Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
File:                     XVn0kNO2myLh4nwya69yMRBW3bg.mft (raw, json)
Hash identifier:          K3ej9ewcq8fy0BFLZyYQLUJE/+NfQgGxlgEuu003Xg4=
Subject key identifier:   BE:58:8D:9D:AE:7B:72:4C:D2:7C:3E:FD:B8:93:51:98:72:A5:79:47
Authority key identifier: 5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8
Certificate issuer:       /CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
Certificate serial:       01936A7DD714C37C6CB54F22405ED7D26E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
Manifest number:          0804
Signing time:             Tue 26 Nov 2024 22:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:52 +0000
Files and hashes:         1: OFGBjtlLbjhVrYDyzlSZz5dJf28.roa (hash: 2Tx1286kHpG1TJ1sK6OOU6+e8mPlkZMf3zX/C5tRPN0=)
                          2: XVn0kNO2myLh4nwya69yMRBW3bg.crl (hash: AME25hhkxpBvdWmX+obagMSo48E/NsW5BIb0QgoGXOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:d7:14:c3:7c:6c:b5:4f:22:40:5e:d7:d2:6e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
        Validity
            Not Before: Nov 26 22:00:52 2024 GMT
            Not After : Nov 27 22:00:52 2024 GMT
        Subject: CN=be588d9dae7b724cd27c3efdb893519872a57947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:45:2f:6b:ab:5e:31:ba:3b:4b:c2:b7:f2:
                    77:28:59:4c:43:b6:49:85:e9:b0:88:9e:be:dc:bf:
                    37:43:8e:3f:01:f0:18:81:0e:ff:a9:3a:ba:ac:62:
                    8b:bd:56:c3:8b:b7:3a:6b:1e:84:83:db:dd:33:d6:
                    05:6a:c3:a7:34:c7:a9:a3:dc:82:e3:56:c2:f0:3a:
                    ec:ad:75:e8:7e:d4:74:50:8f:9a:83:70:61:0f:a7:
                    ad:a1:d2:50:a6:37:bb:3b:35:36:63:e0:2d:a7:d3:
                    c9:e3:a3:1a:87:d5:23:16:37:2e:96:47:81:fb:ad:
                    ac:68:4a:6f:0f:60:f3:42:ed:14:68:9b:07:d3:e3:
                    d2:6f:13:93:7a:b9:77:2c:7a:75:21:75:59:e2:16:
                    84:4c:c0:c3:b6:b8:29:39:ca:59:2d:da:e4:f4:9d:
                    fb:3e:d8:14:92:59:c9:a0:a8:34:53:a9:e4:35:a5:
                    50:02:09:4a:4f:fa:fb:ce:49:aa:29:0b:bf:21:3e:
                    65:08:68:7f:2a:3a:ac:cc:a9:9f:8f:1b:07:78:7e:
                    85:f0:9f:60:71:e7:e1:09:cb:bf:15:39:0f:ff:13:
                    10:ee:f8:0d:d3:1f:71:99:d6:83:19:7e:5c:79:d7:
                    c4:aa:af:c4:85:96:5f:ec:fb:b6:ee:a1:69:79:8e:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:8D:9D:AE:7B:72:4C:D2:7C:3E:FD:B8:93:51:98:72:A5:79:47
            X509v3 Authority Key Identifier:
                keyid:5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:8a:36:39:5f:0f:75:e1:71:eb:87:50:bb:91:05:74:0e:
         77:b6:81:1f:da:5f:3b:6e:7b:df:09:87:c3:03:0f:f4:37:52:
         c7:10:0f:26:d3:22:e8:23:37:02:5f:6e:76:22:1a:19:57:da:
         b6:17:ff:ad:55:3a:4d:17:b6:fa:4c:f8:79:7c:6a:a2:99:57:
         a5:d8:cd:d2:60:9f:c3:f6:ef:95:9a:66:00:ca:98:10:98:f7:
         23:f5:6a:9f:cd:ec:77:ff:a7:2c:4b:fe:90:a1:e2:88:76:7c:
         a3:3c:45:0e:95:d9:73:09:06:e6:83:db:c2:98:48:1b:0e:1e:
         f7:24:21:fc:6d:67:37:b3:8f:70:96:96:6e:2e:71:a2:73:b3:
         d5:d0:2f:ee:41:84:a7:b6:ba:8d:aa:17:2c:0d:ac:63:ad:a1:
         35:f1:f3:2e:17:70:91:f8:28:aa:d3:68:e3:17:d4:b1:dd:89:
         14:d3:d5:e5:6c:87:f4:df:ad:20:90:15:3a:ab:6b:98:99:bf:
         95:ec:58:54:56:67:ca:60:1b:12:0e:17:33:a2:3f:df:f8:7d:
         73:6a:83:3b:fd:02:fe:4a:92:3a:51:65:e2:41:37:a9:ca:e8:
         34:75:7e:d8:10:e6:a5:3f:7a:85:db:3e:e4:6b:e0:a0:e2:36:
         b5:d2:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:55 2024 by rpki-client on console-ams.rpki-client.org