Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File:                     5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier:          ESuuQuNjSynLvnsW8QtUYReqqfmGqDC8XpQFka9dOXs=
Subject key identifier:   B2:58:93:D1:DC:C1:43:C3:C1:66:13:FA:87:0E:3C:24:B7:CD:71:F7
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer:       /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial:       0194060EDC1CC854F8D59240CA91E2DFC253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number:          3B
Signing time:             Fri 27 Dec 2024 03:00:24 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:24 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:24 +0000
Files and hashes:         1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: aMC0v6A5h2i1Okc7PWPR0qNeq9A89L17qhpTIz+S2Ws=)
                          2: 8QLwuhBETab8gUea0SL6McheOBQ.roa (hash: UZBQ2aDeSnxA0F/o89UvGFI51vFf8AypLG0x7a2hd3k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0e:dc:1c:c8:54:f8:d5:92:40:ca:91:e2:df:c2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
        Validity
            Not Before: Dec 27 03:00:24 2024 GMT
            Not After : Dec 28 03:00:24 2024 GMT
        Subject: CN=b25893d1dcc143c3c16613fa870e3c24b7cd71f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:f5:95:51:77:d1:f2:ae:21:4f:a0:3b:c7:
                    3f:bd:48:3c:79:b9:5a:c2:ff:fc:b8:90:6f:12:8e:
                    71:f4:11:02:1a:54:37:d3:f4:c8:56:1b:5c:6e:4d:
                    4a:43:cc:ce:a1:eb:94:47:f3:db:d4:1e:c2:52:bf:
                    ca:c2:f2:ac:67:d5:19:38:43:4d:1a:92:61:f4:b2:
                    90:47:06:c8:ad:f1:71:e6:29:6c:c9:4d:47:a4:ae:
                    36:01:67:ab:8a:26:31:91:5c:a7:ce:22:c5:7a:ae:
                    45:1f:92:d3:f3:39:30:11:1b:2c:e3:68:a3:c3:ed:
                    23:d3:14:00:97:a5:0a:30:e5:e7:e9:7c:7c:f6:bd:
                    8a:38:f0:57:7a:a6:2e:0e:be:a7:8d:23:58:5e:60:
                    0d:1a:e7:44:23:d7:e8:9d:3e:fd:2a:6d:ff:d3:c2:
                    ff:db:1e:cc:44:c8:0b:b9:b9:a9:a4:28:b6:c7:09:
                    73:fe:d8:80:4f:46:f3:32:f0:1b:bb:68:a0:7f:c9:
                    6f:9c:ba:3c:c1:d5:22:5e:14:40:d6:47:c7:fc:e6:
                    4f:9c:fc:bb:5f:93:3f:6a:d6:69:d8:a2:26:ac:ed:
                    89:7a:53:d6:bf:39:c2:60:8c:e0:7a:76:9d:25:22:
                    f9:8b:2c:a5:d4:e6:c8:59:9c:b9:8a:65:23:49:c0:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:58:93:D1:DC:C1:43:C3:C1:66:13:FA:87:0E:3C:24:B7:CD:71:F7
            X509v3 Authority Key Identifier:
                keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:a3:0e:76:f9:ba:6d:03:02:dd:bd:f3:06:5d:be:71:1b:
         f9:cb:38:0d:4c:50:c1:6f:d0:07:2d:7c:35:f2:f1:1b:bb:02:
         a5:1d:0c:61:b4:6d:62:90:51:e2:0d:ae:67:1e:45:97:0e:c1:
         3d:50:a7:42:47:0b:24:51:e3:05:6d:c8:75:aa:e3:96:b4:63:
         dc:1f:4c:31:a2:de:f5:4a:37:9e:61:c5:8d:96:10:4d:68:50:
         59:34:1b:55:b5:8f:fe:6f:2b:25:c8:4d:19:95:c4:2e:d9:5d:
         a5:b9:d2:23:7c:f0:73:28:4e:3f:3d:2a:49:66:28:0e:00:53:
         cb:56:c7:30:60:da:13:fc:de:6b:c2:0c:89:d6:fe:f7:7c:6a:
         b7:f6:4c:43:0e:fd:4a:10:0c:e5:50:7f:52:0f:08:6c:f7:99:
         52:d0:50:ea:66:dd:e2:ef:1e:39:67:dd:bf:73:20:f8:0d:7a:
         2b:fc:52:02:5b:6c:7c:94:33:8d:fb:5e:6a:90:c8:ed:a6:79:
         04:65:04:1e:9e:bf:b4:a3:73:5c:b7:5f:5b:c4:94:91:16:60:
         5b:f7:50:f9:3a:90:aa:3b:9b:88:81:03:b4:fb:f0:6e:cf:f2:
         2e:9c:73:0b:b8:f7:7f:19:0f:d3:5f:b2:9e:2b:8c:fc:60:46:
         a0:c6:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:39:27 2024 by rpki-client on console-ams.rpki-client.org