Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File:                     pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier:          bWWd28SVZjm29KRA2Z71ukdLtj6Q5CETD3c1t5s88ag=
Subject key identifier:   4C:76:7B:8A:04:B4:ED:65:BC:1A:47:3E:34:EC:1A:56:B4:FB:6E:11
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer:       /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial:       01935764DB3DC986D0CFB9A58908AFB247C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number:          0A47
Signing time:             Sat 23 Nov 2024 05:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:47 +0000
Files and hashes:         1: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: Szkr5sp8MKp7YZeCuCOBWlGYyG41vKp5av2NUy/wtnw=)
                          2: px6_-QljpN30eJitM7MVFky8_fc.roa (hash: XWsoa64wMzOEpaPi5z08PCmsw53FQDmbBP9D5t/H41c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:db:3d:c9:86:d0:cf:b9:a5:89:08:af:b2:47:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
        Validity
            Not Before: Nov 23 05:00:47 2024 GMT
            Not After : Nov 24 05:00:47 2024 GMT
        Subject: CN=4c767b8a04b4ed65bc1a473e34ec1a56b4fb6e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:e0:bb:15:0e:3d:2c:b8:e9:80:74:86:04:
                    56:1d:1a:e7:a5:1e:c8:23:f4:2d:92:a7:7b:54:a0:
                    0d:7b:16:52:9b:3e:04:52:27:2b:e5:30:11:b0:fb:
                    31:52:9a:14:ac:f6:0a:b1:71:c4:68:28:d5:25:c0:
                    0d:b6:53:57:3b:7c:a2:15:c1:bb:39:47:d2:4f:7d:
                    53:64:14:23:ad:a6:28:d2:96:5b:14:cf:14:76:7e:
                    1c:34:d6:d8:8e:8d:4f:a1:6b:d3:62:60:50:6e:c1:
                    f9:d5:c4:8b:25:46:e5:f8:22:6e:84:b1:ec:5d:74:
                    43:4f:e6:13:16:41:67:f3:91:60:c1:2d:8f:be:33:
                    7f:43:09:d1:f1:a7:fc:36:98:19:52:eb:8a:02:96:
                    de:bc:95:ab:1a:f9:fd:b3:b9:d1:22:fd:bf:ad:9a:
                    a3:10:61:07:17:d7:02:6d:93:ca:07:cc:09:3a:38:
                    32:94:5c:f9:35:59:00:ec:a5:16:3f:b7:69:df:e2:
                    4a:22:39:d9:d3:fd:c7:58:48:55:40:b5:3e:98:72:
                    3a:86:0c:27:64:2e:e5:93:a6:21:0a:da:29:85:2f:
                    27:66:c4:85:c3:f1:09:55:38:2b:26:08:5c:8e:48:
                    22:0e:b2:e3:6d:2c:f8:75:67:0c:d7:75:50:25:d1:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:76:7B:8A:04:B4:ED:65:BC:1A:47:3E:34:EC:1A:56:B4:FB:6E:11
            X509v3 Authority Key Identifier:
                keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:10:0b:c3:44:2a:8f:06:95:ed:8b:bb:70:98:be:bf:fe:
         0c:86:e7:77:b8:90:b7:d7:52:28:d6:c5:4d:05:54:e5:f1:d8:
         b5:aa:54:43:fb:99:6d:46:69:0a:c4:7f:7a:7b:4e:89:4e:9c:
         cd:59:3a:ac:13:9a:de:d4:03:82:81:f1:82:35:f6:87:c0:ed:
         98:f0:e0:bb:18:e0:62:d0:76:fc:9a:f0:6d:d7:ee:45:34:c4:
         04:7d:76:d2:59:e0:14:b7:86:37:51:b3:2d:47:e5:ea:0d:8b:
         b3:bc:ec:c1:d0:fd:39:f8:b1:d5:e4:31:f9:fa:57:f6:23:d3:
         f8:52:14:a5:9a:7f:55:bd:ed:be:0c:27:d2:14:3e:3a:81:e2:
         01:e2:9e:c2:7c:d0:cc:59:11:24:ba:83:e0:55:d8:f2:88:0c:
         7d:5d:e4:aa:3d:85:e9:5f:28:94:a4:2a:47:75:dd:76:9a:55:
         f1:5a:30:e4:6e:de:44:3e:7c:9c:c1:8a:b3:f6:79:c6:57:43:
         3b:d9:99:64:94:b4:7e:8e:ba:89:01:95:3c:6a:a3:93:25:be:
         3c:99:f6:b0:a0:13:c1:c8:70:9e:4d:c1:8b:0a:df:54:ae:48:
         01:df:89:7f:79:56:b2:16:e1:e5:e5:08:88:6e:39:da:0a:6d:
         39:80:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:31 2024 by rpki-client on console-fra.rpki-client.org