Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File:                     7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier:          iPDuDQ/0SZNgB68eEwJc4yLaWhAjnYvDj4yHvbpyhZ0=
Subject key identifier:   0B:53:C2:62:6E:4B:11:9B:99:93:5F:24:6E:84:C1:14:85:2B:C7:A4
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer:       /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial:       019355AD7DD320D873395ED66D88685F400F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number:          E5
Signing time:             Fri 22 Nov 2024 21:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:53 +0000
Files and hashes:         1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: A12t/91aQvjKftiiMMcUDFH+JSiRJvOVhWJuT0n96DE=)
                          2: W-VAIpFqQAn7Es2g0jHSTX56sQo.roa (hash: H0Mxv5/t+bAmR2oYuctBL0fRTBYrPdh8xvRJWJc42fI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:7d:d3:20:d8:73:39:5e:d6:6d:88:68:5f:40:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
        Validity
            Not Before: Nov 22 21:00:53 2024 GMT
            Not After : Nov 23 21:00:53 2024 GMT
        Subject: CN=0b53c2626e4b119b99935f246e84c114852bc7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:9f:65:cf:98:4e:7a:d9:8a:65:71:85:2f:
                    8c:33:9e:10:8e:9e:6f:6e:2d:d6:35:c7:52:30:cd:
                    a9:69:1b:45:48:7d:98:64:ac:96:c6:dc:66:a0:2b:
                    a0:da:e9:54:b2:8e:40:0f:dc:58:9d:79:d1:6e:08:
                    3f:ce:93:7d:c5:cc:06:1c:75:b0:8a:6e:ea:f8:9d:
                    14:de:03:7b:2b:ec:fc:b5:bb:26:52:c9:85:f1:ff:
                    22:02:71:05:34:da:dc:dd:ad:f3:bc:a9:60:19:cc:
                    2b:be:ec:c7:3b:0c:7d:ee:29:7d:e4:02:ff:0b:2a:
                    45:dd:8b:40:58:03:fb:44:19:79:d3:78:9b:4c:e8:
                    fb:b7:1f:64:87:e6:69:65:00:59:db:c8:60:fb:bc:
                    be:75:8b:73:ca:88:9a:87:ea:b0:69:37:27:07:b2:
                    0a:13:cc:ab:17:23:95:58:35:41:07:59:52:82:a7:
                    9a:94:84:1b:87:68:32:8c:69:6b:7e:cb:87:f2:16:
                    12:79:ab:10:83:3f:f8:72:49:62:1f:90:6b:a6:4e:
                    24:ea:6e:be:b1:a5:53:fd:18:d9:4d:9b:65:a9:7c:
                    a8:87:a5:a1:a5:35:0a:d9:df:ac:9b:04:5d:48:ea:
                    d5:b6:c9:4c:df:02:fc:4b:2a:1d:6e:05:c6:65:9a:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:C2:62:6E:4B:11:9B:99:93:5F:24:6E:84:C1:14:85:2B:C7:A4
            X509v3 Authority Key Identifier:
                keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:55:53:c3:4a:e7:6a:e1:89:92:9b:ed:33:99:72:55:30:
         c4:da:08:a4:95:e5:4c:a8:fd:70:1a:1a:c1:65:45:b6:66:c6:
         88:46:9e:9c:0f:9c:24:35:1c:dc:cd:ee:ce:02:cf:ef:00:4c:
         ed:67:4d:41:59:d1:d6:67:f3:ea:36:46:4b:9f:2d:55:4d:a9:
         1e:93:e1:dd:76:20:cb:1c:82:f4:4a:79:ae:d7:ff:eb:7c:d0:
         cc:6f:7a:d8:ee:92:3d:d1:ef:72:dc:4d:4e:68:44:46:ed:7f:
         59:62:06:55:1f:8b:9d:b0:79:11:08:e3:78:bf:28:8d:65:0a:
         6b:34:49:3a:5f:f4:6b:db:3e:2d:84:11:88:33:4f:51:d8:2c:
         a4:71:05:f8:ec:23:5a:11:4c:ab:d2:35:24:b6:b8:24:57:75:
         48:b2:ca:9a:69:09:d4:12:56:3b:ba:c3:a2:54:a4:b8:7f:e2:
         29:f9:43:b6:5b:2e:66:f8:40:b0:09:47:6c:76:b6:9b:3a:f5:
         44:ee:03:e4:d3:0d:e2:ce:1f:ac:ce:2c:f6:5b:df:d4:bf:dd:
         45:fa:92:1e:57:20:92:5c:ad:d2:9d:0a:15:d7:93:c9:34:ad:
         0f:36:e8:39:b7:93:21:53:8d:d5:49:fd:cd:02:7d:a7:7d:b8:
         c5:04:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:14 2024 by rpki-client on console-ams.rpki-client.org