Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File:                     ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier:          og33GnN1nhuaUuGNoQZEN9JrLyrco1++Azko1IVhjKQ=
Subject key identifier:   57:D4:EB:38:98:FC:ED:B5:12:9A:5A:94:82:FE:4B:21:0C:16:38:1E
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer:       /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial:       01936A7D7474F7006CDC80115F47CE0377C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number:          03E1
Signing time:             Tue 26 Nov 2024 22:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:26 +0000
Files and hashes:         1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: L7RxXcwLMkj9JWpS+2zViRxubzO2nGdJQSNh3rwoGto=)
                          2: jq3H6Nj50eI7BCR5M9Bqt_9JJrA.roa (hash: M/GNJhSr3qWVEXUz2kiZh3WkiuNzb8m00wr8zIGpJkY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:74:74:f7:00:6c:dc:80:11:5f:47:ce:03:77:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
        Validity
            Not Before: Nov 26 22:00:26 2024 GMT
            Not After : Nov 27 22:00:26 2024 GMT
        Subject: CN=57d4eb3898fcedb5129a5a9482fe4b210c16381e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:53:e0:fb:e2:f0:6e:d2:56:a3:8c:11:b1:de:
                    08:1b:03:71:92:54:3b:eb:40:17:32:c7:51:ca:8d:
                    88:cf:b9:59:47:ea:27:c9:dd:9a:87:e0:f7:b7:9c:
                    d1:cb:ea:a0:bb:7c:62:5f:93:5d:e0:c8:f1:c8:27:
                    1d:aa:d5:b9:51:e3:2b:fe:13:b0:df:04:9a:35:55:
                    f5:16:cd:d3:54:f5:60:f2:da:b1:46:7c:70:ee:b7:
                    80:82:2e:58:c4:f8:2c:74:13:09:56:77:ff:f6:f2:
                    5a:60:26:6c:c0:92:23:a7:2e:1a:08:09:29:5b:22:
                    c0:c6:d0:80:65:47:10:a9:9a:02:00:2d:dc:7e:45:
                    d6:20:ca:71:04:2d:86:b2:1e:46:c9:bf:42:40:8c:
                    7d:44:c3:37:ec:84:46:2e:27:bd:10:37:7d:de:98:
                    ba:93:be:b4:1f:04:6c:7b:1c:0e:11:e5:cd:54:7e:
                    89:ae:db:b4:8b:44:c6:9f:f0:e0:5e:84:51:8d:82:
                    5b:bb:f1:83:c3:5e:5c:9c:ff:b9:69:e6:bc:95:5e:
                    e4:29:91:48:0c:f9:e4:b0:94:d6:cd:02:6c:f2:02:
                    dc:81:3e:a5:da:fb:54:76:f3:c7:2b:ab:41:04:62:
                    42:9f:38:43:f9:35:00:f4:bc:92:13:c4:b5:b2:2e:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:EB:38:98:FC:ED:B5:12:9A:5A:94:82:FE:4B:21:0C:16:38:1E
            X509v3 Authority Key Identifier:
                keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:b5:22:d7:56:92:fd:34:ef:c3:01:92:68:6f:02:56:31:
         a9:8f:30:62:ba:0e:32:85:89:bf:32:6e:27:ea:56:23:38:71:
         77:f9:b5:e5:2d:d2:33:7f:ee:f0:ee:4f:02:99:39:5c:7d:2a:
         9d:5c:9b:39:3e:b6:b2:f5:a5:4d:1a:0b:b4:69:07:01:2d:19:
         93:ee:05:a9:cd:ca:08:4b:24:01:65:26:98:17:45:ae:fd:85:
         d7:5a:bb:64:51:d6:3a:96:f9:47:03:24:ee:44:a4:7d:40:4f:
         ff:72:ac:64:d7:39:61:aa:a8:cc:72:2b:68:97:07:e8:79:71:
         e0:21:f5:c9:ef:bf:08:92:cf:e0:c1:bb:db:fe:41:33:8e:88:
         60:3a:2d:28:e2:fc:9e:67:b8:1b:de:8a:c6:3b:79:c7:cc:0f:
         fe:8d:de:95:f0:01:8d:46:2f:be:1b:3e:09:8b:fb:da:fc:3f:
         f1:8c:18:00:75:7e:45:5e:f4:51:90:c2:8b:46:a3:29:f3:13:
         84:6e:b2:3e:5b:fd:2a:eb:06:b6:5e:83:58:bb:2c:34:4a:d9:
         e8:21:3c:c2:05:d5:a0:a0:b4:37:a9:2d:02:5f:ce:b7:0b:69:
         7c:63:ae:65:b1:9d:f6:30:16:16:fb:51:80:cb:da:75:60:1f:
         f2:29:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:26 2024 by rpki-client on console-ams.rpki-client.org