Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File:                     AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier:          e5p3JCADldcROVNVZT4NqaZdFY3+I0VHjZ8UEqQzD8Q=
Subject key identifier:   E0:25:E3:53:F4:27:AD:03:50:E3:AF:40:FA:2D:3C:47:02:EA:95:FC
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer:       /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial:       0193553FB87316360B65208C31E1577C3695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number:          0127
Signing time:             Fri 22 Nov 2024 19:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:59 +0000
Files and hashes:         1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: RELpDtPW3FoPLd+nR4968RyHlYRZn8TZHypAdAH3MGA=)
                          2: zm_tiZYeCn8ehXZd9tw9sXB83Nc.roa (hash: IgEO32gkQi6wmidjYSi5hjtOgdx82UyihVs3l5iAiso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:b8:73:16:36:0b:65:20:8c:31:e1:57:7c:36:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
        Validity
            Not Before: Nov 22 19:00:59 2024 GMT
            Not After : Nov 23 19:00:59 2024 GMT
        Subject: CN=e025e353f427ad0350e3af40fa2d3c4702ea95fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:71:ce:41:49:b6:cf:2e:a0:38:5c:b5:6a:
                    a0:46:aa:b1:1a:e2:1e:6e:be:19:b4:a2:44:76:9c:
                    dc:a4:61:2a:1b:44:93:48:6d:62:7d:88:44:07:98:
                    9d:84:94:a5:bf:fb:d2:6c:94:cf:61:22:28:81:ad:
                    57:26:b5:14:de:be:ab:5e:3d:65:70:c6:d5:32:23:
                    9a:6d:07:44:70:b2:f0:02:8d:a3:21:a8:2f:71:b3:
                    6d:48:09:13:cb:d7:20:ba:13:6a:ab:7b:26:bc:03:
                    62:1e:52:1f:bc:c4:bb:17:d0:17:3b:e3:11:f4:ef:
                    15:9b:92:3c:8c:a5:4e:3a:90:d6:88:be:c2:c6:69:
                    64:81:1c:d9:27:4e:90:99:eb:45:34:08:ae:35:e7:
                    43:2e:df:a0:27:21:77:d4:00:d1:6d:80:fa:3f:57:
                    2e:76:d2:21:1e:f1:73:03:2b:6e:85:17:d5:2d:4b:
                    e6:de:5b:1a:37:52:c4:ed:ea:0a:78:6d:c9:50:55:
                    83:48:41:55:f6:a6:fb:b7:b1:4d:e2:b2:89:8d:1c:
                    62:b3:99:ed:77:b6:d2:de:9c:da:e9:f4:9c:57:46:
                    aa:20:ed:fc:8c:dd:d7:7d:de:98:17:4b:da:19:b0:
                    51:98:c6:e9:34:ba:df:b4:e6:3a:1f:d8:20:02:b8:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:25:E3:53:F4:27:AD:03:50:E3:AF:40:FA:2D:3C:47:02:EA:95:FC
            X509v3 Authority Key Identifier:
                keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:97:7a:b5:49:73:4e:c2:24:44:c4:32:92:86:db:5b:c4:c5:
         01:24:95:2f:66:a4:fa:78:cd:66:8b:b4:73:46:08:86:a1:2e:
         41:a4:ab:33:5d:b3:b6:6f:74:61:97:ff:19:59:ec:cc:3b:af:
         fc:01:7d:86:0e:a2:bf:df:eb:29:8d:eb:d0:98:42:13:e3:53:
         4c:a2:80:3b:e5:c9:c6:22:5b:72:ce:80:95:1a:d7:ef:8a:42:
         93:44:01:1e:c2:c2:cc:50:0d:e7:04:3b:2e:47:d9:6f:79:79:
         a0:b9:8a:cd:0d:ef:02:e1:b4:48:cb:cb:bb:90:10:52:4d:0a:
         76:5f:fb:3f:6c:ab:61:61:a3:12:eb:3a:1a:d9:04:6f:e1:a4:
         19:32:f4:3f:95:1d:66:65:36:f2:48:30:cb:c4:65:04:19:9e:
         a8:64:bf:fe:64:af:2a:9d:d0:34:7a:35:9f:cf:4c:b1:58:d8:
         1c:6d:5c:f7:1f:f1:74:a5:41:ef:21:15:0c:f1:8a:f2:c1:a1:
         e0:7f:3f:c5:74:45:e3:db:73:7f:b2:97:a4:8c:32:93:fb:a2:
         31:92:a6:e0:0c:15:10:bd:f4:0c:a6:d8:11:14:84:02:a4:64:
         0e:f8:dc:e1:39:e1:a2:ae:cc:c5:36:ac:5f:35:31:65:c5:1c:
         44:5c:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:53 2024 by rpki-client on console-ams.rpki-client.org