Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File:                     hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier:          H6GyZ8eVtQBi5ZToaqudZ4cQsjXmqlzI12y8ejHiiKU=
Subject key identifier:   CB:95:12:C8:7B:FC:66:AE:73:05:29:13:4A:F2:22:56:8F:C6:7F:1B
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer:       /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial:       019369DB07A58015316D93597E81B6A2C10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number:          043F
Signing time:             Tue 26 Nov 2024 19:03:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:02 +0000
Files and hashes:         1: gld-UXK7BJQJzvR5kcWe-fNAhSw.roa (hash: CwEWOKksg7cXUNTy6P0aiK/+sZboUAm5uQld3uxKGx4=)
                          2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: +CnpZ0OAhic6nnDs5evZA7mrTPKPcJyDaT2gu19tHxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:07:a5:80:15:31:6d:93:59:7e:81:b6:a2:c1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
        Validity
            Not Before: Nov 26 19:03:02 2024 GMT
            Not After : Nov 27 19:03:02 2024 GMT
        Subject: CN=cb9512c87bfc66ae730529134af222568fc67f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:8c:0a:24:be:98:7d:0f:d1:49:89:e7:cf:
                    c1:32:a9:4c:30:31:65:cf:d6:c5:97:97:02:1d:1b:
                    28:b5:04:b2:75:f6:c5:c9:4e:a5:62:7b:a5:71:be:
                    fe:4a:06:c4:c1:38:92:3a:30:bb:47:b9:ea:d3:fa:
                    41:8c:53:3b:64:2b:b9:15:c6:a0:fd:d1:39:34:33:
                    c3:d4:51:a2:2e:c5:5e:31:26:16:a5:1f:a5:5e:14:
                    8b:70:d7:96:bd:ca:74:30:40:1b:c3:cb:9c:37:d0:
                    b4:09:b7:fa:43:ba:a8:90:7b:d5:6c:9c:ef:5a:d0:
                    03:61:57:d2:4c:34:03:a5:de:10:20:af:e8:e5:94:
                    7e:0f:91:3a:a6:a7:f6:2c:de:64:0d:4a:0c:db:35:
                    09:21:7d:09:9f:f8:ce:9a:2f:43:e1:a2:84:a3:65:
                    d2:8f:ad:42:e8:43:91:90:e6:8f:3b:38:cb:8e:64:
                    61:f8:a8:fa:50:58:f2:ae:e1:49:2b:bc:ed:e8:54:
                    75:61:f8:ae:a0:19:f0:55:77:8f:27:bb:41:a0:c8:
                    5d:16:a0:ce:25:a5:ad:b0:4e:e5:44:af:32:4d:78:
                    18:bd:be:e2:50:94:db:3f:4b:49:4f:88:88:7f:24:
                    78:b7:0a:70:33:41:97:15:e7:8a:f5:66:a4:ae:20:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:12:C8:7B:FC:66:AE:73:05:29:13:4A:F2:22:56:8F:C6:7F:1B
            X509v3 Authority Key Identifier:
                keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:69:f6:42:56:fc:7c:b4:fc:12:e6:7f:94:98:b8:9e:75:58:
         0a:ae:e1:60:30:82:f1:f5:f7:08:fa:d6:c1:8e:e3:ed:32:2a:
         a9:5d:65:2b:e1:31:e8:c4:bb:fa:0f:5f:50:49:38:b2:5f:56:
         aa:d4:0f:47:66:6b:c0:f6:47:c9:5c:c4:09:61:a5:6a:74:a0:
         aa:c6:20:07:70:b8:6d:96:49:b8:8c:8d:02:06:60:3c:3b:c6:
         9d:4e:ce:39:1b:67:d5:d9:ca:9e:a3:14:ec:c3:9d:da:f2:49:
         18:28:c1:54:65:f6:99:52:ce:5e:2a:ba:c5:9c:35:7e:a4:6c:
         b0:b2:41:45:89:52:fb:65:da:e4:fb:21:f0:b9:74:42:95:aa:
         c0:f2:06:64:b9:a6:99:e0:be:1f:a4:f3:1f:7d:5f:80:40:32:
         ef:80:b5:91:9e:80:d8:ea:5c:a8:43:ae:ac:80:3d:40:41:13:
         72:83:ac:d5:fb:25:d0:55:38:48:93:aa:e6:11:ba:c8:bd:fb:
         c6:8a:c6:8e:11:3c:b4:50:c5:67:7e:f5:1a:c8:be:00:00:13:
         07:b1:cb:44:bc:96:12:0d:1f:6d:48:5f:41:5b:0e:be:f0:14:
         48:66:a4:1f:b3:b4:46:58:60:79:bf:fc:ca:14:6e:f4:7b:c1:
         2f:3b:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:12 2024 by rpki-client on console-fra.rpki-client.org