Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File:                     EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier:          u8x2h6cZw3N3+zFVU2WzFC7aNkj19s4kpaX2mA2PwDI=
Subject key identifier:   05:B1:1F:3C:9C:A2:71:39:B3:C6:C2:69:F5:B0:EC:6A:9B:60:3C:DF
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer:       /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial:       0194064645C14A0F8B6BA523426CDBF3EB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 04:00:56 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:56 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:56 +0000
Files and hashes:         1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: PhQQdR7gk3SmZv/snylrcpRRr3VcRyEqlx7xSE/RRqE=)
                          2: MHWCq63I8hlFPPtec-vETEinwy8.roa (hash: Hzlfzv0IWs+PTDQsMOVtbiIKga1pdMmEF/yFls1YABI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:45:c1:4a:0f:8b:6b:a5:23:42:6c:db:f3:eb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
        Validity
            Not Before: Dec 27 04:00:56 2024 GMT
            Not After : Dec 28 04:00:56 2024 GMT
        Subject: CN=05b11f3c9ca27139b3c6c269f5b0ec6a9b603cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:cc:76:2e:2f:5c:79:88:40:22:b6:fa:e6:
                    f4:91:db:31:27:d9:49:5b:b8:dd:3d:b3:ba:16:b0:
                    a8:1b:4e:12:61:c9:42:c9:e5:89:e2:92:b8:63:26:
                    ab:6a:be:12:61:9f:aa:5d:cf:27:fb:45:f2:d2:97:
                    50:0d:92:4c:36:2c:d7:5c:a0:f7:1a:11:24:9d:53:
                    86:8d:c0:31:a3:58:33:9f:a3:53:fa:2d:d2:d9:63:
                    30:0a:2e:26:86:c7:10:6f:7f:0b:7f:95:96:f6:ad:
                    2f:c0:06:a0:e9:df:2c:03:16:6c:90:63:5b:15:f9:
                    f5:82:21:43:4e:a1:2c:5c:e6:23:db:7c:e7:52:ad:
                    99:f0:62:cf:6b:3b:46:02:8c:88:f8:b7:0a:bd:3a:
                    f0:8a:d2:d8:8a:ff:f7:84:21:a9:b6:40:b0:7e:9c:
                    a1:82:dc:61:72:5e:48:1b:82:b1:c3:68:db:9e:48:
                    10:d1:59:70:c8:7b:b9:32:e8:80:f2:59:da:f3:06:
                    55:61:f3:57:e6:4f:8e:c4:f7:42:f9:cf:10:ba:86:
                    cb:d2:1e:3f:02:ad:8f:11:4d:36:fa:6a:c7:e2:c5:
                    9c:c8:4d:64:a7:12:52:cd:26:09:d1:10:ed:5c:d4:
                    c1:ac:7c:eb:67:41:da:5d:60:da:5c:23:64:99:94:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:1F:3C:9C:A2:71:39:B3:C6:C2:69:F5:B0:EC:6A:9B:60:3C:DF
            X509v3 Authority Key Identifier:
                keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:68:bc:a3:34:77:8b:08:8c:34:73:63:aa:f5:4c:77:f6:70:
         1a:e5:f2:2f:c2:c6:be:52:0f:8c:12:2a:b0:e4:ff:f2:89:37:
         de:ab:26:39:ed:69:87:e7:55:ff:f8:65:46:3a:05:69:36:f7:
         41:c2:5d:76:fb:e8:23:44:c1:98:03:06:0c:0a:50:9a:a9:bf:
         72:fa:c5:b1:33:46:b7:7b:1b:4a:fe:e3:6a:51:c6:44:7c:07:
         60:74:ef:81:02:0b:3a:d6:6b:62:14:35:9a:56:5c:c6:12:e2:
         28:3c:55:ad:a8:54:eb:aa:30:83:eb:16:07:c1:ac:62:d4:06:
         51:be:b9:aa:be:c3:f3:be:b0:19:06:c3:66:25:ca:62:2b:f8:
         4d:08:0a:a4:57:ea:96:95:0d:6a:3d:1a:01:f5:21:18:a8:ba:
         43:4c:03:c5:94:52:e9:e5:cd:c4:ce:0b:68:7b:57:b3:5e:28:
         b8:e1:75:01:66:16:3b:e4:ce:a0:f4:fd:28:f6:a5:3b:e4:26:
         51:49:dd:a6:e2:4f:5d:e2:fc:e4:dd:09:9e:79:90:78:01:6f:
         30:bb:79:74:da:fd:56:ff:4b:a2:a9:27:f0:c9:1e:a1:a2:07:
         52:13:8f:0c:d4:45:93:ab:75:0d:b5:a7:d0:b6:11:ae:c5:35:
         eb:34:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:45:51 2024 by rpki-client on console-ams.rpki-client.org