Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          7WHxtT/IbHA/jaW5ZVPopqElahQQnGJlCnJVyrv31rU=
Subject key identifier:   FC:82:62:6F:A3:25:7D:01:3E:BE:E8:47:35:2F:64:14:96:BC:02:3B
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       019355082009792DE98726C4030EDBD1F370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          0FBA
Signing time:             Fri 22 Nov 2024 18:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:15 +0000
Files and hashes:         1: E0Q84Ar7pNKX2itgmMU8xB2-i0k.roa (hash: EGdHt75SP9cjI/vwvzVm1/hKTA8LZnu4uGjLAzEK6JE=)
                          2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: d48tY0/tG/M6CZJDJy4BSI5Lbx87Ve5Jj9pKlWfgvDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:20:09:79:2d:e9:87:26:c4:03:0e:db:d1:f3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Nov 22 18:00:15 2024 GMT
            Not After : Nov 23 18:00:15 2024 GMT
        Subject: CN=fc82626fa3257d013ebee847352f641496bc023b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:f9:82:c3:ed:27:86:43:6f:17:ed:56:dc:
                    08:f8:7b:74:9e:48:54:25:aa:28:f1:df:86:16:00:
                    94:70:c0:f1:81:56:bc:d2:b8:91:fa:fa:9d:65:84:
                    24:ca:86:78:ed:2c:3d:c2:52:e3:19:18:12:37:27:
                    3d:ae:21:f3:9e:d9:14:ac:ad:34:e1:d8:cd:5e:6a:
                    a2:36:d0:b7:49:37:0b:1d:cf:ba:7b:ce:01:ba:ab:
                    68:f0:b2:02:67:71:97:71:cc:40:7b:ec:a3:70:f1:
                    9a:4d:20:cc:48:61:6c:ad:d3:04:b7:d9:18:d7:ce:
                    41:fc:44:68:64:5a:50:a1:3d:df:fa:fe:5e:6a:ee:
                    38:3f:f7:c8:3c:e4:77:14:a2:b5:6c:38:eb:59:b6:
                    2a:16:67:02:5b:40:e2:88:55:a2:d3:29:65:f9:86:
                    a3:39:f1:08:30:ab:5c:14:c9:fa:58:86:a6:9c:b3:
                    c0:a9:66:6c:55:28:66:da:9f:53:fd:a7:15:1d:e3:
                    ea:41:99:6f:a1:57:3e:57:0c:11:82:2e:0d:fb:24:
                    15:2f:a4:62:89:60:1d:a6:25:82:3e:b9:73:89:43:
                    af:21:3b:84:80:50:5a:a6:17:c6:e5:e7:f3:dc:c8:
                    d5:fa:a7:f3:f1:df:f2:7f:aa:a6:66:ad:ba:af:3c:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:82:62:6F:A3:25:7D:01:3E:BE:E8:47:35:2F:64:14:96:BC:02:3B
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:63:5b:42:47:80:12:d9:c0:52:ef:89:62:60:bc:2b:25:ad:
         c8:91:7c:97:71:56:66:e5:1d:c2:bf:32:5a:ec:e9:07:bf:3f:
         44:2d:25:b4:e1:d8:80:52:da:0c:ec:a0:d1:31:6b:0c:7d:44:
         9d:24:e1:99:60:95:d1:51:d2:bc:c2:e4:2c:c2:01:1a:0e:ae:
         f0:68:63:50:a1:44:cc:48:9e:c2:1d:f3:a9:b8:5a:ae:f3:d3:
         0b:b9:7c:04:e0:7e:1d:40:78:16:3a:60:88:43:a1:3c:ca:e6:
         42:e9:3b:7f:09:78:6b:a2:73:6c:2b:56:73:77:cb:05:3c:e1:
         c4:db:7d:58:10:04:5a:32:7c:e3:e2:9f:11:cd:94:82:8b:f4:
         67:df:36:5f:93:d2:ea:01:d8:e1:f0:79:d4:ba:4c:1b:93:c5:
         be:e2:40:80:24:1f:cb:73:1c:95:b1:53:82:4d:53:72:3d:79:
         dc:45:9f:e0:bd:1b:1e:6f:f0:cf:d2:6f:2d:3f:9a:e9:c1:ef:
         13:05:86:69:7f:2a:b0:71:36:a7:a1:2e:3e:65:2d:2f:ee:6a:
         d7:44:30:f2:f2:8a:ee:4f:65:0d:cf:a9:6f:41:a5:81:20:b8:
         91:7a:df:16:6a:22:a0:bc:2e:4d:21:30:87:a5:c7:58:81:7d:
         2d:27:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:25 2024 by rpki-client on console-fra.rpki-client.org