Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File:                     txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier:          3Al5EaDmNbuYyxPxDV5hsMBv2BDUT+5jLE/KNYqfsAQ=
Subject key identifier:   11:75:41:06:54:D8:17:05:EB:B5:A1:AA:70:22:A0:52:1F:C5:3B:6A
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer:       /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial:       019362C44F8DA1A58EB93A13230E6AFA8D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number:          016C
Signing time:             Mon 25 Nov 2024 10:00:52 +0000
Manifest this update:     Mon 25 Nov 2024 10:00:52 +0000
Manifest next update:     Tue 26 Nov 2024 10:00:52 +0000
Files and hashes:         1: 1-Qi1N7J5muj7jfEmkgOKsHowU5w.roa (hash: 6uP4xqqgeu/Eqc9TBEwh3LfGxhy00gMZFgAl5gZq4kA=)
                          2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: wE/RxxgnEq/c+mmEauyCs/cl+i94dLorzZbbbFA1Z+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:c4:4f:8d:a1:a5:8e:b9:3a:13:23:0e:6a:fa:8d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
        Validity
            Not Before: Nov 25 10:00:52 2024 GMT
            Not After : Nov 26 10:00:52 2024 GMT
        Subject: CN=1175410654d81705ebb5a1aa7022a0521fc53b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:9c:3f:61:02:a3:63:16:fc:77:af:fb:3a:
                    74:5c:9e:08:85:ea:c6:5f:e0:32:08:f4:b1:6c:0e:
                    20:c2:c6:1c:84:f5:98:9d:a1:6d:bd:21:4c:49:8f:
                    61:d9:d4:3f:6d:51:8d:0b:08:25:a0:8b:d2:23:4d:
                    3b:04:cd:b3:ab:ad:4c:dd:06:d0:89:04:e2:32:62:
                    57:9b:0c:9f:ed:c5:b7:04:13:1d:2e:48:38:fa:0b:
                    00:3f:d7:f9:b8:80:64:b0:ef:ed:17:22:40:55:f7:
                    d5:75:51:72:c1:fd:d7:f7:7a:ef:5d:a6:ef:ca:47:
                    b8:c5:1f:50:b5:67:16:44:10:46:34:a3:d5:99:06:
                    0e:fa:a2:2c:6c:29:a2:34:55:7a:17:01:47:7e:5f:
                    06:14:5f:7f:1c:fc:5a:19:41:91:fe:d5:c4:98:70:
                    a1:5f:d7:22:bd:df:d8:6c:6b:9b:27:7f:19:b6:b5:
                    33:0c:bb:a9:e1:6f:8a:72:dc:d8:2f:57:23:7b:c5:
                    31:08:54:50:27:10:32:f8:f0:1a:5c:36:81:62:6d:
                    f5:53:72:22:aa:1b:67:ec:d8:e5:93:ad:5e:2a:8e:
                    40:61:05:a9:9e:8e:d4:0c:df:1b:f0:d4:3a:80:cd:
                    88:e8:07:37:b6:75:ef:83:1f:90:d2:04:97:7f:2b:
                    d3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:41:06:54:D8:17:05:EB:B5:A1:AA:70:22:A0:52:1F:C5:3B:6A
            X509v3 Authority Key Identifier:
                keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:55:b6:f3:b2:17:c0:d5:ce:ad:45:72:73:cd:f7:9a:a4:
         77:e0:a6:11:2a:66:b7:77:3a:85:5b:99:bb:17:da:5c:70:b4:
         7b:e0:75:71:fb:cb:8a:9b:b6:5f:f8:92:0e:be:c4:cf:f1:a2:
         c0:53:cc:de:fd:2b:ad:5c:95:88:43:4f:0a:1c:d4:bd:b8:79:
         95:45:d2:22:14:b5:d1:80:67:b1:a8:0b:61:88:f6:dc:6d:cb:
         7f:d7:8b:01:cd:ab:77:02:fe:b9:bc:99:dc:9b:a4:4e:57:cb:
         a6:08:69:d5:38:f7:5d:d5:bc:19:5a:09:cd:a4:fa:6d:6b:13:
         f1:b7:29:f6:24:84:3b:9c:7c:8a:fd:34:37:25:fb:19:f3:b1:
         ea:9f:7b:68:e8:55:1b:c3:2b:f9:d8:13:d5:0b:27:b6:28:26:
         86:88:8e:bf:99:2a:7f:b0:6e:1f:d9:0a:cb:ab:52:a3:08:a2:
         21:60:df:31:a2:f5:6f:f8:c3:57:5a:12:85:17:27:e6:14:70:
         d7:f3:91:d2:ec:8d:2a:fc:f4:61:c5:f3:b7:91:b4:48:86:29:
         2d:70:8f:60:b0:bd:ba:93:dc:fc:25:1c:9e:71:68:63:0f:5a:
         26:02:98:42:6d:98:d8:0d:79:90:45:27:e2:16:1c:7e:1e:b8:
         99:32:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:24:25 2024 by rpki-client on console-ams.rpki-client.org