Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File:                     5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier:          4tWC/Kmxk5XP8XpAP9qAz6QxauzHVZRMZcw2kFcmb8k=
Subject key identifier:   14:3F:A1:30:C1:0F:0C:9E:7F:F2:4E:1B:3F:E3:09:E4:0E:A3:8D:83
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer:       /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial:       01940646B04413E97C9EAD7788DFFC43089C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number:          135E
Signing time:             Fri 27 Dec 2024 04:01:23 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:23 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:23 +0000
Files and hashes:         1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: 0ZshQTJYNUud176Of3G3s9FgEQDMEUmMxdKbejJcxlw=)
                          2: rsn9_I5xUSLm5m0tu8LU_oDv3dk.roa (hash: GiodOv6YfPlx67SwZzSr8g5azRb3ifnZMLA7pP5Oxs4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:b0:44:13:e9:7c:9e:ad:77:88:df:fc:43:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
        Validity
            Not Before: Dec 27 04:01:23 2024 GMT
            Not After : Dec 28 04:01:23 2024 GMT
        Subject: CN=143fa130c10f0c9e7ff24e1b3fe309e40ea38d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:5c:fa:6e:f6:34:dc:59:65:a3:da:09:38:
                    85:7e:6a:50:dd:70:cb:a5:ef:b2:dd:bf:20:5c:c2:
                    9c:50:93:c6:7f:15:03:fc:03:b9:e8:5e:91:ec:d7:
                    13:11:e6:4f:c1:a8:49:93:ba:5a:c9:6f:9c:89:d0:
                    f5:35:79:ee:f1:21:19:58:28:51:5c:a7:d2:a2:9f:
                    59:e8:d3:15:b7:c5:fe:ba:3b:69:f3:9c:5c:6f:cf:
                    d3:ca:9a:e6:17:2f:72:41:c4:0f:a3:55:e0:8a:bb:
                    00:88:2d:d7:79:3c:6f:b1:4e:f6:f6:3c:b1:88:54:
                    d5:3b:d2:5e:67:18:35:cc:0a:7c:87:31:8f:c7:35:
                    52:82:6d:52:03:99:84:e5:bc:2a:8f:05:21:a0:81:
                    40:67:fb:03:ac:9c:0d:87:b8:a7:4d:b2:1a:de:00:
                    87:ca:53:84:0c:63:21:34:ce:e6:17:13:5b:de:d0:
                    65:68:65:a2:16:61:89:eb:84:cd:43:d3:5b:b9:70:
                    4d:bb:29:a5:e6:39:38:3e:c4:af:11:9c:77:08:5e:
                    91:ff:4c:e0:b9:a9:22:63:a5:30:bb:bd:b1:13:d8:
                    46:f4:48:b1:4e:49:ed:34:e8:55:f8:a0:b7:27:d5:
                    73:57:31:30:46:c4:8c:73:f6:84:92:52:fd:8d:7e:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3F:A1:30:C1:0F:0C:9E:7F:F2:4E:1B:3F:E3:09:E4:0E:A3:8D:83
            X509v3 Authority Key Identifier:
                keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:73:df:11:b7:e0:07:90:26:48:b6:8c:1e:6a:55:98:1d:
         74:9d:1f:a7:d9:87:01:9b:10:8f:80:0b:ee:57:7a:13:7a:fc:
         22:f1:c7:82:cd:5c:f9:94:4e:07:84:a6:2f:f6:6d:5a:d4:13:
         a9:11:ce:e0:4a:37:7d:01:34:b1:fd:f4:2d:a0:88:82:11:5e:
         72:93:c3:a7:d7:2f:6b:cd:07:bf:ed:da:cc:31:4e:d5:f2:14:
         c2:90:44:11:14:04:9d:5c:92:b0:1f:a1:10:76:bc:b6:1b:53:
         f4:2e:75:45:d8:22:9e:2c:6e:b8:3e:72:23:1a:49:db:6b:60:
         0b:76:34:c2:8b:e3:6f:92:c1:35:d4:11:2e:1a:12:db:b0:d6:
         bf:bf:9e:5c:02:fa:41:6c:e6:8c:7b:17:9c:53:e2:37:d0:e1:
         35:d1:5e:88:37:72:4f:22:5b:19:ee:b8:33:66:8a:49:dd:8e:
         c7:92:12:da:2f:5a:f7:f7:af:60:20:54:a8:4c:dd:51:d8:c2:
         f2:59:0e:2c:86:f5:d7:38:de:34:82:41:10:0e:92:77:93:80:
         21:f6:b1:36:19:6c:ba:86:82:dc:5f:42:5b:15:8d:15:9b:ff:
         64:2b:b9:7a:da:7a:17:73:ca:4c:84:b5:23:11:60:a6:cd:0d:
         da:6d:df:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:40:33 2024 by rpki-client on console-ams.rpki-client.org