Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File:                     sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier:          q4LkvKTEozqNUVcptlO2wt6GzHLvtz7rBMiBfk8Dzu4=
Subject key identifier:   B7:45:4C:D1:B6:0D:EA:32:F5:7E:E0:89:7A:72:65:AD:41:9A:5F:89
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer:       /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial:       0193568ADB9EC3D24316EF653B9D1672654F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number:          0434
Signing time:             Sat 23 Nov 2024 01:02:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:40 +0000
Files and hashes:         1: 47EyQr_Y-svXs5ZqoTVeCmBPEe0.roa (hash: eCHZtHyzNo9K9uS6XEPhlk0X3ae4+E1hrfbjoCtJCcQ=)
                          2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: y6k5pjRY9enaRyRbprcBlfCWaRl+vvlaDKwNw29WqYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:db:9e:c3:d2:43:16:ef:65:3b:9d:16:72:65:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
        Validity
            Not Before: Nov 23 01:02:40 2024 GMT
            Not After : Nov 24 01:02:40 2024 GMT
        Subject: CN=b7454cd1b60dea32f57ee0897a7265ad419a5f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:cf:52:d3:b2:b0:bc:3d:a4:3d:07:89:6e:
                    6e:a7:05:2f:4d:21:91:fb:64:47:53:9d:06:05:56:
                    c5:4a:b9:14:83:12:4f:3d:ea:3c:e6:b3:e2:f2:29:
                    a2:81:dd:a6:7a:f1:d7:9a:d3:9b:8f:a7:c1:6a:f1:
                    a4:f4:12:82:26:cb:90:6d:37:57:d2:95:5e:4c:df:
                    58:b3:ca:a0:21:f0:9b:f1:00:21:b9:d7:ef:7e:94:
                    5d:ae:5f:71:e9:f1:41:6c:c7:09:78:20:33:ca:8f:
                    19:e2:dd:a4:40:a1:91:28:03:e5:59:be:f5:2c:1f:
                    4b:09:ed:4d:47:5a:21:2b:43:6d:ab:30:63:8c:b9:
                    cf:aa:d9:7a:12:c7:a8:36:61:0b:ba:22:9d:25:44:
                    d2:6b:f9:af:57:08:c1:98:3a:f1:16:e9:72:c7:20:
                    5b:43:09:4a:1e:54:1c:8f:9f:03:a6:48:54:77:5d:
                    d9:0c:0b:77:8d:d4:e1:20:3e:6f:86:8b:11:fc:3d:
                    66:1e:90:8b:99:f7:ad:2f:c5:42:49:3d:a1:c9:7b:
                    f5:07:ca:62:0a:63:51:a6:d0:bd:e0:de:aa:12:37:
                    e4:a7:6a:b0:64:0e:5f:1f:26:40:55:0a:12:5f:75:
                    d7:11:15:92:4c:d8:b5:53:3f:b5:8f:07:55:04:c0:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:45:4C:D1:B6:0D:EA:32:F5:7E:E0:89:7A:72:65:AD:41:9A:5F:89
            X509v3 Authority Key Identifier:
                keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:dd:4c:3e:7d:18:4b:36:40:e1:ed:87:83:59:e8:b5:e6:
         49:50:f3:37:d2:4e:b8:31:a5:be:e4:90:35:6f:95:d0:b4:1d:
         58:3f:95:5a:3b:98:1c:a3:e3:fe:d4:c9:b6:ee:32:b1:10:2c:
         e0:4a:d8:9a:9d:5f:8b:24:ee:26:fb:7f:40:55:38:f4:08:29:
         70:54:73:28:52:75:af:97:62:78:49:f2:3c:ad:ac:05:ef:c5:
         48:0a:99:11:cb:51:d4:2a:83:1d:98:9f:f7:5d:0e:1f:20:e7:
         5d:67:5e:25:95:4b:0f:43:e6:b0:84:a3:65:25:fc:94:1b:49:
         55:07:17:5b:2d:ae:b3:cf:8c:49:e4:be:cb:4b:25:a2:50:ce:
         da:27:33:33:54:8b:ce:2c:df:98:0b:01:c2:dd:f5:a5:00:f0:
         22:e1:dc:55:b6:22:82:73:f1:26:c1:b2:34:06:c7:0c:1f:b5:
         94:48:e9:e7:0c:fb:ff:5c:4e:ab:b4:bf:03:9f:0c:68:9e:a5:
         92:24:aa:87:98:a8:4f:93:12:d5:61:cd:3e:5a:d0:11:72:ea:
         4e:77:ad:37:a4:c1:88:8f:7a:be:5d:0f:ca:14:62:c5:90:81:
         39:75:3d:5b:8c:ae:63:a9:86:78:31:55:57:02:50:de:72:89:
         a6:92:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:54 2024 by rpki-client on console-fra.rpki-client.org