Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File:                     p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier:          ktPtkMuyAlwE8JE01RQg+gkELe4gfp/qxFqRYay6gJA=
Subject key identifier:   57:DB:6B:D9:9C:9E:D0:89:CE:35:EA:CC:0B:7F:FD:26:29:09:0F:F9
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer:       /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial:       019358406306D4AB174BC0272A0E434649CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number:          1075
Signing time:             Sat 23 Nov 2024 09:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:34 +0000
Files and hashes:         1: fkQsw22qMQtDPioczuaXgMb_y_A.roa (hash: o2mU2voBe9hkZXv7MnPVjirJ3uGEC25vF18Faqsf4XI=)
                          2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: 1AII4ImBU8c4CG/hsUXW23hLWH7caQOyfBmb6dsiW1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:63:06:d4:ab:17:4b:c0:27:2a:0e:43:46:49:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
        Validity
            Not Before: Nov 23 09:00:34 2024 GMT
            Not After : Nov 24 09:00:34 2024 GMT
        Subject: CN=57db6bd99c9ed089ce35eacc0b7ffd2629090ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cd:b2:c5:95:7d:87:ca:ea:0c:d8:6c:24:10:
                    ca:b3:80:e8:36:ad:26:07:8d:7e:ad:6b:f3:9f:6e:
                    73:c8:34:2a:91:e2:70:17:62:c4:25:91:f6:82:c7:
                    fa:e1:14:01:62:8f:77:c3:9b:20:1f:26:a6:a9:3c:
                    4c:9f:fe:d3:51:6c:4a:c3:2f:77:d8:09:ef:86:fe:
                    45:51:db:1c:22:e0:27:95:51:68:78:7b:91:72:3f:
                    62:59:62:f1:63:b8:da:df:56:23:89:c0:b5:f8:73:
                    34:4b:7c:0f:e2:04:83:eb:92:e6:f0:7f:6d:be:c2:
                    d0:28:b7:f9:c3:82:1e:36:d4:86:f5:23:14:6f:c8:
                    1b:ee:81:d3:50:9a:f9:0c:2c:1f:92:bf:98:6f:d3:
                    45:35:39:42:e7:45:c6:92:12:89:6b:08:06:5d:cf:
                    79:f0:4c:c5:94:11:48:42:8c:ee:a4:cd:a8:6a:ac:
                    4d:99:18:d0:a4:ad:1d:18:96:aa:0d:71:44:0c:ce:
                    11:a0:94:1d:99:02:0b:79:12:fa:cd:ca:d5:18:88:
                    5b:ba:a2:4d:42:f2:7c:e3:a7:98:79:6a:89:b1:54:
                    b9:5c:e8:65:35:a5:0d:96:48:d2:4f:6e:0d:00:da:
                    02:ba:64:d2:b6:38:93:bf:e0:af:cc:7a:2f:cf:2e:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DB:6B:D9:9C:9E:D0:89:CE:35:EA:CC:0B:7F:FD:26:29:09:0F:F9
            X509v3 Authority Key Identifier:
                keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:af:93:0a:98:07:19:a3:14:d3:fa:f0:d2:ca:6b:6f:61:c5:
         12:72:bf:28:61:3b:28:2e:5d:30:c2:3a:16:32:5b:89:55:fb:
         a7:eb:3a:e8:d0:2e:cf:ec:af:ec:8f:25:98:79:44:07:6a:54:
         b5:fc:b2:6f:da:54:d3:4f:2f:4b:4b:b7:e7:13:86:d3:21:e0:
         96:06:7b:21:5c:37:54:0a:99:86:e4:d5:c0:73:f5:07:13:8e:
         f8:03:1e:4c:d2:78:0f:7a:42:01:cf:14:93:9a:f5:a0:8f:59:
         1a:31:0f:f4:ec:ba:21:3a:41:2b:19:a8:7d:26:81:83:da:d5:
         dc:63:24:16:62:1d:15:7a:2e:96:6e:4b:6f:19:41:92:19:5b:
         62:cf:5f:bf:3d:d7:08:68:9b:74:f6:e9:db:ff:d7:d0:6e:7f:
         3b:06:d1:93:5c:b5:76:a0:80:94:0e:1a:d6:cd:b7:b4:1f:fd:
         ca:e5:7d:86:5d:a1:d3:89:bb:7b:6a:16:fe:57:36:61:0d:aa:
         c8:00:c8:4e:5a:95:63:0b:ac:ee:08:d9:45:6a:16:73:a6:e6:
         c0:59:a2:e3:2e:d6:5b:9d:5c:ab:87:e2:5e:98:2b:3a:87:b6:
         17:be:e2:2d:c3:48:1b:9f:ab:45:f8:e5:d5:c5:48:4d:7f:69:
         e0:33:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:56 2024 by rpki-client on console-fra.rpki-client.org