Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File:                     cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier:          Lml8fWcrV229DF1jKMeBonN6X087zzTSBPDU9c5XuLM=
Subject key identifier:   FB:9C:09:EC:EF:97:AC:69:11:80:47:34:1C:68:3F:2E:64:EE:53:75
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer:       /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial:       0193553F93D7BCDC405D7733671CE84C28EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number:          0596
Signing time:             Fri 22 Nov 2024 19:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:50 +0000
Files and hashes:         1: FdDdw4td7MhPMzta3Jae2yNJuWA.roa (hash: XuECmG4dQvLnDpfZmUGFunVtyYqqu2JvGPd8QCxo7Xw=)
                          2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: oFp/TXirvYhN2hzn+p/JFbCAtPeBHfOCxidJgALXrv8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:93:d7:bc:dc:40:5d:77:33:67:1c:e8:4c:28:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
        Validity
            Not Before: Nov 22 19:00:50 2024 GMT
            Not After : Nov 23 19:00:50 2024 GMT
        Subject: CN=fb9c09ecef97ac69118047341c683f2e64ee5375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:25:a1:5e:74:35:76:b0:a3:2a:a1:a5:9e:
                    b9:f0:7f:1d:4d:c3:7a:8c:f6:0a:03:b3:55:20:b7:
                    2b:14:00:d5:c3:e3:f9:e0:52:f4:a4:3c:5a:97:76:
                    76:19:1d:91:82:46:66:10:15:18:3e:71:43:28:1d:
                    e0:de:37:b2:f6:19:03:52:94:6e:65:7a:70:da:ec:
                    12:27:db:22:84:d3:45:95:21:68:04:a3:09:a9:c7:
                    f3:d3:27:8d:b2:d1:f2:2d:12:1e:72:96:be:0d:39:
                    7c:07:d2:0c:30:25:b7:c6:30:3f:21:8f:d1:b4:c9:
                    b1:02:11:11:23:d7:d4:43:4a:88:5b:62:86:d6:76:
                    9f:b3:71:bb:d3:ef:af:c1:76:6e:42:74:14:0d:be:
                    1f:b5:43:fb:3b:cd:83:da:e2:7e:a7:ac:ce:a6:e1:
                    a3:0e:c4:87:60:9f:30:c6:66:e7:2a:06:c5:53:90:
                    91:6a:7d:3f:e5:bf:9b:bb:75:70:9c:6e:57:58:3c:
                    4a:c2:74:d6:8a:fd:97:69:48:2f:b7:b3:52:b9:63:
                    57:49:bd:f9:bf:3b:96:ee:b6:32:f1:1e:d4:a4:95:
                    fa:08:9a:cd:6a:b9:ba:3c:af:67:16:f3:9a:3c:0e:
                    15:61:4b:6d:19:94:b9:e1:81:e7:6a:45:fd:1f:f6:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9C:09:EC:EF:97:AC:69:11:80:47:34:1C:68:3F:2E:64:EE:53:75
            X509v3 Authority Key Identifier:
                keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b2:a5:a8:71:db:eb:63:48:0e:7c:93:f6:1d:d4:77:96:5f:
         b0:7e:8f:8b:94:bc:5e:ba:46:aa:c1:2f:7c:a0:c4:26:21:d3:
         55:94:2d:a8:d1:6c:ae:ea:d4:4d:3e:c7:bb:2b:35:0f:21:09:
         81:26:ec:3b:aa:eb:0d:b9:8a:92:06:4b:3d:5b:22:a4:fc:dc:
         84:02:1f:d1:f8:09:8c:b8:21:73:97:8a:11:f7:72:cf:25:6b:
         19:b6:32:01:cf:51:f0:91:6f:50:08:46:f7:e9:2b:62:3b:93:
         68:59:08:9d:b8:92:19:d6:9a:d8:b2:8f:db:1e:b2:31:18:8c:
         94:bb:44:df:5e:e3:c7:4d:9c:1a:7c:52:40:53:85:df:f7:60:
         16:dd:ca:d3:5f:2c:fd:a0:ae:4f:79:25:40:53:48:56:f8:5a:
         13:e9:b7:aa:75:00:64:52:20:53:8e:5a:df:91:4f:da:4d:1b:
         a0:16:67:f9:8b:47:57:9d:57:26:be:af:6b:77:5e:1e:c9:85:
         e8:c9:5b:6d:af:e3:c4:f7:7d:8e:57:52:ff:cd:2a:a5:a9:d7:
         68:97:9b:04:21:7c:84:87:ee:a2:81:31:5b:fd:35:2f:78:8b:
         dc:25:aa:5c:4d:ff:94:5c:fc:02:7b:e4:01:aa:eb:bf:1a:56:
         73:73:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:28 2024 by rpki-client on console-fra.rpki-client.org