Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File:                     fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier:          /wO9+81KJbtgEkFMqXDBaE/4N6BpoCtkwc5+FxCRhSQ=
Subject key identifier:   18:A3:78:13:D4:19:0C:4B:E3:1B:E2:C2:93:FD:37:7E:85:D3:2B:A3
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer:       /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial:       01936B2214F5800B78015CAD3D30783F4563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number:          0A8E
Signing time:             Wed 27 Nov 2024 01:00:15 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:15 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:15 +0000
Files and hashes:         1: 40eKQ4JJEjLGieuTPrhtiOzkupo.roa (hash: im6RkZYz30arlP7VndhpX0PvhrnxoIGRcl2NhizQJpU=)
                          2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: nd254HKSjUudM/mBKJ3rID2stHi8nm5UW3RRQd8ehiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:14:f5:80:0b:78:01:5c:ad:3d:30:78:3f:45:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
        Validity
            Not Before: Nov 27 01:00:15 2024 GMT
            Not After : Nov 28 01:00:15 2024 GMT
        Subject: CN=18a37813d4190c4be31be2c293fd377e85d32ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:c9:13:8e:01:28:b2:43:33:6c:da:82:c7:
                    25:2a:77:f2:de:47:ad:cf:81:8f:75:6d:6d:91:b1:
                    4a:6c:f9:28:b3:cb:ec:cc:23:27:c8:b0:40:ed:54:
                    d3:c0:c9:d7:0f:2f:f6:e0:6c:1a:d9:9f:ce:ac:79:
                    6a:59:4a:89:7a:4c:45:bd:9e:9f:34:d1:7e:7f:34:
                    5c:fd:3c:4c:a0:c8:e7:20:b1:8e:78:2b:c7:0e:4c:
                    79:db:cd:4b:be:3b:dc:36:ac:77:38:8d:90:85:61:
                    f3:d8:75:2b:16:b4:78:e2:04:90:a1:94:4b:18:6a:
                    3f:c5:47:a7:29:1c:73:ca:e5:2c:dc:c8:c7:bd:c1:
                    34:9a:dd:58:3b:ab:07:76:1b:7d:a0:3f:6d:33:4b:
                    71:e9:e0:e1:98:dd:18:9d:8c:2a:fe:02:48:60:7d:
                    55:7a:27:cf:2a:54:ce:ab:85:c3:25:b2:16:a9:55:
                    14:40:b8:e5:65:7f:54:8a:c3:ce:92:e2:23:e8:27:
                    9f:58:9e:e6:4f:db:47:7c:42:29:8d:f9:c0:27:ba:
                    bf:9f:26:2e:1c:0a:58:92:c4:01:d4:67:32:70:be:
                    f5:d8:65:19:fc:3f:df:64:ac:ee:1d:38:ba:80:8a:
                    c5:95:a1:2d:51:7a:a8:e7:4b:97:92:2d:51:e8:1f:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:78:13:D4:19:0C:4B:E3:1B:E2:C2:93:FD:37:7E:85:D3:2B:A3
            X509v3 Authority Key Identifier:
                keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:f4:39:d4:47:42:60:7e:38:b0:2c:86:e2:5c:83:d2:16:
         bd:b0:1f:c1:a6:ad:dd:63:1d:2a:9a:6d:7b:2c:8d:bf:1a:2e:
         2c:29:2e:8e:a5:d8:8f:a9:08:7e:dd:be:26:ea:6b:fd:db:4c:
         d0:51:06:2b:fc:fa:a3:f3:fd:22:93:3c:53:99:d1:28:b6:ba:
         83:ea:b0:cb:11:26:29:13:40:fd:22:00:ae:ea:09:f9:5f:02:
         cf:fa:c3:21:6f:15:dc:12:4d:e3:26:f7:22:c5:b2:ed:da:e3:
         5e:1e:8c:6c:ed:f4:80:04:97:da:0b:3a:58:1b:a6:ff:9a:ee:
         50:b6:95:84:1f:9d:15:da:3d:b8:e9:2b:4f:47:49:3c:2a:02:
         11:f7:9c:95:35:d6:e4:99:34:e5:c0:c5:d0:7c:ae:4b:8f:a7:
         98:ef:55:f8:af:4d:db:44:ea:c2:b4:99:40:70:97:17:90:7d:
         0f:23:08:61:6e:d1:35:8a:e3:65:b3:46:70:0b:f0:c9:f1:05:
         3d:d9:71:10:3b:7e:df:4c:5e:3a:aa:a1:31:59:ed:d6:94:fd:
         ec:91:16:c9:1e:4f:86:ee:d6:86:e0:75:85:1e:a1:fc:5f:a9:
         be:a1:da:06:84:47:ef:7d:ad:6a:f4:bc:9f:d2:de:10:6b:60:
         eb:16:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:33 2024 by rpki-client on console-fra.rpki-client.org