Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File:                     ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier:          Plx0/N2dxuttuMu58W+fkK6uVYkljmxz3GFU5qtURbA=
Subject key identifier:   E1:40:7C:CA:F1:65:B4:74:C4:8D:42:D8:4C:2B:F0:3A:B3:4D:18:54
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer:       /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial:       0193572D9F5B24529B42F7BDFE0D22FECAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 04:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:27 +0000
Files and hashes:         1: H33l0KeJq9p6hlQ8Nce_Wi3dFtc.roa (hash: +lKrMEFROmNi/y7a3TonC9tTql2mwO6tnIhMcLpS13A=)
                          2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: Yj1rpOZOYAwDf0o9iAzBNiIzRAxEhguI8Uc9zjuWX0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:9f:5b:24:52:9b:42:f7:bd:fe:0d:22:fe:ca:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
        Validity
            Not Before: Nov 23 04:00:27 2024 GMT
            Not After : Nov 24 04:00:27 2024 GMT
        Subject: CN=e1407ccaf165b474c48d42d84c2bf03ab34d1854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:44:74:d5:b1:22:60:2f:07:94:45:38:50:
                    47:14:f5:40:e7:5d:aa:08:e4:07:23:a2:fe:9a:87:
                    78:17:80:bb:92:91:bf:37:0b:21:47:91:41:a6:42:
                    04:ad:8d:77:13:27:72:78:f3:b8:97:78:a0:a0:07:
                    82:b0:d9:c5:1d:2d:df:e6:d9:d5:dc:64:51:46:3f:
                    85:7f:58:9c:a6:5a:0d:a3:cc:dc:ba:9f:71:6a:f1:
                    ea:48:fd:05:d2:ac:17:9d:92:1b:2e:fc:ff:d1:8b:
                    21:64:79:8c:26:ab:8a:6b:f5:d6:3b:31:70:fd:de:
                    d8:56:ff:79:c0:c6:3b:bf:06:68:e9:92:bf:b3:2f:
                    b9:9b:4d:3d:58:9e:cf:b4:a4:69:1f:e5:d3:e8:66:
                    cf:27:9e:2c:8d:d1:b1:fa:02:93:a7:d5:80:9b:5e:
                    27:8b:b9:b5:47:20:30:ce:3c:79:fc:12:b6:e1:76:
                    54:cd:a9:c5:bf:56:b2:5c:cb:40:ae:e9:fb:be:94:
                    d8:67:7c:11:31:c5:42:56:24:a7:b6:43:8d:ca:93:
                    61:20:af:5b:38:f0:b0:56:d1:30:9b:2e:ac:f2:cb:
                    b8:ab:f8:db:92:51:1b:f7:ee:7c:97:8c:f3:29:94:
                    82:c5:db:32:53:b7:ba:67:41:6f:18:b5:5e:5e:e8:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:40:7C:CA:F1:65:B4:74:C4:8D:42:D8:4C:2B:F0:3A:B3:4D:18:54
            X509v3 Authority Key Identifier:
                keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e4:16:61:80:81:91:7f:71:05:88:26:b6:6b:ec:73:c7:77:
         a6:75:57:f3:74:b5:ca:9c:df:df:4f:c4:fa:f4:e2:0e:a6:9f:
         06:d0:dd:04:8e:c9:8c:9e:42:c8:5e:8f:33:5c:be:de:ba:41:
         d0:8a:e3:6a:9b:9d:ed:e3:85:3e:0e:b6:ed:63:9e:56:15:2a:
         57:05:f6:32:2a:1e:37:35:4c:11:0b:06:9a:6a:4d:14:fd:e2:
         c2:14:b6:23:1d:20:ed:ea:a5:e4:a4:c5:17:49:f8:56:69:cb:
         64:6d:9a:00:36:4b:b8:48:73:6a:02:cf:0e:0c:53:7a:f0:96:
         36:4a:d8:40:64:4c:a5:54:5a:1c:5a:2c:b4:ce:b4:d6:be:e8:
         2f:bf:75:ed:63:ef:6c:b6:c8:0e:a9:b9:2f:1b:14:69:14:0b:
         88:59:6a:b2:39:8c:16:4a:00:3b:4c:9a:43:28:50:00:6e:92:
         b9:7c:27:c1:0b:9e:23:9d:a0:b8:4b:fb:85:5e:0d:3c:c9:47:
         42:5e:5b:02:3e:79:2d:a9:67:6e:e1:53:cc:9b:c4:cb:b2:15:
         44:d1:54:a4:8f:a5:b8:5d:54:a2:80:c0:40:67:03:53:85:21:
         b4:36:7f:05:74:6d:27:3d:28:2a:83:fb:6b:94:ae:6e:7d:99:
         8b:e9:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:06 2024 by rpki-client on console-fra.rpki-client.org