Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File:                     5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier:          D84EPz4vNEjm1qVIRJXxrvxk0TvZ/29cQpzjxXH/MSA=
Subject key identifier:   D6:02:04:C8:DE:3B:D1:F4:58:73:F3:B8:43:3D:1C:B5:E3:54:4C:6F
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer:       /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial:       0193688F56D7BA1C549F133C5863CC1CC927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number:          10A2
Signing time:             Tue 26 Nov 2024 13:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:44 +0000
Files and hashes:         1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: 1LWGeMwSeqD7aIigfgkheTLhj+2MyanOJ6dzElm/l1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:56:d7:ba:1c:54:9f:13:3c:58:63:cc:1c:c9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
        Validity
            Not Before: Nov 26 13:00:44 2024 GMT
            Not After : Nov 27 13:00:44 2024 GMT
        Subject: CN=d60204c8de3bd1f45873f3b8433d1cb5e3544c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:bf:3c:c5:e4:6f:b1:e1:6d:f9:11:a4:b4:
                    3a:66:57:5e:bc:5c:dd:9e:ab:82:e9:f3:c8:ac:5d:
                    b5:af:ef:37:95:4d:e0:a1:2f:39:5c:a6:3b:1b:8d:
                    6b:95:b3:2d:85:12:bb:e7:e5:57:f4:8f:27:36:91:
                    d2:11:9c:ce:25:49:e6:0b:b2:64:ba:2b:57:23:9c:
                    11:47:a9:a7:e0:e3:2b:3b:f7:c6:4d:dc:cc:b3:c7:
                    aa:d0:8e:e4:b5:79:37:25:0a:fa:ab:98:fe:87:48:
                    f0:e3:e8:2a:d2:18:69:50:7b:f4:f8:0d:90:b8:a5:
                    f5:05:b9:48:8e:c9:d0:36:48:4e:b2:1b:4e:44:73:
                    3a:05:99:d1:b9:7a:6b:03:b0:e4:9f:51:84:51:a0:
                    5e:7a:77:8c:e7:c1:89:3f:af:db:46:86:22:b8:01:
                    80:5b:51:47:c5:b8:95:79:3a:3b:3e:47:d1:10:ec:
                    62:4f:b6:ac:c6:0e:35:04:9a:4a:9b:fb:03:4a:4d:
                    56:f7:c1:6c:99:10:23:e8:06:82:64:c7:3a:42:32:
                    d5:fa:22:64:59:18:4a:3a:43:85:44:09:aa:e3:f3:
                    cd:d9:ec:de:af:23:7a:e4:fc:7f:10:ec:88:33:e8:
                    e8:ac:ca:a0:fa:79:47:77:61:51:8f:c3:94:1e:cc:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:02:04:C8:DE:3B:D1:F4:58:73:F3:B8:43:3D:1C:B5:E3:54:4C:6F
            X509v3 Authority Key Identifier:
                keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:3e:5a:3e:a7:2d:24:f7:69:0b:7a:8a:cc:fc:65:a6:96:
         f6:c2:6b:3d:53:25:cc:58:f6:8b:2c:94:53:31:40:91:7e:30:
         12:35:fa:fe:49:96:97:9f:37:b3:d5:c9:45:fe:36:aa:ef:9e:
         ae:d3:0c:03:ca:cf:5e:a1:16:0b:bd:95:8c:8e:e3:f1:7a:5c:
         37:15:ab:10:74:bb:f3:a3:0b:5d:54:97:5c:f6:84:ae:7d:3e:
         ac:7c:d8:74:f6:d0:df:78:42:54:b8:71:dc:1c:f9:bc:1d:46:
         2c:2e:4e:40:29:91:89:c3:2f:a4:a5:b3:f6:8d:53:2b:8b:15:
         e1:46:e3:2e:78:17:e7:06:2e:2d:9d:cd:77:03:19:52:ca:02:
         9b:03:af:00:e9:ed:40:71:6c:9f:e3:7c:7a:2e:57:b8:48:1c:
         83:86:dc:b9:b1:86:fc:0f:e3:55:3a:e0:ce:86:d1:4c:a7:fb:
         4f:40:4f:37:ec:0e:ab:7e:c0:87:aa:e5:43:64:69:e8:7b:ed:
         38:1b:0d:54:b1:18:9e:96:d2:ff:93:5b:2a:df:2b:e4:bf:0b:
         dc:c9:dd:54:b4:4a:3c:6f:a1:f6:cc:49:86:ae:03:70:72:b0:
         85:57:fc:05:ec:86:af:85:a4:f3:31:01:2b:92:d7:e0:6f:48:
         a0:82:85:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoj1bXuhxUnxM8WGPMHMknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWQ0NGQ4ODEyNzVmY2EyYzBiNmIzZjdlY2VlMmQyMjIx
NDZmZDIwHhcNMjQxMTI2MTMwMDQ0WhcNMjQxMTI3MTMwMDQ0WjAzMTEwLwYDVQQD
EyhkNjAyMDRjOGRlM2JkMWY0NTg3M2YzYjg0MzNkMWNiNWUzNTQ0YzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoka/PMXkb7HhbfkRpLQ6ZldevFzd
nquC6fPIrF21r+83lU3goS85XKY7G41rlbMthRK75+VX9I8nNpHSEZzOJUnmC7Jk
uitXI5wRR6mn4OMrO/fGTdzMs8eq0I7ktXk3JQr6q5j+h0jw4+gq0hhpUHv0+A2Q
uKX1BblIjsnQNkhOshtORHM6BZnRuXprA7Dkn1GEUaBeeneM58GJP6/bRoYiuAGA
W1FHxbiVeTo7PkfREOxiT7asxg41BJpKm/sDSk1W98FsmRAj6AaCZMc6QjLV+iJk
WRhKOkOFRAmq4/PN2ezeryN65Px/EOyIM+jorMqg+nlHd2FRj8OUHsyzOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYCBMjeO9H0WHPzuEM9HLXjVExvMB8GA1UdIwQY
MBaAFOSdRNiBJ1/KLAtrP37O4tIiFG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzkt
YzMyZDEwYzdlYTFmLzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzktYzMyZDEwYzdlYTFm
LzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU4+Wj6n
LST3aQt6isz8ZaaW9sJrPVMlzFj2iyyUUzFAkX4wEjX6/kmWl583s9XJRf42qu+e
rtMMA8rPXqEWC72VjI7j8XpcNxWrEHS786MLXVSXXPaErn0+rHzYdPbQ33hCVLhx
3Bz5vB1GLC5OQCmRicMvpKWz9o1TK4sV4UbjLngX5wYuLZ3NdwMZUsoCmwOvAOnt
QHFsn+N8ei5XuEgcg4bcubGG/A/jVTrgzobRTKf7T0BPN+wOq37Ah6rlQ2Rp6Hvt
OBsNVLEYnpbS/5NbKt8r5L8L3MndVLRKPG+h9sxJhq4DcHKwhVf8BeyGr4Wk8zEB
K5LX4G9IoIKFAg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:28 2024 by rpki-client on console-ams.rpki-client.org