Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File:                     XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier:          BIQKkucwPnzLT+2ynxtoLALZ3yIIhkasQ4SHSNQtySI=
Subject key identifier:   EA:29:B9:2C:36:04:46:E9:D9:5D:9F:5B:11:08:91:AF:7E:0C:DD:79
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer:       /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial:       0193553FACA18F5841CB2E560008CA82FA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number:          0EA5
Signing time:             Fri 22 Nov 2024 19:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:56 +0000
Files and hashes:         1: 1-MoXbYkycRx6r22NvA1fC-51OOk.roa (hash: MouAziIIVf/R3lT67whdDCFw/2js2rcCU2Tv3tLWvPg=)
                          2: VNy43vtzAuGW5P07oir-v6eIzjM.roa (hash: 1l36bgIJUN9nhddRmt8INs0C9mpYu7OP6vMtcJzJRtE=)
                          3: WQuVoewDqry9NtsEbEZfiTxUzVE.roa (hash: lC0Ft8zDlfIb6kfdfNUizzAxCsjWdzL0BjsYHVwJWGE=)
                          4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: uB3Xa84dih1+hO1Y2KFEW26JQsR1HvBdduZKGJIxN44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:ac:a1:8f:58:41:cb:2e:56:00:08:ca:82:fa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
        Validity
            Not Before: Nov 22 19:00:56 2024 GMT
            Not After : Nov 23 19:00:56 2024 GMT
        Subject: CN=ea29b92c360446e9d95d9f5b110891af7e0cdd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:40:1a:c2:63:59:63:5b:fb:a8:ef:b8:81:
                    21:f5:f4:85:87:18:c1:4c:73:b4:b2:51:42:98:26:
                    9b:91:82:49:cf:76:e3:dc:10:4f:f7:cd:86:5e:21:
                    bf:31:37:74:a5:cf:40:8b:37:36:6c:c1:74:1d:5a:
                    48:ba:8c:41:cd:b5:88:a0:8a:d4:71:6d:74:11:b8:
                    dc:7f:fd:13:c5:f6:ee:1c:26:4d:00:24:db:37:5b:
                    76:41:94:14:1b:f5:f2:a7:7b:67:28:2f:b4:06:e9:
                    33:ed:35:1f:26:7f:89:1a:d2:af:18:8d:58:d8:6e:
                    44:bf:70:3e:45:8a:ec:3b:7b:1b:7c:b0:1c:6a:fa:
                    5e:a3:be:74:d5:31:15:24:5c:9e:ab:30:bc:c1:e1:
                    67:ed:ec:2d:28:a8:fc:86:cc:f1:a9:d6:71:c2:60:
                    4e:bd:6b:30:10:ae:7a:de:42:03:1c:81:19:d8:b3:
                    67:28:64:dd:5a:1c:38:35:be:9e:01:ac:c3:55:58:
                    eb:3d:46:38:be:04:23:19:5d:84:13:1e:bb:c1:16:
                    af:4e:2a:5d:c6:ce:09:96:57:98:8e:74:50:b4:12:
                    0a:09:75:20:5d:c5:31:fd:0a:66:7a:d2:07:87:13:
                    5d:cd:e2:38:8d:e8:d2:10:7e:47:f8:9e:4d:bd:71:
                    ea:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:B9:2C:36:04:46:E9:D9:5D:9F:5B:11:08:91:AF:7E:0C:DD:79
            X509v3 Authority Key Identifier:
                keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:78:5a:00:8c:8d:b5:2d:1b:0c:fb:7f:99:8f:65:6a:0e:
         70:4d:94:b3:f8:4b:c6:07:9f:e4:d0:a1:a9:e8:69:00:25:3e:
         2d:22:fb:e3:27:b6:8f:27:26:50:30:4c:af:ee:25:4b:62:ab:
         ef:af:50:4c:2a:19:3a:85:6c:f7:f4:93:21:df:0d:d4:c1:e8:
         4e:74:b9:55:ef:19:1f:19:29:55:c1:bc:f5:b4:86:99:a4:4e:
         48:54:b0:86:29:95:2d:ba:ca:30:68:73:2e:61:ca:36:b7:77:
         48:30:6b:a2:37:4d:99:df:47:ce:16:3b:4f:4b:36:77:ec:21:
         fb:82:ea:b4:ee:90:58:48:aa:20:1c:8b:87:f4:01:c9:21:c5:
         91:3c:b9:4e:16:ff:ad:37:12:16:e9:c1:c1:e0:2a:61:be:58:
         b1:18:1f:79:0b:bb:4a:a5:80:cd:eb:3c:80:86:11:27:0f:1f:
         9f:85:5d:20:23:5f:24:46:85:92:4e:e7:69:c5:d0:fb:ac:d0:
         bf:7e:90:c3:e2:ed:f6:b5:dd:ad:b0:ba:d7:f6:1f:d6:41:d4:
         a1:45:ac:c9:2a:87:8d:4f:19:6b:50:e3:23:d5:a1:e9:c0:c8:
         bd:86:70:b9:ef:cc:6d:57:8c:a3:06:3d:12:3d:85:25:12:c4:
         c0:6c:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:00 2024 by rpki-client on console-fra.rpki-client.org