Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File:                     5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier:          sevXUOFWZMthjRG0kaTg6XvvEXbRkXZ5POQzbxHW99s=
Subject key identifier:   91:30:25:EE:CB:92:39:6C:54:B6:0F:48:CF:84:A9:02:32:E8:51:1A
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer:       /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial:       019356F7309E73D2143882AFC5298B8B8B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number:          09F5
Signing time:             Sat 23 Nov 2024 03:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:00 +0000
Files and hashes:         1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: 5Zj/OPXnoC2t+R85kb4gQqEpKXlNP2jqd5qeaDMNEx8=)
                          2: 78YRDtlEL4gdWHZaIYGVB7T2soE.roa (hash: CuHj97JvrytpjrucKesXOwJmyHx2omCZZx1+wOa9KnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:30:9e:73:d2:14:38:82:af:c5:29:8b:8b:8b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
        Validity
            Not Before: Nov 23 03:01:00 2024 GMT
            Not After : Nov 24 03:01:00 2024 GMT
        Subject: CN=913025eecb92396c54b60f48cf84a90232e8511a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:2d:a4:fd:fc:40:91:f8:08:9a:a0:74:62:
                    83:58:40:bc:56:0c:dd:ee:b3:21:0a:bf:87:e2:c4:
                    6d:22:2d:32:c7:1b:4b:8d:18:e7:a0:47:fa:5e:27:
                    0a:1b:2c:56:0a:a3:00:00:1e:44:29:cc:f4:81:bb:
                    81:3f:0a:7a:2f:83:74:f7:7d:71:fc:70:ff:a7:59:
                    d2:82:bf:c2:65:83:25:e1:1a:a2:99:f0:62:68:1f:
                    57:21:96:d8:b8:50:fc:d8:33:d6:b4:b0:a8:e3:b7:
                    85:12:1b:1c:ee:c1:f5:66:b3:10:50:59:33:64:d5:
                    9f:b8:d7:7b:fe:da:a8:68:cf:3d:a1:a7:c9:e3:2b:
                    1b:17:3d:01:0b:e2:77:25:1c:00:04:29:89:a5:19:
                    22:dc:cb:20:9f:0a:58:78:d8:1e:33:bb:72:76:92:
                    bf:1f:c9:38:b3:1b:ea:8a:c9:4f:25:45:2a:f3:ee:
                    92:ff:55:08:47:e3:f1:4a:90:d1:34:d5:67:b4:ef:
                    97:1e:20:ab:f4:da:64:c4:99:58:30:46:dd:11:7c:
                    cb:d4:95:0c:2b:7e:c9:62:12:cd:41:81:14:59:53:
                    e5:8d:25:ef:0f:61:f4:66:4a:35:6f:ea:8e:20:46:
                    81:6f:cf:65:77:df:46:18:5b:c6:92:ed:1d:78:a9:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:30:25:EE:CB:92:39:6C:54:B6:0F:48:CF:84:A9:02:32:E8:51:1A
            X509v3 Authority Key Identifier:
                keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:83:dd:40:8b:76:e7:44:b5:9e:45:b4:a3:32:4e:c3:44:5a:
         18:4c:bf:c4:f4:0a:8f:04:f8:b2:ea:0d:3a:34:2c:2d:74:55:
         47:c9:ac:6f:cc:b6:5a:b2:12:7c:5e:64:6e:05:ac:15:a7:0e:
         8e:c8:ac:18:bf:22:58:05:9f:c1:a5:81:ca:4d:57:2b:34:e9:
         a4:bc:49:a6:14:5c:1a:9d:e6:75:b7:55:f4:30:9a:3f:ae:ae:
         0c:75:41:f6:29:ea:ad:46:91:d0:1c:1a:dd:db:98:d5:bc:30:
         15:10:4f:e0:a3:0d:05:33:63:99:38:93:6c:0e:0a:be:cc:a5:
         d4:68:c0:4f:91:85:22:51:69:a3:3b:91:1e:c6:be:00:da:79:
         1d:68:5d:85:e6:c6:aa:cb:87:69:64:1c:51:e4:37:f2:b1:44:
         cc:2a:8c:bd:46:f0:95:b3:2a:cf:40:2e:2c:bb:6e:77:d7:3c:
         f2:02:b5:29:2d:5f:27:3d:26:b9:58:94:0a:eb:49:45:20:71:
         56:87:be:cc:1b:ee:e5:75:a4:9e:b7:75:e6:8f:7a:da:d0:17:
         49:91:d8:c8:2d:8d:2e:4a:63:7d:58:98:4e:d2:33:43:a2:98:
         26:19:1b:6a:9c:20:e0:70:a6:6f:82:1d:10:2f:71:f5:75:4f:
         8c:43:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:13 2024 by rpki-client on console-ams.rpki-client.org