Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          oVLiN043MoWOAs+oxLvxCgcT2g0F9DLQMnrzPtD2dRM=
Subject key identifier:   A5:74:86:3C:C7:87:49:1C:61:F8:68:39:39:C5:81:B7:03:9C:84:D2
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       01936D10B4AD6BD3DCFDA18F09AAD22C0A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          04C0
Signing time:             Wed 27 Nov 2024 10:00:31 +0000
Manifest this update:     Wed 27 Nov 2024 10:00:31 +0000
Manifest next update:     Thu 28 Nov 2024 10:00:31 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: l68J16yYSohAc9yeavva/mc2qiGOXbrTJJtTyKbM9rw=)
                          2: fTQtuqnvzbQofexf6Vy0PR4THCQ.roa (hash: NgKH22ELDpRmEb09PISAiShdA1TINAw5wCC+/Qvzzsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 08:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6d:10:b4:ad:6b:d3:dc:fd:a1:8f:09:aa:d2:2c:0a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Nov 27 10:00:31 2024 GMT
            Not After : Nov 28 10:00:31 2024 GMT
        Subject: CN=a574863cc787491c61f8683939c581b7039c84d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:eb:1e:39:85:10:b4:55:4e:5d:41:a3:7f:
                    18:93:9b:ea:74:ee:a9:52:4f:82:8f:98:cd:c0:01:
                    b9:c1:7a:ad:50:73:c5:ab:3a:34:60:c1:32:c2:3e:
                    bb:c7:2e:85:6c:b0:86:18:8f:ea:ed:3a:48:53:61:
                    53:dd:2f:1e:06:d1:4e:10:b3:41:32:a8:3b:3d:e3:
                    59:c1:6b:0d:28:93:e2:35:b1:b5:85:62:34:a0:21:
                    fc:33:1c:b5:0e:81:d5:e8:b3:d5:c7:1d:5f:c9:22:
                    29:db:aa:0c:b8:8d:40:bf:23:ed:3d:10:08:68:73:
                    2d:ba:51:00:9f:2b:f8:6f:df:86:61:19:ec:1a:09:
                    12:2d:d7:42:b3:9c:3b:94:07:39:e5:45:02:30:6b:
                    7f:1b:45:5b:e4:6e:4a:22:69:58:90:98:ba:c2:b6:
                    9f:a6:70:15:ef:82:a6:20:a4:3c:73:61:aa:4a:74:
                    c1:b0:6d:87:a9:6c:fd:64:77:40:2f:ae:a7:49:5a:
                    1d:90:18:72:d5:a6:79:1f:77:a3:59:70:3c:8c:ff:
                    77:d2:0e:9c:b6:ac:38:46:01:dc:b8:23:3a:52:75:
                    7d:23:25:40:94:97:8b:c1:c6:5e:c1:f0:b9:a1:d1:
                    af:85:d0:8d:d6:a2:c0:84:40:d3:5e:74:4e:ce:32:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:74:86:3C:C7:87:49:1C:61:F8:68:39:39:C5:81:B7:03:9C:84:D2
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:92:3a:f0:b3:2c:d9:9a:c2:73:70:f6:26:bb:53:e8:44:
         e5:30:54:27:b9:c4:ef:98:40:60:29:b0:5d:8f:bd:b4:86:8b:
         7c:ce:02:fc:2f:b4:66:2c:1d:85:86:80:96:08:bd:c1:57:ce:
         72:31:35:fe:8f:a6:96:d9:34:10:c5:35:a3:0d:5e:b7:2b:2a:
         37:e2:bb:bc:14:27:0b:48:5f:ee:fe:6c:7c:ad:77:f3:1c:8e:
         8e:de:14:8e:31:31:f9:cd:e5:5d:c8:e0:8f:cf:34:a5:71:1d:
         ea:90:64:40:36:7d:86:33:18:85:d4:83:de:83:25:7f:59:ae:
         79:c0:f3:8f:e9:71:18:8b:2b:a1:db:66:3e:f3:9b:1c:11:7f:
         43:0b:e7:68:70:92:fa:c5:4b:f8:3b:09:f8:c0:b0:e8:c4:dc:
         82:29:87:37:4b:d6:3a:67:80:1b:5a:03:8a:e7:0b:0a:77:c2:
         f5:74:4e:83:0f:31:d4:74:5d:c3:63:6f:40:6c:37:41:de:4b:
         4e:bb:55:29:3b:ab:d0:b0:b8:87:8c:4c:00:ed:fa:50:04:c0:
         2b:8b:16:5e:1e:6b:08:06:be:40:b0:c8:9a:7f:89:6c:b0:76:
         e3:8c:c7:e0:e1:c0:9c:f1:6a:2e:be:e5:98:66:48:65:03:35:
         6a:65:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:29 2024 by rpki-client on console-ams.rpki-client.org