Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          DRwauUyQQ7hkFSCvK8Mdb3r8mQvtaymPFVUZ57m2RnA=
Subject key identifier:   21:CE:44:5D:3D:84:5A:93:F6:4D:6F:F0:A8:F2:5C:C0:55:E7:58:88
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       0193549CB5A5C840DC3611373CF1488F3920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0C5E
Signing time:             Fri 22 Nov 2024 16:02:56 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:56 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:56 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: nmsi+VymkpM4/Ovf0pRD/8uBX3OYgMuw3TzV0lIgW5A=)
                          2: fFdXoFevEpcNsOXqvo-ybYAK1r0.roa (hash: /5wQC4WHu9/qdgw3aahpKFVZDhXs8ixmSl89vWh+o34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:b5:a5:c8:40:dc:36:11:37:3c:f1:48:8f:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Nov 22 16:02:56 2024 GMT
            Not After : Nov 23 16:02:56 2024 GMT
        Subject: CN=21ce445d3d845a93f64d6ff0a8f25cc055e75888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:02:b7:93:80:94:99:89:72:76:8d:7f:8d:
                    8e:8c:95:36:b2:34:ed:d5:63:d3:59:e6:34:b1:8f:
                    ca:1b:85:ac:68:1b:3d:c5:ca:c3:1c:4c:16:3d:06:
                    d7:b7:db:29:c4:3b:5f:00:28:e7:91:45:ed:d2:13:
                    cb:40:62:b3:c3:8a:aa:f7:d7:7e:e8:83:9c:2a:39:
                    54:0e:e1:c4:2c:fb:42:88:eb:03:46:d5:30:4e:ed:
                    9b:0f:f7:12:0d:6c:40:9d:a0:c6:e1:98:f8:f8:54:
                    be:81:ab:be:28:90:7b:88:d6:3d:5d:35:1a:75:73:
                    43:a9:40:aa:b2:07:4e:71:67:bc:37:d9:8c:35:a8:
                    81:50:ad:ad:30:6c:11:ac:0d:b9:a8:06:73:90:48:
                    4b:ba:11:ed:8b:28:c7:ab:79:65:7b:7d:6a:e5:5f:
                    d8:a1:af:37:54:c4:1c:e3:b6:2e:8b:b5:39:a9:a5:
                    08:37:8c:84:90:af:e9:de:b5:87:10:6d:f1:ac:ef:
                    3a:fe:37:40:ec:90:61:70:c1:2a:80:5c:10:8c:bc:
                    ae:16:2e:a5:4f:36:ad:ba:82:c6:6c:f5:fd:42:41:
                    b9:ab:d8:00:29:22:3e:c5:d7:5c:ef:16:b1:97:48:
                    bb:be:75:42:35:ea:67:d4:95:d4:21:04:ca:31:c1:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CE:44:5D:3D:84:5A:93:F6:4D:6F:F0:A8:F2:5C:C0:55:E7:58:88
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0e:ad:f3:43:e7:22:00:7e:8d:d1:6c:e8:d3:50:7e:05:6b:
         61:02:fa:33:40:79:f0:00:49:d0:b4:83:7a:40:32:7e:61:17:
         07:2f:5b:15:5c:ba:0a:83:51:5e:88:10:66:96:22:d2:e0:86:
         db:02:8a:05:b9:c9:1d:b5:f9:04:a0:41:e3:8d:cf:f8:de:bb:
         74:a5:11:56:a1:4d:aa:76:b6:dd:39:0c:76:0a:bd:b1:84:b1:
         0e:d6:d5:13:b1:18:34:4a:48:f2:27:15:27:72:bf:13:d4:a0:
         98:a5:02:cc:2e:76:ff:60:18:6c:db:6a:bb:8a:19:e8:0d:71:
         47:2c:6c:3a:f8:a3:5a:89:83:4e:42:dd:ab:56:80:5b:4f:55:
         7d:0a:d0:78:af:07:f8:aa:2d:78:ea:5e:04:40:e6:28:7c:c7:
         91:4e:26:60:24:47:8d:11:d1:9a:48:51:5a:a6:38:f4:88:4e:
         c9:e6:64:91:7e:74:fa:c3:2e:ce:8d:7e:42:9b:c2:b4:12:50:
         8d:5e:cb:52:3e:ca:4b:22:f4:67:9c:46:5a:24:e5:68:20:c3:
         9f:9f:c2:3f:9c:aa:fe:c9:a7:92:b4:58:f9:94:20:d4:bd:52:
         8d:bf:f3:ae:b8:b0:98:92:a6:d5:6a:a2:31:26:d1:85:fe:24:
         cc:ef:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:19 2024 by rpki-client on console-fra.rpki-client.org