Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File:                     5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier:          SqnE9bQCHwNIHxKSAleGB6b58HzG8kwd2mb6wybAg0M=
Subject key identifier:   A4:70:B1:B4:2C:1B:AC:75:9E:24:4D:CE:0F:E7:A8:39:BC:7C:80:A5
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer:       /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial:       019352ADB91B73588191F1296DAB5D5E3817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number:          0E32
Signing time:             Fri 22 Nov 2024 07:02:16 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:16 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:16 +0000
Files and hashes:         1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: No0RyAhogDfytqEM9dJG1RUjC1/zDVbuXIS3PwQUFeQ=)
                          2: NC2Dx_jz3fLuTHLKWC0SCKLOLWU.roa (hash: cUgSk48eMtT2pLjqYlCI8azmUGPYfnFobjTz9wf/JyM=)
                          3: zPPvD9EZK0QpCNQysphfiJbuCXo.roa (hash: m9ebC5zSVtaK+3CoI6QzKm4/dhqThiA48246dB6RDeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:b9:1b:73:58:81:91:f1:29:6d:ab:5d:5e:38:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
        Validity
            Not Before: Nov 22 07:02:16 2024 GMT
            Not After : Nov 23 07:02:16 2024 GMT
        Subject: CN=a470b1b42c1bac759e244dce0fe7a839bc7c80a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:fa:63:5d:0f:4a:e2:d7:d9:4d:16:81:01:
                    82:28:4e:13:48:de:bc:7c:a7:ed:45:9f:6c:6b:63:
                    d8:29:02:55:c9:65:51:c8:f4:71:60:25:2c:6d:83:
                    ae:8a:46:f7:d8:7b:a1:3f:25:d6:0a:e1:f1:73:a4:
                    9b:81:4a:a8:44:ec:72:e4:65:ee:1d:54:b1:41:31:
                    62:88:2b:c5:06:8f:49:71:db:df:fd:7b:29:dc:85:
                    a8:1f:54:19:e0:46:df:01:f2:5c:d0:1d:93:97:5c:
                    77:8b:bf:8a:f4:4d:a7:e1:1b:c6:67:57:1d:c2:e7:
                    b6:5f:63:3f:5d:13:17:d8:7c:f4:00:2a:c7:30:23:
                    7c:74:f6:cf:cb:19:9d:b6:5e:2f:ff:c4:5b:94:a8:
                    f1:97:db:98:98:31:0d:9f:91:86:9e:ad:9f:f2:c2:
                    bf:ed:d4:8a:ec:20:92:89:73:9a:76:48:b6:74:20:
                    89:aa:94:63:05:3b:ad:c9:92:ed:7b:e4:af:8d:63:
                    56:b1:7a:39:00:2c:6e:d9:07:5b:f8:9e:bf:ef:36:
                    44:c3:b7:31:22:a2:03:33:6c:5f:72:e7:cf:cb:7f:
                    12:b5:e1:91:3a:67:ba:a0:2f:25:06:33:26:ad:96:
                    5d:d5:2a:d5:a6:1e:d3:dc:e2:7d:37:9e:50:c9:d8:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:70:B1:B4:2C:1B:AC:75:9E:24:4D:CE:0F:E7:A8:39:BC:7C:80:A5
            X509v3 Authority Key Identifier:
                keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:85:67:26:f1:3b:c6:41:b8:4c:30:cf:93:de:8a:c3:45:6d:
         69:2f:4a:ce:b3:12:81:fa:ca:7a:1a:9a:83:22:37:fa:a3:96:
         7e:e4:27:3f:b1:2f:cd:7b:2d:de:c2:5c:1e:5b:f1:77:b0:a8:
         14:54:db:22:c2:14:c5:16:3d:f6:cd:88:5b:b0:b9:93:db:76:
         38:dc:b7:96:8c:fa:7b:94:7e:f4:80:57:a0:33:55:22:6f:87:
         0b:a8:f6:3f:29:0c:7a:39:da:a6:6d:89:f1:ad:0e:f9:7f:c6:
         2d:97:65:a8:30:57:86:86:79:0c:10:5f:43:6b:17:32:28:41:
         36:4b:ff:a0:98:44:be:f3:a9:1c:cc:f5:21:61:46:4b:b4:7c:
         6b:8f:9f:50:43:c6:7d:b2:e2:e5:8c:8d:e8:4c:1a:fb:a8:89:
         7a:5c:ee:7f:8c:6b:73:50:8b:14:70:fd:64:e3:6c:0e:3f:cf:
         9a:42:13:83:60:ae:80:ab:42:77:a3:06:3c:4a:56:bd:14:4d:
         14:09:ee:2a:53:a0:e5:87:3f:66:20:c8:3f:26:3e:46:33:2c:
         b3:19:99:90:39:00:37:a1:2e:ce:8d:2f:06:5d:dd:f9:80:78:
         9e:3b:e0:28:de:e4:0d:4c:27:92:3e:99:95:eb:98:4c:4b:05:
         69:9a:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:34:45 2024 by rpki-client on console-fra.rpki-client.org