Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File:                     T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier:          8uLkAemeIwWkeMqcS5BRS2pCevpYsj5KmFpG6+O6vSw=
Subject key identifier:   5F:BC:49:3E:52:10:AA:81:93:AE:F5:A5:06:EB:8E:AB:09:41:FB:BB
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer:       /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial:       01935EE7805D4BB3EEEF3D68327C344EFF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number:          1377
Signing time:             Sun 24 Nov 2024 16:00:50 +0000
Manifest this update:     Sun 24 Nov 2024 16:00:50 +0000
Manifest next update:     Mon 25 Nov 2024 16:00:50 +0000
Files and hashes:         1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: fTZTCsoEj9HlagUJptjtso2PtjiY+sYy7wIFCHdhfng=)
                          2: t0ZSAUzte3ei_jgg3BFQV0LM4qo.roa (hash: tDexmUoJnT8MeuFeCHAS6D1phX10WtHuxkzof35xGdI=)
                          3: yys8PG7onlS-mFFasHCmDm_ZHBI.roa (hash: JA2/3Do1vr9j+FM/VzZ3rfG52lMrR5XZDLRplN/WvuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5e:e7:80:5d:4b:b3:ee:ef:3d:68:32:7c:34:4e:ff:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
        Validity
            Not Before: Nov 24 16:00:50 2024 GMT
            Not After : Nov 25 16:00:50 2024 GMT
        Subject: CN=5fbc493e5210aa8193aef5a506eb8eab0941fbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:6c:b8:35:c6:80:0d:16:0e:6a:78:72:3d:
                    98:57:98:90:e9:db:ab:12:5c:6f:af:14:45:a9:d8:
                    c5:e4:3c:85:38:b6:d2:d6:0c:20:04:fd:25:41:27:
                    dc:82:e9:53:33:c2:02:39:a6:b9:37:3f:d2:13:6d:
                    d5:19:e8:d6:ea:7f:ab:ed:1e:43:1f:b2:3a:a7:4c:
                    bd:4d:42:c6:99:12:a1:3d:e7:e3:43:5d:37:71:31:
                    d1:d3:04:79:f7:43:fc:dc:89:5f:34:96:70:4e:2b:
                    51:cc:1b:e2:20:28:d3:43:84:49:32:32:67:e2:9a:
                    c4:86:54:47:b6:46:d8:4b:6e:7c:0e:f4:f4:71:3b:
                    df:db:43:7a:82:5d:ea:02:4a:c4:78:08:05:9d:c2:
                    fb:b2:c4:cf:4c:bd:ab:25:75:73:82:2f:c6:eb:f2:
                    9d:de:17:9e:c0:83:50:e5:ff:0d:01:5d:79:da:bb:
                    b0:f2:7e:5b:28:4b:d4:b9:b9:9d:7e:9e:87:c2:85:
                    c7:f1:88:80:d3:2f:ff:4e:ce:6d:b2:da:9f:eb:d2:
                    ca:2e:06:75:dd:5f:da:21:e7:33:da:86:cc:01:3e:
                    32:54:32:69:d5:0b:53:94:19:82:d2:95:25:8c:1e:
                    1d:28:db:af:f1:15:f7:dc:9f:22:d0:9e:48:4d:8d:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BC:49:3E:52:10:AA:81:93:AE:F5:A5:06:EB:8E:AB:09:41:FB:BB
            X509v3 Authority Key Identifier:
                keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d2:46:3f:9d:6d:11:4a:c2:0a:66:dd:50:2a:9e:4f:79:be:
         ea:33:9a:15:25:88:9a:ea:b5:55:0a:99:fb:ef:00:7f:e8:27:
         14:b2:de:00:60:61:77:9a:9d:d7:78:00:17:73:12:49:ed:11:
         05:e8:15:14:9a:9c:7d:95:cc:a4:61:f8:a2:ac:1a:4b:e0:fb:
         c5:14:d0:a5:fb:07:6c:72:5b:02:f9:5d:cc:5a:52:10:7c:3d:
         78:72:1a:24:9c:66:67:71:60:33:3f:28:ec:1c:c0:11:95:4f:
         57:40:38:53:c3:d3:5c:4a:79:34:4b:92:7c:63:46:50:ff:d7:
         2f:55:02:b7:3e:98:a5:d4:01:d7:c2:e7:df:ac:5e:e2:8b:72:
         6b:d8:83:a7:64:15:2c:a1:b4:92:4f:53:fc:15:a2:99:ee:52:
         4c:e1:2d:ae:c1:ff:27:e8:4c:34:c0:90:7f:d0:0c:65:fc:13:
         99:ba:a1:2f:f4:d7:0f:64:51:38:e5:ad:08:78:5c:6a:c0:5e:
         d7:58:20:11:c7:f8:24:64:0c:60:da:89:16:4f:45:a7:ef:28:
         b0:f1:e0:d0:18:e3:3f:a4:ce:37:55:d7:6e:a5:0b:4a:16:e4:
         6a:8a:41:67:5f:3a:67:b3:39:01:1f:f3:9d:f0:bb:46:aa:b6:
         d4:d1:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:20:16 2024 by rpki-client on console-fra.rpki-client.org