Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          y3KSpxbANOcYn6wp2/6M4je1uR1ww/t2FrdUQ8072dU=
Subject key identifier:   7E:37:D7:8E:C8:CD:DA:5C:8E:4F:FF:CA:48:29:B9:91:1A:97:7D:AA
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       01935199AC8801E6E2B119993D3A992E4A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          13B1
Signing time:             Fri 22 Nov 2024 02:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:45 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: 8BhPZRuS7HfYx7NSipEHja6rhwMSuyONGWi5tzMz8dc=)
                          2: 9-tURZcOUut5hkUxxTU1kEoOOCM.roa (hash: 4cBkGZgIizxcQ+papKqJFUT3AM5KM5Oi+8iQjr45HJQ=)
                          3: EUOyEQRth8-Nq5zHPUFGmIks3fA.roa (hash: 6KvxVxVHmUGPbL8xu5v4egbxG2QHmTJhKt8WkiPOPKM=)
                          4: NqOE2XBO_soFPqz1tCdiMpZSg70.roa (hash: fl+GkLZbN/yniqfilp3plBTqHxfYrVVFlTgimDqpdK0=)
                          5: d4AvWiGgGqZzUKr99-3IJUR_uoA.roa (hash: TLbk7i7jWJg9DkW0JA3rMC/VkzIjqtCpb6bqc1ricow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:ac:88:01:e6:e2:b1:19:99:3d:3a:99:2e:4a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Nov 22 02:00:45 2024 GMT
            Not After : Nov 23 02:00:45 2024 GMT
        Subject: CN=7e37d78ec8cdda5c8e4fffca4829b9911a977daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:bf:5d:83:b7:02:c4:28:74:06:90:e0:22:
                    d8:62:bb:b8:a0:1f:f8:3a:5c:3b:86:e2:78:b1:ba:
                    27:5a:71:0f:8d:e1:db:35:c9:57:40:44:96:96:36:
                    97:b0:60:3e:8a:c0:9c:8b:66:15:69:b9:aa:f1:fc:
                    76:11:d5:1a:79:b2:d8:11:d0:24:64:88:33:7d:12:
                    ec:55:da:52:ec:35:8c:a7:5f:fd:d6:14:b1:72:6c:
                    db:fa:fb:b5:26:0f:37:49:27:38:85:0c:af:7a:bd:
                    65:12:a5:a7:f9:33:6f:4f:0e:0e:cf:10:84:0c:5d:
                    7c:47:6d:2b:a8:d5:e0:93:80:b8:2a:84:46:58:c8:
                    a1:89:42:e7:3f:0e:12:96:00:e1:e9:92:57:d2:d8:
                    5f:ae:0f:9e:51:78:66:dd:aa:68:b1:51:2c:6b:ee:
                    2a:e1:95:5f:14:d9:ed:fc:0d:2b:b8:7f:87:59:93:
                    f2:49:b2:25:e8:8c:4c:69:f5:2f:34:05:7d:10:50:
                    f0:e4:33:37:ca:02:ca:6b:75:1c:c9:90:fa:2c:27:
                    2a:05:96:47:44:2b:43:47:2c:8a:14:93:ef:8b:f0:
                    a8:03:b1:c1:d8:d6:c0:93:dc:07:8b:38:5f:ed:92:
                    b3:7e:7a:c7:38:cc:0b:a9:d4:46:bb:85:19:a5:45:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:37:D7:8E:C8:CD:DA:5C:8E:4F:FF:CA:48:29:B9:91:1A:97:7D:AA
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5c:86:04:4f:e3:b8:7c:a7:41:81:2f:2e:01:30:90:37:7b:
         ca:b6:b7:12:87:c7:0d:6a:94:b7:a0:af:c0:1a:1c:55:c8:53:
         cb:5c:3f:fa:e9:ae:7c:75:85:94:82:51:e6:ed:4c:0e:90:eb:
         85:25:8d:c5:be:f4:0b:36:49:66:b6:98:52:13:ae:57:0b:ce:
         db:54:c0:35:11:53:cb:98:08:3f:11:cb:14:8a:0a:31:cd:00:
         a3:0d:1f:04:48:98:84:1d:b7:d7:fb:9f:7c:b0:2b:2e:98:eb:
         2d:aa:be:08:c4:63:b4:57:52:a3:7a:c7:36:68:e5:a5:57:95:
         ca:85:93:b2:8e:f3:09:5e:74:83:f8:bd:a7:cf:33:57:16:05:
         f1:91:07:59:d8:84:09:db:65:b5:ea:98:70:bd:d6:25:80:dc:
         89:1d:78:d3:e3:69:d8:a7:cd:a6:7d:9a:c4:a6:1a:3c:3c:87:
         90:b5:d0:1c:4e:41:08:1b:cb:21:d7:b2:21:84:4a:1b:61:a8:
         e0:d4:b9:53:0c:dc:7c:74:5e:e2:ec:cb:49:b6:8e:37:5f:c3:
         60:19:12:35:68:69:85:43:3a:30:98:9d:32:05:4d:7e:6c:7f:
         83:7f:b0:7b:d9:5c:4a:c6:2e:fc:02:57:4a:e3:f7:05:27:bf:
         12:21:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:38 2024 by rpki-client on console-fra.rpki-client.org