Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File:                     Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier:          3/uiIXK8r3EUERsAkyNKNIa/ewxg1SwN09SLRfnuTMs=
Subject key identifier:   4A:C5:A0:5B:F5:2A:D7:1E:43:E3:5B:D7:2E:8C:7B:E9:5F:94:6D:58
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer:       /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial:       01935764FF299BD2CD4EBCB6694F9C3A88A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number:          0A52
Signing time:             Sat 23 Nov 2024 05:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:56 +0000
Files and hashes:         1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: 0saJbpSJ2btduU2lyRjpFakZ9B+gVoVbfPEwOx1V09E=)
                          2: xMiywW2FpSKCyhtODtWrkNLMoJ8.roa (hash: zgW2FEy+pd7x2suRtxPf97L0X7SLAQ90XD/qDKryqrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:ff:29:9b:d2:cd:4e:bc:b6:69:4f:9c:3a:88:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
        Validity
            Not Before: Nov 23 05:00:56 2024 GMT
            Not After : Nov 24 05:00:56 2024 GMT
        Subject: CN=4ac5a05bf52ad71e43e35bd72e8c7be95f946d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:1a:87:68:aa:50:2a:ed:79:aa:c7:b9:d4:
                    2e:d2:ca:d7:14:61:77:dd:f7:aa:78:49:70:95:90:
                    d8:77:90:63:2e:ac:2d:6e:a8:05:85:f0:1d:0b:ce:
                    7a:0b:05:1f:ec:13:a6:d1:d3:79:2f:bf:cc:ea:4e:
                    29:57:2f:e2:b8:b2:be:aa:93:7d:33:1f:5d:8d:10:
                    cc:50:c2:06:76:b8:48:1c:81:7d:9c:9a:3d:e7:6b:
                    15:61:be:1a:98:6b:b5:7c:cc:1f:10:3b:fd:26:58:
                    3d:43:92:50:2b:7e:ce:ca:26:77:58:09:2b:dc:94:
                    30:9d:70:30:94:96:16:7d:65:44:bc:3c:1a:56:6a:
                    66:b7:0c:38:1d:f4:5b:36:d0:e2:32:88:a7:32:30:
                    7a:3a:ab:8c:56:89:78:d4:b5:15:6f:9b:c0:f4:2b:
                    ed:6f:b2:46:ba:d9:f2:54:e1:64:3e:87:ce:45:64:
                    ae:e0:6c:8b:5d:88:cd:de:56:68:8d:9f:a2:de:97:
                    e6:99:54:47:7e:64:b4:df:c1:c8:86:7e:6b:be:79:
                    df:f5:13:ae:9f:55:79:4d:de:82:ed:81:32:a3:f3:
                    96:99:4c:24:38:a5:56:58:16:68:e3:f4:8e:bf:a7:
                    e5:3f:a3:af:1d:a8:04:3d:95:57:e7:bd:d9:cd:63:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C5:A0:5B:F5:2A:D7:1E:43:E3:5B:D7:2E:8C:7B:E9:5F:94:6D:58
            X509v3 Authority Key Identifier:
                keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:5f:9f:ba:f4:11:4d:a6:26:4f:38:d5:a1:be:5a:b2:1b:
         59:05:0f:6b:61:cf:39:2a:91:67:37:b0:4c:8c:bf:c1:21:fc:
         3b:1d:1c:cc:8f:0f:17:fa:2b:31:dc:e9:d9:4e:b1:ea:6d:48:
         9d:85:70:4b:70:6c:6a:38:32:36:f1:b5:cf:50:0e:7d:2e:25:
         5a:b2:21:72:97:ea:f0:cc:08:45:d4:c2:23:8f:73:91:5c:7d:
         bf:f6:60:4f:ae:b1:54:a9:e2:14:63:cf:77:bb:55:aa:f6:67:
         b3:b4:e3:75:ef:49:f9:40:6d:4c:dc:7c:fb:d7:31:d8:6a:72:
         87:79:17:ab:22:8e:4b:81:65:05:0f:74:21:32:ec:33:5e:ef:
         f5:ce:75:92:2a:a3:7d:3a:05:22:51:df:be:d6:c6:0d:7f:61:
         9a:ec:84:43:bc:fd:8f:61:c6:28:19:67:59:c8:9a:b3:d4:7e:
         51:54:92:fe:2f:8b:84:21:08:9d:38:18:ee:d0:a6:53:74:69:
         fe:fc:34:ef:58:e8:e2:0e:1b:35:32:71:7c:72:6b:d5:8e:95:
         4d:01:63:08:cd:aa:de:a9:0f:91:6c:e0:65:7c:63:da:78:d6:
         cd:b6:75:87:ff:52:ae:bc:67:1c:31:19:c3:f6:ee:22:83:10:
         9c:a5:48:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:22 2024 by rpki-client on console-fra.rpki-client.org