Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
File:                     5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json)
Hash identifier:          AfHhcuCPT12MLneg7By+6yCeV4Onm24x3GggZNWHh7c=
Subject key identifier:   4F:8F:C2:EB:AB:85:2A:2B:98:AE:2A:BA:4A:77:C7:6D:AA:CB:4B:8F
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Certificate issuer:       /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial:       0193572DC9F5DDE23C1080605192CD5C8C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
Manifest number:          0E7D
Signing time:             Sat 23 Nov 2024 04:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:38 +0000
Files and hashes:         1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: qtHzRgN5nsA/bjMGmAw2faUyzhGwKWtns2XZzu8pRBo=)
                          2: G1J3YczbWTgG_weBNpjN5SlY3Ko.roa (hash: FpPJQ/OMO3PXOUIPLDD57MnAwBtFgSayzdq1Rklx9a0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c9:f5:dd:e2:3c:10:80:60:51:92:cd:5c:8c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
        Validity
            Not Before: Nov 23 04:00:38 2024 GMT
            Not After : Nov 24 04:00:38 2024 GMT
        Subject: CN=4f8fc2ebab852a2b98ae2aba4a77c76daacb4b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:19:e7:eb:59:c3:88:18:12:06:9e:a0:e6:
                    20:7a:de:29:0a:56:1a:89:95:88:b3:af:35:92:cb:
                    ef:7a:19:ae:cd:51:11:e8:4d:15:32:17:14:ef:b1:
                    be:92:11:b7:91:98:cd:88:e7:49:9c:00:a7:a4:d9:
                    49:53:3f:ca:bb:1c:a6:0d:e4:8b:d3:4b:21:db:d4:
                    c3:05:06:63:35:63:e6:27:24:59:ed:b6:1f:12:52:
                    ee:60:6d:3c:0d:15:41:68:e5:11:b5:dd:97:db:6c:
                    f5:be:1f:12:0a:fd:8f:3b:43:9e:85:5a:b8:e5:d5:
                    20:c7:9b:11:65:c5:91:fe:76:33:60:8d:d7:db:e2:
                    cc:ac:d4:ad:3c:98:d3:f5:f5:c4:2e:04:a9:b2:14:
                    14:1c:cc:fe:08:45:b5:1f:4f:58:73:0c:f2:ff:3c:
                    49:74:6e:09:04:1f:3a:c7:e6:56:45:5a:cc:65:91:
                    f6:6e:8b:89:99:1b:3f:01:79:d5:78:b9:be:b4:31:
                    ac:61:6b:e1:d5:1c:c3:c7:c0:92:80:d8:f9:17:0f:
                    08:06:dd:c9:3f:de:71:0a:da:7f:08:2f:c7:31:cc:
                    6b:a7:d1:69:39:91:7c:48:78:37:55:3f:5b:bd:e5:
                    dc:e1:6e:ff:ff:ab:ad:6f:07:05:cb:cc:3a:b7:b5:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8F:C2:EB:AB:85:2A:2B:98:AE:2A:BA:4A:77:C7:6D:AA:CB:4B:8F
            X509v3 Authority Key Identifier:
                keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:52:88:f7:f8:46:90:56:b7:05:80:9d:30:3f:b0:93:82:fc:
         e2:1c:97:be:13:53:f2:86:6e:c1:24:9c:d6:8b:27:1f:66:96:
         ff:24:80:03:fb:f4:bc:63:e0:05:3e:86:98:1f:6b:13:c0:1a:
         b2:89:c6:bd:8b:e4:70:64:6e:54:77:a3:3c:c8:e2:ae:d3:de:
         1a:13:1f:c5:cd:78:9c:44:dd:92:a5:e5:cc:a7:94:e4:22:74:
         c7:24:e5:fe:d9:de:ef:8f:ef:64:69:f4:50:59:c9:a7:70:9c:
         20:0c:1f:1b:80:72:a8:a7:42:18:3a:c8:1d:27:4e:06:35:87:
         39:68:21:93:38:bd:b2:53:95:85:69:19:68:34:8b:19:bf:c9:
         b0:a6:81:8b:1d:06:23:c9:a1:6c:94:90:3f:f8:17:8d:a9:95:
         7e:75:ae:19:8d:c0:d1:a1:14:ae:e0:4d:74:24:f9:5d:05:12:
         0d:0b:f2:17:11:cc:60:67:e3:d0:8b:b9:21:8a:3b:73:78:56:
         52:04:fd:fa:15:fc:87:a3:4e:66:9a:7b:dc:16:52:29:72:4e:
         76:09:e2:dd:f1:f0:ca:5d:7f:0d:e1:52:d4:7a:25:1b:7c:82:
         db:f9:9c:98:9c:90:2b:94:1b:ac:ca:e7:fa:62:c6:47:9c:2f:
         19:00:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:50 2024 by rpki-client on console-fra.rpki-client.org