Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          F6hhkkhSi7UmOK8ahpgLXzuduJv/3siLf25/xX9DTSU=
Subject key identifier:   10:53:68:EE:2C:0B:CE:C4:AC:7C:82:13:D7:F3:89:70:84:8F:D5:EF
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019364E96D84E9B23F2EA81F294142C77030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0A9C
Signing time:             Mon 25 Nov 2024 20:00:39 +0000
Manifest this update:     Mon 25 Nov 2024 20:00:39 +0000
Manifest next update:     Tue 26 Nov 2024 20:00:39 +0000
Files and hashes:         1: A6sCoFu8NzloQlZBEZogOuA-ypQ.roa (hash: 5gvcEfu7cI4MQN+s1TwDET0wRT5LuEhfPva037FoQ3c=)
                          2: UdON_l6f_cBM0plUsoGvXvAKzQs.roa (hash: 8qrVstFK6ufUZDlqbn/lTS4qKnw6PEKnb/JSeGyoBX0=)
                          3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: Va+IR+gdgYHCGuM8uusJTsTgh82DK2m3jay+4srpfRw=)
                          4: ttZMSiaYcVTXuxh6JnvVVPyxzNY.roa (hash: ibWr91aqkqmj2bnUJlqXdakIgKKQb0Hb5JiTi2JaglM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:e9:6d:84:e9:b2:3f:2e:a8:1f:29:41:42:c7:70:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Nov 25 20:00:39 2024 GMT
            Not After : Nov 26 20:00:39 2024 GMT
        Subject: CN=105368ee2c0bcec4ac7c8213d7f38970848fd5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:f7:8e:e9:0b:77:75:62:b2:45:01:f0:d8:
                    47:15:69:a2:d7:bf:14:f4:ef:7a:52:fc:97:b3:49:
                    65:98:9c:07:98:c6:91:a8:2a:8b:b1:82:d4:23:ff:
                    d5:65:98:83:47:80:94:a2:f5:d6:a6:be:18:3e:2f:
                    46:c8:1a:db:c4:de:64:da:93:90:a4:3d:77:fd:9d:
                    56:de:18:42:3a:04:61:91:e2:a9:b7:b6:78:7e:49:
                    b2:90:ce:ca:2c:e2:3e:a8:e1:8c:1c:fb:7c:27:65:
                    a5:bf:81:d4:7c:76:b8:f6:89:77:5a:f5:53:0f:1b:
                    1e:e2:08:02:43:36:85:7c:0e:1f:5f:7d:4f:a3:2f:
                    60:ee:a4:aa:05:76:81:dc:04:3f:6b:69:7f:73:29:
                    49:93:95:dc:b4:17:56:fe:94:b3:70:b3:5a:6e:22:
                    91:ec:98:b1:eb:68:21:16:e8:35:68:57:56:7b:f3:
                    9c:30:d3:52:b1:2c:b7:f5:13:4c:9b:ae:6c:9b:2d:
                    af:e6:f5:b5:86:4d:2e:6c:f9:53:cc:9e:58:d2:ce:
                    82:5e:f4:69:31:07:0a:d5:dc:eb:31:0d:ab:66:84:
                    da:9a:ad:b1:75:49:54:52:8c:8f:4a:75:8a:53:fb:
                    38:fe:bf:bb:3d:ef:e0:7b:2b:4a:f1:11:ee:4d:a5:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:53:68:EE:2C:0B:CE:C4:AC:7C:82:13:D7:F3:89:70:84:8F:D5:EF
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:c6:0f:b6:4d:8b:41:b4:b1:7e:69:71:a2:41:1a:2d:b3:
         ac:1c:72:3d:03:6d:fd:96:15:51:7a:37:e3:df:7c:0f:47:42:
         f7:e6:88:60:7f:b5:2f:74:b2:48:25:78:86:48:3b:a5:c2:29:
         fb:fe:32:16:f0:7d:ce:0f:fa:67:a3:60:32:ff:9e:aa:f9:f0:
         49:78:2f:4e:20:cb:b0:0a:df:c4:31:97:d1:dd:f3:cc:25:95:
         a0:bb:b1:95:25:62:cc:b8:4b:2c:29:a3:12:93:31:ed:3d:35:
         00:6b:30:1a:9e:85:e9:f7:dc:06:4d:92:ed:f3:ba:9a:aa:49:
         92:ef:8f:df:ed:2d:ee:62:b4:17:7f:9d:4b:6d:cb:38:1a:81:
         03:cf:ed:53:4b:f7:23:71:dc:ad:cc:97:59:b5:35:76:ed:ab:
         60:58:c5:b9:0a:4f:59:65:9b:1e:ef:2a:9e:23:2b:47:24:89:
         43:4f:64:bc:0d:26:f5:de:39:56:99:99:8e:65:4f:cb:6f:27:
         5b:50:87:f9:83:2f:44:ae:1b:ac:c8:d6:fb:ee:0e:55:59:e4:
         a2:17:32:5f:d8:0c:65:e3:b4:9e:e0:38:c3:91:3e:70:59:27:
         49:73:55:8a:73:b2:0c:25:b2:03:cb:e7:ee:42:f6:c2:17:1c:
         13:ff:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:07 2024 by rpki-client on console-fra.rpki-client.org