Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          Tmo2gRs0qRbjaILgbGPx2GCFBIRCsg5qe/dmduArPg8=
Subject key identifier:   AC:27:D4:13:63:24:FD:41:B9:5F:72:7D:21:20:30:9B:91:71:BE:A4
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       0193516294FC64BB0D88EBA9E98D61082A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          0DBB
Signing time:             Fri 22 Nov 2024 01:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:35 +0000
Files and hashes:         1: 5avQS7V5KoFK9wPCZWf1mKbef0o.roa (hash: CWVr1CMjh4VQHe4otjBIpGvVv9NFPYi8ufRKDrz+0Fs=)
                          2: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: Q0g2JIVqh4K/7heEM+RJLPFoD1Etqu4OCa/oIrc7P7M=)
                          3: ceiv-yK55ZBJpENanL2We7fh9_M.roa (hash: nVK/YlSOgIbuKJOXQFhzscgKoFi9ctEllt27LahjPn4=)
                          4: oo5ltmmV0uIm2wKAh-MFKzDWTu4.roa (hash: tGCrhFAx/wL1WaSFFfjkD5ckM1COwn4coGsbqac1n9o=)
                          5: wNk9_cabnJrFiVfxAdp3CA07Vfc.roa (hash: QtQ843WGPzheI4idwDRpo8mguDKwMaPlhOA7uHzrmNk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:94:fc:64:bb:0d:88:eb:a9:e9:8d:61:08:2a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Nov 22 01:00:35 2024 GMT
            Not After : Nov 23 01:00:35 2024 GMT
        Subject: CN=ac27d4136324fd41b95f727d2120309b9171bea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:ed:e0:34:be:af:22:23:80:ff:71:f0:f6:
                    96:7c:65:c7:3d:cd:e7:f9:f0:d5:ac:d8:d5:06:87:
                    a4:03:ab:01:85:6b:53:9e:88:a1:90:1b:e1:3a:69:
                    3e:81:6c:9a:e6:4e:f2:c2:ba:1b:cd:23:bd:75:2d:
                    3c:ef:0f:41:f0:05:96:4e:e1:2d:5e:4d:d0:a6:00:
                    ab:2e:80:b6:e4:fd:66:71:1d:cc:82:ea:84:8c:aa:
                    93:de:63:cc:a8:7e:59:c1:9e:e2:d2:29:bb:67:f2:
                    d2:39:de:38:c2:9a:70:84:5b:9c:79:c8:a7:1d:0d:
                    0a:43:ce:3b:74:af:b4:bb:79:c9:c7:fa:89:7e:d9:
                    69:3b:d9:c9:ab:5d:08:e8:0a:ad:41:d6:6a:1f:e8:
                    4b:f3:b6:cc:45:2c:25:84:27:46:ad:86:8d:20:95:
                    09:ed:bb:69:c8:4e:05:4f:fc:c9:f4:3c:75:a1:b9:
                    17:bb:ce:df:27:2f:06:70:e6:7d:90:66:e8:04:1a:
                    ea:e4:f5:4a:f5:f3:01:4b:06:63:f2:b0:77:94:43:
                    00:9f:92:e5:a7:d3:70:d9:c9:e7:47:02:3a:91:c4:
                    a5:99:86:b3:86:bb:1e:0d:45:5b:df:51:73:87:a5:
                    bb:e3:15:48:c9:47:fd:5d:15:b1:8a:e5:e5:90:ad:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:27:D4:13:63:24:FD:41:B9:5F:72:7D:21:20:30:9B:91:71:BE:A4
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:60:79:29:23:ed:b6:eb:1d:40:26:ef:4e:31:22:43:17:03:
         f7:bf:61:80:03:d0:87:ed:55:53:63:74:c9:fa:07:7e:4e:73:
         82:e8:f6:b2:3c:c6:f7:6c:b8:0b:5c:48:09:06:fd:c7:13:7f:
         a4:79:82:92:ed:60:a5:c1:ef:f5:7d:e5:9f:95:37:de:64:cc:
         1b:5a:7c:66:64:da:b7:54:45:55:03:96:13:78:32:b9:6d:96:
         50:5c:b0:ec:44:41:6b:69:32:58:fd:5a:4d:6f:d3:79:93:51:
         db:9b:c3:81:c1:c7:f7:82:8f:dd:26:d3:51:d4:85:33:1f:e5:
         7e:83:71:49:aa:44:73:ca:ec:78:a0:a8:c2:28:38:ca:cc:ca:
         df:36:9a:90:89:5c:39:6c:ce:31:0f:42:bd:39:f3:d3:18:86:
         8a:a3:b5:e3:f4:cc:46:b5:d2:42:bf:6b:09:96:95:32:4f:b1:
         56:85:a7:00:d5:f9:ee:c2:e6:f5:e2:ce:e6:8b:ba:96:30:0d:
         b1:5e:2d:89:4f:5d:95:af:83:24:d6:8d:5e:58:3b:73:d5:58:
         64:fc:42:b4:5b:7b:58:92:59:4a:90:07:a9:ab:cc:1a:ae:f1:
         40:c3:73:0e:c4:e8:b2:63:94:03:67:63:2b:76:ee:56:0f:c1:
         7b:87:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-fra.rpki-client.org