Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File:                     eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier:          GHDirl390PLIPg+PPViS0byiqs6j6RqijQpItrj9DUY=
Subject key identifier:   F6:55:27:7C:28:89:E1:92:F1:30:72:1E:F6:B7:82:DF:BE:96:4C:37
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer:       /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial:       0193572DE5B850BB6BA15E2A261D1FE88A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number:          07CA
Signing time:             Sat 23 Nov 2024 04:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:45 +0000
Files and hashes:         1: QB4EUHWmJ0kDo-kkgSAhl8W9O4I.roa (hash: KZnD0Z7g/wAmc9uFCdoSLQtL1rj4iU3ehwugpeCfTDQ=)
                          2: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: mC1dxbId8bS3am6Zes4m/8OOYK8EilcFTxLv+lmg0Xo=)
                          3: uuEt9m8IXGFuAwOXrY0xPWlQhX0.roa (hash: M/42WAZRktnYjgnbvOE4xnBGAnLD9cKUUPAj4/kloiE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:e5:b8:50:bb:6b:a1:5e:2a:26:1d:1f:e8:8a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
        Validity
            Not Before: Nov 23 04:00:45 2024 GMT
            Not After : Nov 24 04:00:45 2024 GMT
        Subject: CN=f655277c2889e192f130721ef6b782dfbe964c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:ce:d3:49:c3:d6:f0:94:2e:ce:86:d2:42:
                    5f:77:82:4b:ec:3f:9d:44:ab:ff:32:e3:58:b6:fb:
                    a8:91:c3:c0:72:c0:4c:e3:da:fb:9f:17:a1:ad:06:
                    af:43:35:b5:69:68:87:16:0d:4d:87:a7:21:dc:f4:
                    55:2c:4a:9f:97:20:b2:1d:66:97:46:26:d4:20:be:
                    42:ea:bd:18:47:f9:3f:cc:ad:d8:0b:31:9a:6d:84:
                    b7:e1:58:cf:bb:c4:e2:f6:6f:93:f1:6d:ec:b8:72:
                    39:35:70:02:2e:b0:73:d0:ab:24:b4:b0:25:98:f0:
                    e1:26:f0:ea:8a:c2:44:d3:c5:c7:04:76:c1:09:61:
                    3b:ae:04:e8:bd:d2:c5:29:bc:6e:d2:6f:a3:e3:3e:
                    03:3b:14:a0:c1:ee:0e:b1:2e:b3:63:b7:02:2e:8f:
                    59:1c:90:34:95:ec:87:2e:87:1b:e8:7d:fc:0e:6b:
                    8a:c6:83:d2:b0:66:26:b6:79:3a:5c:b3:ec:d5:61:
                    75:b0:9a:92:e5:e0:5b:9d:ef:0f:e6:2c:75:11:90:
                    3d:35:b5:13:7a:31:fc:7a:09:0f:40:2e:5f:70:25:
                    59:b6:66:b7:e5:36:63:18:81:2d:b1:1a:6b:20:6a:
                    01:de:73:1c:bd:d8:09:fa:ec:f6:a1:a5:01:44:ae:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:27:7C:28:89:E1:92:F1:30:72:1E:F6:B7:82:DF:BE:96:4C:37
            X509v3 Authority Key Identifier:
                keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:53:91:27:88:20:90:c3:90:90:9c:2f:4b:2e:dd:ad:c9:
         10:33:45:85:56:b5:cf:4d:7b:9c:e7:0e:5a:45:e7:88:7e:e9:
         be:5f:0f:64:d7:77:2a:6f:a8:89:f6:01:8f:6c:d0:46:ab:8e:
         68:ce:17:3d:89:68:ee:5a:71:5d:15:81:e0:a8:e0:8f:37:26:
         41:88:9f:f2:96:58:fd:a9:99:45:11:14:14:a4:6d:9c:06:a0:
         91:93:b7:76:cb:f3:67:ee:3a:03:c0:25:c5:5b:14:d3:99:b9:
         e5:3c:aa:83:26:bc:b2:a8:46:fc:e5:01:24:17:a6:d2:54:e0:
         af:89:f3:3e:61:be:84:02:57:ad:fc:b1:19:9a:7a:da:85:a1:
         5d:90:4f:1f:13:c5:4d:64:07:7d:10:33:3c:26:20:4d:a4:ce:
         fb:a5:25:91:d3:9c:36:ef:b0:ca:00:b1:f1:73:47:8c:84:b6:
         02:27:06:1b:ec:a6:5c:62:ca:df:85:b8:da:8c:40:14:1b:18:
         03:50:30:b8:86:73:b4:c3:f1:fc:2b:da:51:b7:b1:8f:a8:53:
         15:f9:27:10:ef:bc:2f:54:1e:09:7f:f9:82:ac:99:b0:47:d2:
         5c:f7:27:cb:43:af:e8:ff:9a:83:9d:3d:a5:fd:6c:3d:38:e4:
         ae:f9:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:35 2024 by rpki-client on console-fra.rpki-client.org