Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File:                     CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier:          0HUkxDVOV81Je1qV1jgKyNUkvrh8Vlh1mVjdxgia1xk=
Subject key identifier:   68:E9:14:FD:4F:79:F6:A0:5D:CB:FE:7F:71:75:CB:B8:DE:66:DD:F4
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer:       /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial:       0193512BCA19B81BA44087D149D950B9C09C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number:          0458
Signing time:             Fri 22 Nov 2024 00:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:44 +0000
Files and hashes:         1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: OOi8QmZ+AByxlz49Bhh6cWuTPu7tnuSZzGUDyN25vhI=)
                          2: N2qgMcIQXV0k8i9K5h7E-t3wuds.roa (hash: m84gc+Bv+7wAo7neNAa7tcnIl6E4hZ4i6h7LhRaMtdo=)
                          3: sIPQJM0BZ4ZGHkcR2tuJoOkUnsA.roa (hash: R+8Rs9DcD3kU6ACfCsr7n+ERlxU5EfhPOBjIEmHW4Is=)
                          4: vuf0AkDOUhcmtpP-eWBPu0qON1Q.roa (hash: ZN3C+HfEyW+4NDZePcrVx3EqH19T2QXXBZbAU020gcg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:ca:19:b8:1b:a4:40:87:d1:49:d9:50:b9:c0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
        Validity
            Not Before: Nov 22 00:00:44 2024 GMT
            Not After : Nov 23 00:00:44 2024 GMT
        Subject: CN=68e914fd4f79f6a05dcbfe7f7175cbb8de66ddf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:9d:ec:26:e3:47:1e:3b:20:67:45:a7:7e:
                    d8:9f:a3:aa:d6:5a:da:6e:ec:9c:77:7e:18:42:38:
                    ee:3f:0f:ab:67:13:66:16:6f:5e:bb:74:fe:d2:0b:
                    39:94:c9:c3:ce:34:da:4c:0f:2d:5e:5c:b5:f4:e9:
                    8f:02:f5:3d:44:ee:2a:75:80:1a:b8:fb:4b:82:fc:
                    c7:8b:7f:1c:64:cf:53:01:35:e7:1d:74:da:f3:6c:
                    f2:49:b9:4b:53:b4:17:82:aa:61:9e:c4:f7:21:a3:
                    e7:17:80:7a:63:2a:54:c8:6f:8e:cd:7d:ae:f7:de:
                    fb:48:f9:a1:4c:33:e9:4d:d5:8e:ea:04:a4:5e:4e:
                    3a:07:80:57:a7:c6:78:1e:dd:35:d6:9a:72:57:ab:
                    b6:f4:17:2c:a9:65:7f:2f:d8:76:b1:b2:a9:16:df:
                    54:3e:35:19:a6:e1:1c:cd:be:62:3f:2f:5a:a8:0c:
                    4b:8c:4b:76:1d:dd:9d:5a:c2:7d:9c:24:c6:3c:05:
                    aa:d6:2b:49:72:f0:da:9f:43:11:e1:08:e0:e1:6b:
                    0b:22:80:d5:ad:1a:e6:1b:4d:a9:44:41:e3:9b:f2:
                    42:0d:f8:a3:fd:33:d9:6e:f5:ef:07:ba:72:f8:84:
                    00:91:ea:61:02:00:b5:67:04:8b:8c:a6:95:78:d6:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:14:FD:4F:79:F6:A0:5D:CB:FE:7F:71:75:CB:B8:DE:66:DD:F4
            X509v3 Authority Key Identifier:
                keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:d2:36:8f:c4:7e:bd:bb:64:7d:f0:11:b9:2a:3a:16:ea:
         bd:f7:7c:5b:5a:2f:97:b1:9b:a2:54:ff:92:e0:f8:cb:d1:e1:
         f1:00:d0:ea:52:e3:73:47:82:28:0e:72:55:88:5e:01:7c:1e:
         cd:f9:f4:3f:ff:ee:f3:72:9e:d3:f2:66:c0:09:2b:99:75:8a:
         e9:24:b0:13:79:63:54:98:d4:be:40:ee:0b:2c:53:d8:cd:b9:
         26:de:77:54:c4:26:2b:ff:d8:87:34:a9:5c:aa:ae:42:7a:7e:
         a8:d3:cb:02:45:06:73:57:0a:a0:26:79:39:e1:9a:d3:6f:bd:
         07:ca:3c:8e:83:c4:64:31:e7:dd:ac:75:a1:1f:a7:24:da:a2:
         06:ef:79:4d:62:a9:33:df:0c:89:42:b9:3a:e1:78:c9:de:92:
         df:1c:50:c5:9a:11:54:ba:b2:aa:e7:1d:43:68:9e:23:db:20:
         f7:63:94:41:81:15:26:b7:21:22:13:c1:03:91:6c:38:56:69:
         74:51:d6:cb:d1:02:1e:7b:e7:77:ef:89:48:e6:80:5c:c8:36:
         36:dd:42:38:48:0e:66:b8:39:0d:52:d7:5a:cd:e2:50:3a:64:
         23:50:da:56:4b:16:da:5e:ca:93:39:5c:41:18:0a:f7:75:0a:
         ad:f5:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:43 2024 by rpki-client on console-ams.rpki-client.org