Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File:                     70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier:          4btO0eX/NQdqZycJJlspPqWAJ25em9naEqymMEgq2wk=
Subject key identifier:   76:6D:8B:61:34:23:B1:D6:DD:7A:3F:2C:E1:AE:14:24:30:27:5D:6D
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer:       /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial:       019405A15D8B78E2127FB0B284430419A9FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 01:00:48 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:48 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:48 +0000
Files and hashes:         1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: EnIWJll2YIbPIxBNJST1ZfdAtyq8z8l7qXIC9S5LNnM=)
                          2: ackA7jXS5Z9Pz-5Zxgsfx61Ke58.roa (hash: ixJTggagT/nnyOWjEHOLzbGwziW1jOLS5sFJwMifay8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:5d:8b:78:e2:12:7f:b0:b2:84:43:04:19:a9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
        Validity
            Not Before: Dec 27 01:00:48 2024 GMT
            Not After : Dec 28 01:00:48 2024 GMT
        Subject: CN=766d8b613423b1d6dd7a3f2ce1ae142430275d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:4e:c2:5b:e0:1a:ff:0a:31:46:19:e1:15:
                    a0:ac:7f:4f:cb:89:f3:e8:7c:b9:97:c3:98:8d:b3:
                    2c:87:63:f0:c3:88:f2:4e:b3:6e:d6:d6:54:66:19:
                    6c:29:4b:cb:31:00:50:d1:63:74:92:7e:a4:44:92:
                    1e:87:d5:ba:02:ce:8b:00:3b:6d:e6:98:80:45:6b:
                    76:7b:97:22:74:22:df:08:46:44:2a:e1:b6:ca:29:
                    4b:87:7e:be:a7:1a:46:9a:18:b4:1a:42:4c:de:c1:
                    2c:ef:e8:57:fa:15:27:de:25:59:c0:11:f3:3b:40:
                    36:5d:11:22:3d:aa:40:ea:3d:97:15:20:6a:39:b4:
                    b6:a6:c1:10:82:49:fa:b5:27:d7:20:6b:2a:0c:1b:
                    7e:dc:08:99:a1:04:23:b6:d9:ae:db:7a:3d:67:fa:
                    de:04:fe:5a:d7:af:ae:d1:25:0a:2f:ca:ae:22:e8:
                    3f:af:59:f5:72:7b:3b:ab:ca:80:d1:ed:d0:a6:0d:
                    32:08:64:59:a1:5b:60:aa:a7:0e:02:95:5f:81:6d:
                    a2:a8:e6:a1:7d:96:58:66:e9:34:99:4e:31:60:1a:
                    a6:61:e4:e0:00:bf:bc:90:1f:98:54:35:95:ba:88:
                    05:4c:88:2e:98:48:e8:ba:49:b1:73:7a:84:43:fe:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6D:8B:61:34:23:B1:D6:DD:7A:3F:2C:E1:AE:14:24:30:27:5D:6D
            X509v3 Authority Key Identifier:
                keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:1e:5b:43:27:b0:56:f4:7c:67:63:ec:75:dc:3d:d1:c9:
         30:af:52:8b:a0:ec:6d:4f:c0:62:5d:85:70:f3:ca:4f:4d:ce:
         79:cd:b0:f3:a4:aa:ef:1e:d6:af:cb:c1:c0:eb:07:bd:09:77:
         4c:58:1f:68:71:d8:b0:c1:af:5b:4c:e1:f9:4c:84:65:db:34:
         fd:b9:ba:75:70:b9:52:49:5d:7c:39:09:8c:e9:88:f6:75:c2:
         43:83:72:1f:21:7b:7c:59:11:c0:05:4f:2c:3f:cd:47:75:16:
         8f:56:40:54:fb:52:65:fa:55:ce:2e:2f:f0:70:e3:40:b6:18:
         20:f0:21:26:a7:37:13:a7:3d:f3:26:f3:cf:3c:38:6c:bb:d9:
         54:95:1d:4e:93:8a:60:4f:82:dc:15:08:85:26:6a:37:3e:48:
         9b:85:d8:a5:12:3c:b2:48:51:d4:46:e6:49:10:0f:ae:17:6e:
         1c:7b:c6:3b:4d:ac:ef:fc:c9:2f:0d:f4:46:44:07:a0:d7:35:
         15:e4:77:56:33:39:6f:f3:14:fe:ad:27:1b:83:e2:61:b2:f1:
         5c:25:63:40:82:a3:3a:f8:12:1f:99:d0:e2:24:03:8e:80:74:
         3c:cd:16:5c:99:88:9c:73:c0:a3:64:7e:02:a0:b0:8d:41:71:
         62:c2:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:45:21 2024 by rpki-client on console-fra.rpki-client.org