Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File:                     felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier:          mSsfjBdMHqYI8Zlb7EuoXDSIdr0mNOXzJ8lrZIuf64s=
Subject key identifier:   5C:54:6C:69:5A:3F:46:10:4B:EC:3F:A1:E5:BA:56:A0:12:E3:C5:5A
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer:       /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial:       0193579BAB4563D378D97FC1BB185769A7FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number:          0C23
Signing time:             Sat 23 Nov 2024 06:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:39 +0000
Files and hashes:         1: AGfWhPdPYhnXxgKiPgpYNNG0xMw.roa (hash: YxZTI7e0iffT5m3LPeelGClkNBNxrGIAJZcfqDDvdSg=)
                          2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: skkm3oTI7mmLXDk5lDZmLONzWF/DpyFOMpJvmwqi+Jc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ab:45:63:d3:78:d9:7f:c1:bb:18:57:69:a7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
        Validity
            Not Before: Nov 23 06:00:39 2024 GMT
            Not After : Nov 24 06:00:39 2024 GMT
        Subject: CN=5c546c695a3f46104bec3fa1e5ba56a012e3c55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:fa:95:70:03:70:3c:f3:16:c6:34:7c:40:
                    cd:5c:13:b6:12:64:4c:b7:e8:e9:d2:d1:ec:d2:8f:
                    27:94:53:68:c1:e7:6e:a6:d8:ea:50:d0:06:93:c8:
                    96:48:5d:b3:bb:42:41:66:44:62:55:36:d7:1f:29:
                    96:86:b8:0c:14:84:df:3f:9b:26:b5:5b:1b:64:60:
                    e0:0c:5b:34:10:ab:d8:08:90:c9:8c:24:29:e9:d0:
                    0a:f6:ac:11:ff:c1:1b:34:b1:48:d3:ff:64:71:e8:
                    28:51:d3:c1:97:09:45:0a:dd:10:20:58:27:7c:0e:
                    eb:80:97:d4:dc:a2:52:d6:51:34:6d:df:fc:f4:86:
                    4d:f8:5a:4c:90:36:73:ab:55:18:9f:2d:74:dd:f3:
                    a1:ae:f7:9f:4f:ac:6c:76:60:7c:07:ff:2b:a5:d9:
                    8a:a0:69:38:3e:ae:04:7b:66:be:16:13:12:43:21:
                    e9:4f:36:0a:e9:0c:88:b0:0f:a9:05:d0:ae:67:20:
                    fe:8b:05:f3:41:58:1e:86:e9:26:3b:bd:d6:9c:5e:
                    62:b2:d9:8c:ff:9f:5e:4b:3c:05:6a:5d:70:04:4a:
                    c6:f9:2b:05:fd:7c:32:5b:99:79:66:4c:21:7d:74:
                    aa:3e:57:0d:83:aa:09:8c:31:e1:34:dd:da:41:8f:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:54:6C:69:5A:3F:46:10:4B:EC:3F:A1:E5:BA:56:A0:12:E3:C5:5A
            X509v3 Authority Key Identifier:
                keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:83:e1:ba:c5:f4:48:c8:05:0c:a8:c9:c4:71:56:68:9d:fb:
         b4:31:4f:01:7a:7c:90:68:d7:51:30:c7:df:b4:b5:2d:d9:95:
         e4:42:8e:1d:33:30:e9:86:45:da:99:73:fc:b1:10:c5:b8:d6:
         b5:1d:34:fe:16:bd:02:80:bc:24:93:91:13:b6:91:c4:8e:f8:
         a0:fe:7e:58:50:bd:b2:97:3d:5f:e8:86:42:56:65:01:a4:2c:
         08:71:18:5c:fe:5b:d4:78:02:7c:52:5c:6d:1d:42:e7:33:93:
         f6:5c:b4:6d:b1:c4:97:f0:f9:d7:dc:5f:52:22:e6:7a:82:88:
         66:4b:33:ac:41:a9:94:1e:51:33:4d:ac:35:24:83:07:78:25:
         d3:1f:d0:f6:c7:6f:b6:10:9e:4d:39:ec:d3:cb:2a:63:c1:f8:
         9b:03:20:de:c6:9f:bd:50:53:d2:18:1a:0e:0c:2d:2d:66:f2:
         2e:1e:1a:eb:6a:8f:69:21:cb:a3:af:19:e0:4e:7c:39:b0:24:
         eb:40:ba:77:7c:79:9c:ff:63:9d:a3:3c:c3:17:8f:d9:7e:f9:
         af:7b:bd:b7:fd:cf:43:24:c5:b4:e9:8c:10:ac:78:16:e2:91:
         74:05:b7:85:6f:e8:09:e7:9a:76:27:6a:c9:b1:e0:45:19:50:
         33:94:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:46 2024 by rpki-client on console-fra.rpki-client.org