:38:
         d2:fe:d1:e5:4a:ef:1d:d2:6c:90:1b:cb:27:e0:5a:c3:8e:59:
         db:d7:af:61:21:5e:c8:bc:66:59:f0:ef:3b:23:e0:b4:3c:00:
         e2:5c:33:1e:14:d5:b6:72:db:96:b8:16:ea:73:24:f5:f3:3d:
         61:9c:b0:38:d2:7c:d8:26:d5:4b:53:0f:e4:49:40:24:ec:7f:
         bb:90:96:c8:79:6e:97:b0:11:f2:72:fb:55:a2:57:f8:e3:8c:
         e8:f2:8d:5b:5f:10:1b:f4:0c:29:4c:72:0c:ba:91:46:5e:bc:
         0d:2b:3b:8d:50:e0:75:5c:41:09:2c:5b:00:6b:5b:88:66:f4:
         40:4f:f9:0d:fd:96:10:20:ab:cf:6b:e1:f0:aa:2d:48:b7:b2:
         f7:0f:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:06 2024 by rpki-client on console-ams.rpki-client.org