Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File:                     mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier:          Idgh9CWbvTCfgFC/fJWzMYXXxqLzGVhx+2QeaPTmTpo=
Subject key identifier:   DD:9C:3D:BB:50:3F:62:A0:78:FC:C8:9E:DC:02:FD:22:1A:02:6D:8C
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer:       /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial:       019367EB0EF7B90279FECF0581CD1D3C710A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number:          0A57
Signing time:             Tue 26 Nov 2024 10:01:18 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:18 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:18 +0000
Files and hashes:         1: Lt1W5fFoSCEBk9FXBi-wWDlviKw.roa (hash: SfnV0Z9TMiGlFeeuBPLi5Ux2KTKMczLkkz1LTU8HtLQ=)
                          2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: c96yNEGJ6xLsFBXl83hYBbVr0bNVMdSXpGjyGNxoVrs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:0e:f7:b9:02:79:fe:cf:05:81:cd:1d:3c:71:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
        Validity
            Not Before: Nov 26 10:01:18 2024 GMT
            Not After : Nov 27 10:01:18 2024 GMT
        Subject: CN=dd9c3dbb503f62a078fcc89edc02fd221a026d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:62:96:c6:be:1b:57:52:b3:d5:32:9e:6f:
                    9d:3d:d4:3f:35:38:3d:2d:86:1d:65:c0:72:49:d5:
                    47:59:f2:68:e0:2c:5a:69:8e:f4:40:7d:93:3b:94:
                    91:33:77:ae:ab:34:ca:63:c5:51:71:08:de:4a:40:
                    6c:9f:14:c4:d5:a8:7e:bf:24:2e:cf:d0:47:ca:57:
                    68:9d:99:40:34:48:57:8e:b7:6d:29:31:63:b6:bb:
                    67:a2:5a:d5:cd:61:cd:e6:d6:e8:18:51:9e:72:10:
                    37:ba:6f:f8:04:b1:3c:3d:9f:08:f9:a3:a8:6b:28:
                    40:6d:4d:3c:6d:59:61:53:6e:82:6e:cc:c8:9c:78:
                    8c:fc:1d:70:93:a6:32:5f:31:9e:ab:94:26:e2:73:
                    99:e8:4e:0a:39:3d:73:d1:40:93:02:47:20:1e:02:
                    5a:c6:28:96:9f:c2:29:c2:24:17:cb:be:06:e6:46:
                    e2:07:94:8b:a6:b4:7c:13:d3:e8:a8:e5:dc:d1:04:
                    7a:74:99:1e:d5:38:28:95:2f:64:04:84:17:c4:b8:
                    78:b9:27:82:63:aa:d1:b1:06:7f:50:8b:74:e0:99:
                    fe:05:14:bd:f0:09:3f:e7:69:45:b6:c9:89:b8:7d:
                    8d:27:be:06:09:44:ac:b6:22:9e:c2:15:03:68:bb:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:3D:BB:50:3F:62:A0:78:FC:C8:9E:DC:02:FD:22:1A:02:6D:8C
            X509v3 Authority Key Identifier:
                keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:71:5a:9c:9b:5f:e9:e1:f5:06:94:02:ea:a0:d0:6b:08:
         ff:0f:03:3c:d0:5e:ac:47:21:19:f1:5b:fe:c5:f5:42:bf:28:
         f7:01:a0:44:49:ed:e7:d7:40:53:3f:d1:99:a1:58:03:3e:0c:
         10:d2:e0:a4:52:e5:5f:ad:86:43:7c:67:8f:ef:e3:00:51:d1:
         f6:69:8e:6d:2b:bb:d9:f6:6f:d4:a0:e0:b1:71:1b:ae:e5:70:
         1d:49:56:74:8f:7a:99:17:72:4a:41:3e:0d:45:ac:de:7c:41:
         29:02:ac:a8:55:16:da:72:60:12:4c:98:41:b4:2a:5e:33:36:
         63:bb:71:9c:73:1e:bb:1a:1b:c6:17:82:d8:d7:62:7c:ee:7f:
         ea:78:b8:64:37:0f:26:21:3d:b7:79:8c:81:fc:6b:ad:f7:af:
         a8:0e:5b:26:11:22:13:df:d5:93:43:72:38:7b:ca:8a:09:66:
         30:ce:a4:a4:96:35:a4:c6:0e:36:f8:f8:0d:4e:6f:2e:c6:54:
         98:6f:2d:40:03:5e:72:64:f6:14:d2:04:ec:98:8a:44:e4:9e:
         4d:94:33:42:a7:d0:95:4a:40:d1:ea:d1:7b:6f:aa:a4:3a:6a:
         85:11:ea:64:46:af:d9:fd:5e:59:1b:34:7d:c3:90:5b:85:13:
         27:42:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:30:57 2024 by rpki-client on console-fra.rpki-client.org