Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File:                     05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier:          VAgzgaxzuEeippeeJHHgMtFu8HdS42GzZFh6Nyn1ZlM=
Subject key identifier:   49:2F:8D:A5:CF:22:FF:E0:6D:0D:1F:A2:2D:E1:C7:FD:36:A6:DB:4C
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer:       /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial:       0193579BE79F47D7697FAA9F517518443472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number:          045A
Signing time:             Sat 23 Nov 2024 06:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:55 +0000
Files and hashes:         1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: /OAR052JDOqOIZYMm6SpngIzKqvSo9+XB17mzcjis5k=)
                          2: f2OeFvQR7fI4t0DMh5eGZfrfYtU.roa (hash: eIRZ0/ncnntx8J1wwBMx9R6zuY49+RRqHCtVsrrvxqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e7:9f:47:d7:69:7f:aa:9f:51:75:18:44:34:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
        Validity
            Not Before: Nov 23 06:00:55 2024 GMT
            Not After : Nov 24 06:00:55 2024 GMT
        Subject: CN=492f8da5cf22ffe06d0d1fa22de1c7fd36a6db4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:2f:05:fe:79:57:1f:29:b9:71:ce:0a:98:
                    5e:c2:15:ee:3b:98:03:d7:8d:18:7b:46:71:8c:fa:
                    8b:15:db:ce:58:b7:0a:13:5b:94:a7:8e:4b:62:25:
                    4c:68:3a:fd:c3:c9:ee:0e:91:f7:24:72:e4:b5:29:
                    d1:4a:87:3b:a4:fe:a7:eb:f3:51:dc:50:d1:f4:ec:
                    ae:16:71:ab:6a:1c:38:0f:1c:4b:f4:95:79:a3:c9:
                    3e:ed:40:5c:01:c7:b1:34:8b:fc:f4:25:b4:50:dd:
                    92:ea:59:f6:ce:86:ec:45:e4:fa:32:ce:4e:97:fa:
                    60:db:96:80:1a:cf:07:18:3c:97:80:62:00:a7:79:
                    4c:78:4c:8c:2a:12:f0:38:b4:d5:78:6f:06:82:97:
                    5f:b8:e5:f8:26:9d:55:9c:1a:34:5b:6b:dc:6b:56:
                    e0:bf:35:9c:f8:f5:36:e8:16:45:c4:d7:7a:2b:65:
                    e8:99:2d:07:f3:79:55:2e:ae:91:79:f0:51:24:68:
                    cf:a7:a3:65:e7:b6:71:13:ba:58:aa:cd:da:84:7b:
                    2b:4e:09:12:7e:28:f0:66:62:58:8a:c2:ee:5e:0e:
                    3e:ec:ed:1f:8b:98:98:dc:82:0c:d7:33:07:aa:95:
                    8e:c4:f0:c1:71:eb:0b:92:36:5f:13:31:74:0f:06:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:8D:A5:CF:22:FF:E0:6D:0D:1F:A2:2D:E1:C7:FD:36:A6:DB:4C
            X509v3 Authority Key Identifier:
                keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:50:d6:3f:c3:05:26:85:04:30:63:b5:4e:41:b8:20:e0:3e:
         2f:27:b6:13:5b:8a:32:6a:a4:ea:0d:2c:8e:b1:e3:ca:ab:d4:
         ff:c5:88:b9:44:3a:94:5b:b6:7b:52:9a:8c:13:ab:9d:cc:25:
         fb:13:79:0f:be:66:15:06:6c:11:03:82:8e:66:80:c2:32:7c:
         79:c5:5c:0d:52:22:a5:a5:04:fa:07:b9:66:53:7f:c9:52:05:
         9b:5b:55:ae:b3:6b:fd:f8:0e:df:f6:cb:b3:31:0d:2a:3e:e3:
         35:98:4b:ad:2b:69:7c:52:f5:aa:a8:fe:75:e6:cf:6e:bb:27:
         ea:17:e2:1a:24:2b:76:da:23:a5:ed:8a:92:96:04:a9:cc:35:
         89:52:62:6f:d7:a0:2c:2e:e3:ec:a7:2a:b3:13:ed:6f:06:7c:
         6d:da:98:65:5d:22:05:37:94:c4:ee:4e:db:bc:d4:91:71:3f:
         4d:e2:98:04:a0:c7:e4:04:52:56:c5:3b:ee:b9:e4:16:38:3d:
         30:40:85:fc:bc:c5:1f:b1:98:0f:3b:c0:8b:21:d1:84:2f:4c:
         3a:49:36:69:4e:19:46:18:ee:fe:0b:01:97:90:ae:de:ab:7d:
         37:9b:67:95:45:b5:93:54:ce:c9:ad:e7:b4:25:0c:c8:2e:26:
         ff:4e:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:12 2024 by rpki-client on console-fra.rpki-client.org