Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File:                     A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier:          /STXe12/+Sk1nE3fiuTwniYHb7NIrStQcSZcbQ3vBeI=
Subject key identifier:   D6:12:AA:2C:5C:B8:1C:F6:80:43:72:CF:5E:02:61:BB:14:A9:1F:51
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer:       /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial:       019335B5664779A7604C9AA6C0A571F088D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number:          078D
Signing time:             Sat 16 Nov 2024 16:01:40 +0000
Manifest this update:     Sat 16 Nov 2024 16:01:40 +0000
Manifest next update:     Sun 17 Nov 2024 16:01:40 +0000
Files and hashes:         1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: ZZvWxfoKoYseftB8gOE+rkIzf8zMRm44taejxPNQdno=)
                          2: CJ9C45YmYTDqomJn5CUxEaWUj9Q.roa (hash: aTF2XiEUQ6OpfHX7fiduKH8B65KA5Yt2M6Ra4/ptVLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 Nov 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:35:b5:66:47:79:a7:60:4c:9a:a6:c0:a5:71:f0:88:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
        Validity
            Not Before: Nov 16 16:01:40 2024 GMT
            Not After : Nov 17 16:01:40 2024 GMT
        Subject: CN=d612aa2c5cb81cf6804372cf5e0261bb14a91f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:7a:3d:09:e1:bc:8b:f9:42:a6:41:9d:63:
                    0e:70:96:ad:83:56:c3:01:1b:64:19:39:43:f7:78:
                    bd:25:c3:25:f2:26:0d:77:a2:10:1e:6d:5f:65:19:
                    02:2a:fa:4d:ce:bf:87:f8:45:55:e8:06:d9:3a:2a:
                    86:88:a9:0d:5c:58:5e:50:ef:b6:5a:ea:b7:3d:4f:
                    01:3c:3e:2f:71:29:46:fa:c0:54:df:c3:3e:c2:27:
                    4d:08:1d:95:74:e4:48:f5:ef:df:d5:7b:b4:d3:73:
                    a7:50:1e:f0:03:81:a8:44:3b:a6:c7:6c:47:5a:06:
                    44:b2:1a:e2:43:30:45:05:96:ca:1f:ca:ee:00:08:
                    df:86:3c:28:84:96:cf:e3:b7:c2:2a:9b:4f:ba:09:
                    33:64:e7:af:69:e9:99:05:4f:ae:6e:bc:10:46:0f:
                    5f:50:01:4b:55:c4:9f:e7:8b:3a:f9:f8:63:49:c6:
                    e4:59:32:08:3c:e9:ad:55:1e:05:09:52:aa:a1:09:
                    6b:51:ad:94:09:0b:74:e7:aa:70:0c:ae:6a:40:33:
                    bb:4d:d1:62:b5:9d:b5:a8:e4:01:5b:68:9c:3b:19:
                    ab:00:ec:bd:4a:d8:dc:c8:44:dc:68:40:7d:8e:b8:
                    ac:57:1a:58:8a:57:fb:05:77:2c:d9:67:b9:cd:44:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:12:AA:2C:5C:B8:1C:F6:80:43:72:CF:5E:02:61:BB:14:A9:1F:51
            X509v3 Authority Key Identifier:
                keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:c4:48:f2:b8:32:ec:e5:be:d6:cd:95:63:df:53:d9:55:
         22:98:5a:15:95:72:5d:94:18:ac:b7:91:9e:c0:19:03:f8:fe:
         15:23:fd:e9:ff:3f:ba:76:cc:1b:84:c3:79:36:7c:53:77:7a:
         00:a7:14:70:16:c8:25:08:f4:0c:16:dd:2d:a4:9e:51:85:d2:
         c9:6c:d3:cc:98:cf:ff:7d:0f:aa:e6:4e:cc:03:05:5c:8b:2b:
         58:29:b0:94:7c:04:d8:b0:6d:6c:f2:1c:88:8b:29:01:79:61:
         58:a7:39:5a:80:77:cb:19:4f:36:84:e7:0b:3c:2b:63:b2:17:
         9a:38:1f:fd:ff:54:9c:21:84:08:a2:81:c4:5e:d2:dd:b3:f8:
         da:52:27:ea:b8:b0:2b:9b:7e:0b:00:c5:fa:5e:7e:ee:40:5a:
         a2:af:60:04:08:2c:6b:af:a6:f2:ac:45:57:3c:98:d4:57:bf:
         f7:89:d0:88:cd:21:45:03:1c:f1:3f:ef:c8:b7:8b:8e:b6:02:
         35:b2:88:ef:52:45:82:28:13:19:9e:5e:68:61:80:7c:d2:82:
         ce:4e:1f:86:56:8c:7d:b9:6c:e5:30:a9:53:c3:9e:45:7c:eb:
         da:50:89:bf:94:9e:68:a0:66:69:f9:c6:a0:e6:87:6a:e8:83:
         15:9c:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 21:43:19 2024 by rpki-client on console-ams.rpki-client.org