Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File:                     4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier:          dGacCgz6ih2DUaZKEuxtid+E9y+XvqfftA1X0FMzjtM=
Subject key identifier:   6E:F3:21:6D:EA:CC:B1:E5:40:C3:26:06:57:FB:6A:AF:C2:21:D9:81
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer:       /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial:       019364E95AB7358C1D100645F5FE5DFB1626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 20:00:34 +0000
Manifest this update:     Mon 25 Nov 2024 20:00:34 +0000
Manifest next update:     Tue 26 Nov 2024 20:00:34 +0000
Files and hashes:         1: 0BW-zNdSuohM9rS5qlq1sjWd88k.roa (hash: H51wGc8uCK2r64T5266r9ecsD3aGm/WBFEskFok48GA=)
                          2: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: wLA1OGYxGs0yJT5UpWpPA1qhZs4R1HmGR3Wo8l3LvhA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:e9:5a:b7:35:8c:1d:10:06:45:f5:fe:5d:fb:16:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
        Validity
            Not Before: Nov 25 20:00:34 2024 GMT
            Not After : Nov 26 20:00:34 2024 GMT
        Subject: CN=6ef3216deaccb1e540c3260657fb6aafc221d981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:53:ed:05:f9:28:87:05:db:f7:8b:f4:ea:
                    f9:40:99:c5:5f:66:ea:af:3b:c3:85:bf:aa:92:ef:
                    e4:e2:41:61:4c:e3:e5:9c:40:9b:45:f1:71:8a:47:
                    34:aa:0a:a2:1c:4a:ca:41:7d:b2:f9:d9:12:3f:43:
                    64:de:6c:6b:50:9f:f4:c4:68:91:a1:af:7e:3f:d6:
                    f2:dd:b2:bc:3a:30:1d:6d:78:b1:51:14:34:54:e5:
                    57:a9:e2:46:9e:6b:0c:52:d3:f5:22:57:9d:e5:5d:
                    bb:da:b5:32:f9:ec:c7:03:a8:72:f1:fe:fd:28:ba:
                    04:bf:e8:83:8b:51:3f:8b:b0:65:04:4f:b2:25:5e:
                    1d:0b:52:cf:1a:e2:2b:f6:0b:e9:d3:cf:6d:87:f8:
                    a9:8d:55:e3:be:44:fd:ee:d4:f2:71:af:66:02:28:
                    03:5c:98:d0:c1:de:f8:74:59:d1:f6:43:0e:31:d1:
                    f0:a8:fa:0f:26:e2:50:95:0a:fc:bf:ac:d7:f4:fd:
                    c2:3c:5e:f9:44:1e:a8:e7:49:3d:b7:13:78:a5:68:
                    42:3d:fb:c9:86:78:84:f6:30:27:95:3e:f7:d9:6f:
                    24:a5:e1:ba:47:1f:fb:dc:3b:78:af:36:9a:61:a3:
                    ec:f1:b7:78:0d:08:aa:e6:40:d9:ae:d7:77:f6:14:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F3:21:6D:EA:CC:B1:E5:40:C3:26:06:57:FB:6A:AF:C2:21:D9:81
            X509v3 Authority Key Identifier:
                keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:bb:37:37:e5:50:ca:f6:2f:a0:ef:b2:b9:f5:e6:77:22:
         fa:60:89:30:68:d9:14:2c:0a:97:64:ef:85:04:19:48:97:e0:
         d9:f4:6a:a1:5c:f4:6b:08:bb:b2:90:6e:f9:16:a2:03:a2:6d:
         ad:2c:f1:d3:6b:49:93:08:90:f7:ec:f0:90:e2:f2:f9:1a:7c:
         9b:a2:a4:94:fc:5e:94:85:43:57:d5:45:78:3b:3b:8c:84:c8:
         99:44:33:b1:03:8f:97:90:07:e7:c2:27:05:00:e9:ac:97:58:
         5b:be:0a:28:91:0e:38:0e:33:ec:8c:59:4e:f1:3a:2b:82:05:
         27:fc:f9:37:10:98:10:76:ab:c5:03:b5:67:73:25:cb:56:21:
         24:89:18:9c:dc:0a:01:36:a6:42:d2:5c:47:44:e4:ef:90:23:
         fc:62:56:37:08:a9:d3:e6:e4:13:d6:a4:b0:dd:6f:95:de:dc:
         47:93:fe:62:ca:32:6d:38:5a:91:e1:c0:20:ec:0a:f5:f5:ff:
         2c:c3:1c:0b:7b:cb:d0:07:9c:ce:7e:31:d9:bb:81:70:9d:11:
         98:28:91:17:16:fc:a6:d2:9b:8c:db:a1:cb:a8:87:fd:b9:8c:
         25:dc:62:2f:3f:6d:ee:8c:82:8f:75:36:1d:8e:e0:6f:a5:82:
         10:7f:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:05 2024 by rpki-client on console-fra.rpki-client.org