Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File:                     AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier:          noxGoGwggNspapsyUiGj0iMyOvn2N4rTV67bT7SR1jo=
Subject key identifier:   EC:EA:18:05:53:46:A4:B4:0B:5D:A0:D8:84:3D:50:7A:EF:B8:83:9F
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer:       /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial:       019365FDBE6DA4A6ADF553DAC0F6AE1E26A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number:          0FAD
Signing time:             Tue 26 Nov 2024 01:02:28 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:28 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:28 +0000
Files and hashes:         1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: dPJ58I+Q9XPIxO+3mdyXbsVHWsvmKur5xcGuTqcOIQo=)
                          2: CypyPJ4byh6ujH4Muo2gyOU5x6c.roa (hash: vYS8OeAvMcJXxr4rp8CQhVoKiQf0YZOHQmQlQBZgN3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:be:6d:a4:a6:ad:f5:53:da:c0:f6:ae:1e:26:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
        Validity
            Not Before: Nov 26 01:02:28 2024 GMT
            Not After : Nov 27 01:02:28 2024 GMT
        Subject: CN=ecea18055346a4b40b5da0d8843d507aefb8839f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:53:67:3c:79:52:6d:25:89:c1:8f:ba:93:
                    cd:9c:96:7e:04:ed:4a:49:b2:3d:a2:0e:50:d3:50:
                    f6:fd:ce:cc:34:94:74:39:94:38:43:71:ab:82:34:
                    1e:54:8a:56:11:43:86:b8:37:26:f0:2a:ba:21:95:
                    d4:f4:69:0f:93:fc:77:45:ad:af:c8:c9:03:0d:eb:
                    31:e6:76:1c:b0:35:0e:13:6a:e7:49:f1:9f:dc:40:
                    b0:f0:e3:7a:b0:a0:31:ff:cf:eb:8a:c3:9b:0a:0d:
                    64:31:7b:14:07:b2:c4:3a:b2:b0:05:fa:3a:76:99:
                    76:c9:f4:1f:c7:fe:44:46:8b:5b:70:fc:b8:6c:71:
                    9c:57:ad:f3:50:cc:99:03:4b:1e:c1:e0:1d:01:9f:
                    d6:9e:15:f6:e1:c5:4a:d2:07:a5:8e:33:c8:71:91:
                    12:a7:02:5b:63:02:ae:85:67:3e:20:19:06:89:0e:
                    f6:33:84:90:3c:d2:3c:cc:b7:52:1e:6d:7c:4c:30:
                    77:d8:d0:e5:47:aa:f0:81:5a:e3:6f:a4:e6:40:15:
                    f4:95:60:90:38:27:42:a6:d3:a8:d1:b3:cf:36:39:
                    ba:2a:be:34:71:3c:4b:51:e7:c7:04:cb:7e:16:b7:
                    12:8d:f7:04:d8:be:a6:ed:95:f6:64:8c:08:a4:4d:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:18:05:53:46:A4:B4:0B:5D:A0:D8:84:3D:50:7A:EF:B8:83:9F
            X509v3 Authority Key Identifier:
                keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:73:b6:d7:2e:90:4e:97:40:c1:b8:1e:ef:33:48:bc:86:
         54:f9:54:f2:a5:10:00:9a:ba:de:1a:37:c2:07:05:2f:f9:16:
         59:4d:95:65:5d:04:8a:34:9d:7a:cb:2b:c2:26:e2:62:5d:a0:
         a7:53:99:48:77:9a:dd:82:48:d1:f7:f7:75:68:99:95:3f:78:
         ab:bd:83:ba:64:ba:01:b2:7d:78:9b:0e:d5:db:67:60:b0:f5:
         eb:a7:a9:6b:d5:6b:5a:70:50:bc:4f:d0:9a:4d:3f:34:83:11:
         67:e2:fd:c9:30:00:1d:4a:0c:af:c8:50:5d:6b:fd:b2:68:39:
         94:89:5b:e7:af:3c:37:59:7b:0b:a5:ab:12:6f:16:a6:ac:28:
         c5:9d:50:00:3d:e6:51:58:79:9d:2b:06:fd:b9:f4:0e:bd:f1:
         f3:fe:7f:fc:b9:6c:33:b8:22:10:13:8e:99:f1:33:ef:8b:82:
         4a:9a:68:0c:bf:00:a4:67:0b:a9:51:a3:67:fd:ed:65:8a:98:
         6c:fa:74:4a:91:e3:7d:f6:6d:f3:7d:02:71:a7:90:20:8f:e3:
         1f:19:2c:b3:78:46:8e:c1:fe:bb:1e:fd:97:72:90:24:89:b6:
         95:6f:c6:88:db:61:62:66:32:ff:f2:f0:b9:df:a9:02:44:d4:
         c0:5a:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:00 2024 by rpki-client on console-fra.rpki-client.org