Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
File:                     49ifjyq45URrTJ4SXKywJ0icp_s.mft (raw, json)
Hash identifier:          Gw3iLhgukSERyt+8DiDJeh+z2BGqt6cNd6WoaCLfeZE=
Subject key identifier:   8A:0F:41:7C:61:23:ED:1E:9D:B4:17:2B:88:65:EC:DC:09:C9:19:47
Authority key identifier: E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
Certificate issuer:       /CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Certificate serial:       019355E3C5042CA60B8C9E0AC3A88FD51DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
Manifest number:          079D
Signing time:             Fri 22 Nov 2024 22:00:10 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:10 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:10 +0000
Files and hashes:         1: 49ifjyq45URrTJ4SXKywJ0icp_s.crl (hash: bUaXVLrGfpFx0BR60eQ01FhYEkyHjDqW+lKupaAdSWk=)
                          2: _T95pb3fSEz9wIRRNrJ3URoDyA0.roa (hash: b9DXDFtYGSmkdIdbmXbJbKOGmfHzZxo/lkWoAYmkF+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:c5:04:2c:a6:0b:8c:9e:0a:c3:a8:8f:d5:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
        Validity
            Not Before: Nov 22 22:00:10 2024 GMT
            Not After : Nov 23 22:00:10 2024 GMT
        Subject: CN=8a0f417c6123ed1e9db4172b8865ecdc09c91947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:76:4d:33:6b:61:f5:8e:cb:62:4c:8e:6d:
                    a3:5a:b7:aa:63:6d:0f:35:70:25:d3:89:df:cd:65:
                    e6:7e:66:8f:b5:95:a5:fb:c0:49:ac:18:15:4f:77:
                    21:4a:48:6c:39:94:a3:35:24:e4:72:76:82:22:02:
                    2e:4f:53:ee:78:a4:86:2b:c3:96:d6:b9:57:a4:87:
                    95:cc:fe:8d:37:ae:fd:36:eb:fa:a8:5f:d0:10:81:
                    f1:98:12:c4:25:98:50:31:64:2d:2e:90:91:16:ed:
                    06:1d:a7:34:76:c8:b9:ec:b3:ad:3b:91:63:ef:15:
                    e9:a6:1a:7c:db:40:dc:5d:6e:a2:38:e9:35:a2:e9:
                    cc:a3:8b:52:7c:46:f4:6f:b7:4f:bd:4f:e5:06:8d:
                    31:87:74:31:53:92:09:22:6c:2c:34:a3:4c:20:ac:
                    93:d5:f3:3d:b8:2a:de:b1:8a:6b:34:9d:0b:3e:38:
                    52:f1:e0:cf:5d:b7:af:cb:a5:d7:25:f5:40:67:6c:
                    be:e3:b8:fe:25:66:06:06:38:38:06:be:b4:fe:e6:
                    82:9e:b4:57:c0:ac:91:10:b5:c0:d6:b3:de:a1:e6:
                    ee:3a:ee:01:c7:9f:51:c6:df:3d:ff:4d:ab:f6:d6:
                    cf:ac:07:c9:bc:24:fb:8a:a3:a5:59:6a:38:9c:4b:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0F:41:7C:61:23:ED:1E:9D:B4:17:2B:88:65:EC:DC:09:C9:19:47
            X509v3 Authority Key Identifier:
                keyid:E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:72:7f:65:61:dd:20:74:64:9d:88:64:80:9f:19:3b:32:0a:
         98:c1:76:3e:f5:5d:3c:91:1d:a7:e1:14:b3:f7:3c:18:eb:c6:
         5b:65:07:38:a9:d4:9d:a4:2a:4f:02:82:dd:5e:92:c0:72:60:
         12:fb:b7:e4:f7:31:09:50:d9:9c:87:c8:3b:fa:30:6d:44:42:
         59:86:c5:fe:16:33:98:57:4d:fc:de:91:cf:bb:f5:f8:1f:56:
         72:47:12:6c:59:17:93:e6:01:6a:cb:bd:21:33:03:eb:2d:42:
         a1:bd:dc:36:fd:cb:50:47:f4:db:dc:54:e1:a6:56:d0:97:b4:
         f0:be:a2:84:49:46:c5:8d:3f:c6:e3:f3:3e:0f:8d:4e:62:50:
         05:d3:91:71:b9:c5:34:c9:e7:c4:31:d8:27:a5:ca:01:52:63:
         dd:0d:3b:95:c4:1a:6d:fb:f9:73:e1:49:0c:bc:b3:39:09:c6:
         1a:c6:64:d9:03:21:74:dc:02:d0:0e:49:26:99:c1:da:4b:e6:
         d4:e8:82:c9:57:b1:e2:a4:77:2d:02:42:15:12:0a:dc:43:b9:
         b9:6f:e7:26:44:83:10:f5:c2:00:ec:1c:8a:e6:90:fc:4c:fc:
         f5:7c:eb:e0:47:07:56:30:2a:62:bd:ca:f1:11:a1:2f:1b:da:
         84:f8:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:37 2024 by rpki-client on console-fra.rpki-client.org