Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
File:                     AxGHu2TIff3S-gLy2F1HnsJoPlc.mft (raw, json)
Hash identifier:          /ijvp4R2vqX3jeFVAcvp1Qg2PVoGzK9F62VO1oriUS8=
Subject key identifier:   64:5D:46:1B:0C:55:40:41:86:C2:6B:5C:84:BF:EF:F1:BE:83:2A:46
Authority key identifier: 03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
Certificate issuer:       /CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Certificate serial:       019357647E94C533E54EB9880E6D8215DE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
Manifest number:          0CEC
Signing time:             Sat 23 Nov 2024 05:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:23 +0000
Files and hashes:         1: AxGHu2TIff3S-gLy2F1HnsJoPlc.crl (hash: zAn2YOnZP3iVpbBnPxdLtRJdX1ph4LUt0NqtCfDXCKQ=)
                          2: FOEel_Ug53BPy9TWRRCR6iqRfU4.roa (hash: albAo4f3VxMQ6/h3rLSCLYTmXgJa445vXmsJEV34B9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:7e:94:c5:33:e5:4e:b9:88:0e:6d:82:15:de:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
        Validity
            Not Before: Nov 23 05:00:23 2024 GMT
            Not After : Nov 24 05:00:23 2024 GMT
        Subject: CN=645d461b0c55404186c26b5c84bfeff1be832a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:be:7f:57:d3:73:46:a1:71:c4:93:e6:20:
                    3b:ca:2b:8c:4b:b4:62:27:48:e2:1d:2c:1b:b8:4c:
                    1a:74:97:2c:d1:fd:92:70:fd:5e:5a:ee:f1:fa:43:
                    40:a2:77:6d:47:0b:f6:f7:fc:1b:95:91:bd:4c:55:
                    47:6d:37:5d:ba:6a:b0:90:e4:8f:3a:3c:01:e4:cd:
                    7a:f5:1a:1f:f5:99:48:76:88:da:5c:33:35:fa:ab:
                    ad:04:a3:38:64:99:f9:49:a3:45:e0:01:bc:c6:25:
                    d2:ae:ac:bd:72:8b:0e:df:34:16:a9:27:9e:68:6c:
                    48:0f:29:9a:2e:cd:20:a4:70:13:49:eb:40:b8:f1:
                    5e:87:65:67:49:81:0a:c4:e3:32:5d:04:a2:76:87:
                    fe:08:31:f2:1e:d2:c2:fa:a3:01:fb:ff:1d:8d:03:
                    90:4f:1b:c1:30:c2:be:80:c2:aa:ef:54:1b:56:f1:
                    78:fb:64:e2:ef:e6:d5:a5:c5:bf:bd:33:3a:05:2a:
                    87:93:f4:73:27:35:2b:ac:cb:29:b6:b6:c1:cc:99:
                    87:5c:14:fb:b5:94:7e:49:1b:cf:e7:a4:3b:d5:0a:
                    5a:4b:f6:ed:c6:f6:50:4f:27:5f:e6:8c:0d:29:42:
                    3a:32:7b:8e:8a:69:c2:e5:b6:b8:fe:54:44:c1:6e:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5D:46:1B:0C:55:40:41:86:C2:6B:5C:84:BF:EF:F1:BE:83:2A:46
            X509v3 Authority Key Identifier:
                keyid:03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:69:09:de:c8:f0:da:5c:8d:bd:2a:ab:84:8f:a9:8c:d2:52:
         8d:20:7e:54:be:71:c3:4b:67:c9:ff:47:ca:f8:8a:17:7a:5a:
         19:d3:36:a5:75:18:17:ad:39:2a:cb:7e:fd:76:83:e3:bc:28:
         a2:ed:49:fa:4e:ea:93:2f:86:e5:67:6e:dc:82:60:db:1f:96:
         dc:b6:02:7b:16:44:ea:fc:78:f5:a9:01:10:d5:98:5a:2f:a5:
         df:5a:05:eb:0d:58:2f:f3:af:36:bd:8f:ab:ac:3b:c3:71:12:
         6b:b5:33:ad:63:e1:59:6f:16:f3:c5:7e:99:34:af:5b:58:85:
         f1:22:ba:8c:69:55:6d:33:6f:0a:e7:52:a8:9b:47:88:94:43:
         83:ad:1f:1d:02:3d:7f:d1:7e:03:f7:27:1e:00:be:f7:68:4f:
         02:36:61:23:f3:d8:73:33:98:1e:2c:e6:b8:d6:84:1e:3c:87:
         2c:49:6d:d0:0e:5b:07:12:e9:35:d9:62:9d:de:63:de:0b:2c:
         78:a6:0c:18:70:d5:b1:1d:44:66:39:72:b5:70:96:63:eb:06:
         a0:fa:fc:ce:81:5e:92:4f:a2:6f:e6:48:62:80:8b:43:f4:aa:
         f6:6a:ff:5e:45:8d:b5:ee:d4:fb:2a:ac:ce:5c:e4:c5:76:b4:
         bc:bd:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:34 2024 by rpki-client on console-fra.rpki-client.org