Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          1XMmV3yC6OX8pzeKOmGBU0ffd4koIbwp5z8IZ3r0XHg=
Subject key identifier:   30:05:6A:B6:4A:0B:18:1E:7D:88:C8:81:3D:12:4E:9A:C5:1F:94:A9
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       019352ACECFEC663FED17D396B305EC19F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          0E4F
Signing time:             Fri 22 Nov 2024 07:01:24 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:24 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:24 +0000
Files and hashes:         1: 1-X3ruYLPk4tHT2Wr0Una0-CBSb0.roa (hash: mlCRS4XUt6CozuxDzTS2Vj9tt4BhTJZ9tQS8lmnnBNU=)
                          2: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: 22yQHgH71CKMKGylIAuGhFit9oHwMGpa7oPSM34Ie3Y=)
                          3: tnkq0ec-a7XriG1bwTR7_aX9S_c.roa (hash: IGtJ9gPc9LwQdtEilGvs+mP8FXvbK1PmUUM/GjqNjn4=)
                          4: vIsquNuPLGKwTWPMwS17QjxN2jo.roa (hash: 4DbuJKQJhre73k3ylB4/pU62Xo2WWYNWYsVj7h+yaek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:ec:fe:c6:63:fe:d1:7d:39:6b:30:5e:c1:9f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Nov 22 07:01:24 2024 GMT
            Not After : Nov 23 07:01:24 2024 GMT
        Subject: CN=30056ab64a0b181e7d88c8813d124e9ac51f94a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:a7:0b:99:1f:2f:b2:b0:a8:fd:22:e9:04:
                    99:92:5d:9e:c0:22:af:ad:56:b4:bd:2c:7f:d8:f4:
                    98:80:f1:82:70:af:73:ab:18:77:62:67:51:c5:9b:
                    2d:0f:4c:68:54:ad:f3:5f:ee:d0:8f:66:3f:ae:0e:
                    e9:33:2f:fd:a3:02:75:01:28:6f:06:73:d4:75:f2:
                    2f:c1:17:a9:1a:9c:06:5d:a8:e5:9e:cd:4e:57:b1:
                    a0:2b:c2:59:a3:d5:b2:0a:68:af:1e:33:de:bb:34:
                    a8:c8:bb:cc:65:2c:2c:89:77:d7:9b:61:46:36:f7:
                    52:29:c3:32:a0:e4:08:d5:b8:28:cc:fd:46:ad:9f:
                    05:fc:98:51:0e:bd:53:84:89:ec:77:0f:9d:71:c7:
                    80:95:38:35:51:d2:28:87:54:87:b8:64:2e:2c:16:
                    0c:c3:27:5e:bd:91:1e:83:0d:f4:4e:9d:89:09:d2:
                    31:d6:48:8f:4b:9c:32:b4:dd:06:5c:c1:58:e0:96:
                    db:3c:eb:11:c4:a4:7a:ba:00:39:5f:e9:32:d7:55:
                    d2:de:1f:ae:ce:11:95:ae:75:48:f8:a2:ce:e6:88:
                    55:52:41:ba:c8:25:80:4d:aa:2c:9a:1a:c4:ce:7f:
                    d7:f4:e2:e2:d8:10:57:e9:27:65:b8:e1:0b:e7:c8:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:6A:B6:4A:0B:18:1E:7D:88:C8:81:3D:12:4E:9A:C5:1F:94:A9
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8f:52:12:ed:55:13:72:7a:d2:2e:d0:13:9c:63:b9:2e:09:
         a1:5f:59:a4:4f:ea:a8:41:a9:da:d0:ed:7c:50:6f:84:db:13:
         09:98:cd:a4:75:69:9c:67:8e:cc:00:92:35:7a:fe:54:d1:62:
         89:74:14:10:da:de:70:6c:2d:d5:6a:a7:24:23:9a:46:be:f3:
         82:20:c7:11:85:00:cb:53:9d:42:74:05:c7:2d:94:aa:b6:59:
         cf:ff:fb:1f:39:5e:01:21:36:46:87:79:ed:48:05:2b:19:89:
         a4:e7:d9:d8:56:73:9f:a2:50:59:cb:19:9b:02:1c:08:5f:c2:
         ca:15:45:47:c7:31:85:a0:36:05:82:2a:47:3d:f3:72:86:e1:
         2f:09:7b:94:a5:52:e7:af:6f:9d:02:ec:9a:33:77:5d:68:fe:
         0a:8e:27:6a:da:3c:c1:5f:7c:b4:5b:70:71:46:62:dd:fe:5e:
         97:c2:65:c5:f7:26:ea:ce:1e:b0:53:7c:23:d9:d0:fe:77:bd:
         84:2c:8e:69:09:0b:00:6b:d7:9e:17:3a:1e:49:40:04:9d:51:
         e0:d4:1a:33:77:5d:73:71:9c:59:b5:7e:85:f6:41:57:d5:94:
         30:ad:5d:61:af:1e:5b:7d:8b:90:8a:57:ad:0b:c0:94:6b:1c:
         e4:68:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:09 2024 by rpki-client on console-fra.rpki-client.org