Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File:                     SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier:          z6SoesnosLGcaWPU0JLFlLR572qDnF6ZDHP4lEDYVRo=
Subject key identifier:   F6:98:84:C3:6C:87:7F:EB:5D:DF:55:75:BA:23:2B:89:C7:A0:1F:D7
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer:       /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial:       019358779658D83BC0B9BE1BFFE5C424443F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number:          128E
Signing time:             Sat 23 Nov 2024 10:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:52 +0000
Files and hashes:         1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: KRtNLQhsK3+xDxKiuFV+YJDsf+8y9vstWY0B+Sf1jq0=)
                          2: n02xAYYrqUFEJSDi0e8iAgESiEc.roa (hash: N5vxx4B7wynPLbIUSdUo0oMu9dMm+OH6oH6j/yqcTFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:96:58:d8:3b:c0:b9:be:1b:ff:e5:c4:24:44:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
        Validity
            Not Before: Nov 23 10:00:52 2024 GMT
            Not After : Nov 24 10:00:52 2024 GMT
        Subject: CN=f69884c36c877feb5ddf5575ba232b89c7a01fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:b0:b4:59:4d:19:c8:ae:e0:63:c2:fc:76:
                    05:a9:9b:fa:5c:de:6a:19:94:44:86:ea:4c:40:d7:
                    82:71:48:4e:3d:12:e2:00:5a:f0:05:39:ae:5b:0d:
                    8d:07:4a:2f:dc:ee:e9:ff:bd:e3:b4:a8:73:e7:b9:
                    df:dd:9b:8d:29:d8:8c:f0:f1:0e:0e:41:ba:6f:42:
                    c6:3f:59:ce:7f:f7:21:e2:2e:43:17:6e:33:7f:25:
                    42:4c:5e:56:f3:88:38:13:52:63:39:d9:da:c6:e8:
                    eb:07:89:25:f7:8b:6e:d8:39:f4:1c:af:81:f1:47:
                    b9:9e:1f:c1:69:d0:bb:39:32:db:05:94:f7:e0:64:
                    5f:39:d4:b2:52:5a:98:59:ae:12:ed:96:dd:1f:b3:
                    ea:3d:a3:49:ad:6f:f4:e4:50:e0:b6:2f:84:09:d9:
                    4f:65:8f:bc:74:41:77:8d:bc:29:d0:2f:11:db:bc:
                    97:ac:cc:d5:59:0c:9d:d9:90:37:e8:6a:f2:26:e5:
                    7a:40:4f:3f:36:20:13:02:9a:12:36:37:19:36:00:
                    6b:47:1e:c0:b0:50:db:8e:3d:f7:e6:83:2b:95:f2:
                    26:fb:d2:bc:4b:6e:55:49:59:e4:18:1f:b8:06:1c:
                    1f:a8:c1:5b:e5:8f:2b:47:78:8a:78:18:9c:43:d7:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:98:84:C3:6C:87:7F:EB:5D:DF:55:75:BA:23:2B:89:C7:A0:1F:D7
            X509v3 Authority Key Identifier:
                keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:99:73:49:e0:26:58:ef:9e:57:0b:8b:71:d1:6b:99:3b:
         d3:12:59:55:e1:93:52:c9:36:c2:79:cb:e4:59:bc:ef:4f:d9:
         43:6e:05:2e:37:a9:3d:31:7d:6c:0b:ae:c9:e6:70:f4:76:d4:
         75:f4:2b:99:5e:6a:31:a1:2e:22:b8:27:cc:fe:91:9b:46:12:
         15:b1:e4:34:e7:33:89:86:2e:bc:e1:32:70:9c:85:ba:ca:79:
         c7:cd:af:18:85:d2:fc:82:ea:aa:2a:d5:4b:f6:77:63:22:41:
         80:6a:f0:ba:ae:7a:03:23:b9:d5:13:a5:d1:5e:40:60:4d:e3:
         7f:16:db:b9:69:d8:c1:b5:c7:d1:cf:9c:a2:15:27:df:e7:41:
         d9:8a:e4:45:cb:f7:20:bf:b5:07:65:13:3f:aa:dd:58:8e:90:
         bc:25:3d:dc:ba:bd:83:08:f3:78:16:fd:2c:6a:54:3e:35:b8:
         0b:3b:3a:68:28:04:28:f8:fc:8c:76:55:ee:99:50:68:b9:fe:
         10:d0:84:e3:38:04:2d:ef:31:f7:1f:75:15:18:2b:e6:8e:fd:
         44:48:ba:63:3a:e4:fb:01:73:d5:88:52:27:e6:bd:a9:49:bc:
         76:71:57:a6:72:9a:9f:5c:df:ba:a2:c0:e0:fe:18:b0:01:05:
         8a:69:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:08:29 2024 by rpki-client on console-ams.rpki-client.org