Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File:                     tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier:          j6cyCcOelD7mU0JaWQfQ71/Oif6dUtyNU/bxunW3+b4=
Subject key identifier:   DA:87:F0:D5:CD:1E:F3:4F:07:44:FC:0A:6C:7F:81:FF:EF:C5:F3:86
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer:       /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial:       019369D96D659548538AEAB8B48B8C573A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number:          0F84
Signing time:             Tue 26 Nov 2024 19:01:17 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:17 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:17 +0000
Files and hashes:         1: 6nZfn5Q9i2WOlOMzlE0s8MwPtis.roa (hash: f58td7FDpd3YW/U92n6ZKM+B9jvGGdW0peJ6fA//oRM=)
                          2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: S1rQWSoiWJZUg59lLn7m2A6SH+D4E+5FpZtL+Rycx2I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:6d:65:95:48:53:8a:ea:b8:b4:8b:8c:57:3a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
        Validity
            Not Before: Nov 26 19:01:17 2024 GMT
            Not After : Nov 27 19:01:17 2024 GMT
        Subject: CN=da87f0d5cd1ef34f0744fc0a6c7f81ffefc5f386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:18:23:35:cb:2f:48:8a:9b:ac:67:2d:2c:
                    a8:be:26:a1:93:d0:2e:74:74:bb:c8:55:d1:b4:01:
                    86:86:bd:7a:9e:0d:f6:58:23:84:b7:2e:c2:ad:d3:
                    a4:7e:65:f9:1f:af:d1:30:9a:1e:0d:36:d3:e6:a7:
                    d1:7b:69:db:d5:ff:06:b1:e7:89:c2:3f:65:08:5c:
                    d3:20:4a:ac:55:8d:8b:83:1c:80:60:a2:21:a5:34:
                    1f:bd:d3:eb:8f:cb:78:cd:f6:7d:d3:c7:ae:a7:22:
                    1b:5a:96:41:fa:aa:59:80:8f:ad:39:dc:02:98:97:
                    60:90:26:75:09:51:f7:a4:bf:92:8e:35:85:56:3c:
                    2c:a0:5e:da:c7:b1:17:8f:91:b9:4f:16:18:76:03:
                    2e:50:31:76:77:e9:41:cb:89:14:12:a6:3b:da:9d:
                    22:1c:f0:16:b5:00:fa:4c:4c:ef:eb:ce:e0:a5:46:
                    b0:fb:63:98:e3:1b:f6:e9:20:24:19:19:d7:62:de:
                    b1:36:11:e5:9a:6a:fc:8d:2f:e0:05:98:9c:ce:a8:
                    08:88:ca:7a:fe:46:5f:e4:88:45:08:bc:d4:b7:4a:
                    a7:bf:4d:be:78:8f:1d:af:a4:a3:f8:d1:07:92:59:
                    8c:36:4a:d2:c3:5a:3f:c2:71:87:16:65:aa:65:a8:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:F0:D5:CD:1E:F3:4F:07:44:FC:0A:6C:7F:81:FF:EF:C5:F3:86
            X509v3 Authority Key Identifier:
                keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:74:a6:20:76:f9:bb:c6:2c:43:9b:52:e8:0d:e8:1c:87:
         77:3d:69:65:3e:16:11:6d:f6:43:9c:9a:d0:8a:96:af:cb:1c:
         80:7b:2b:f2:65:82:08:f0:34:e6:3f:dd:b7:cc:7c:74:e6:87:
         32:25:f5:63:a4:34:cb:1e:09:8a:18:98:5c:4d:39:5d:4c:b9:
         11:e5:9d:a0:6d:76:55:d9:b3:3b:87:81:fa:45:64:6e:71:ca:
         c0:85:c6:46:f6:e6:51:c2:6a:cb:de:19:df:15:35:b9:8c:7f:
         71:66:bd:b7:9e:22:e8:85:42:7d:45:27:43:00:a1:5e:18:b0:
         28:37:82:e9:d1:2e:c9:9d:33:62:6d:e6:fe:58:d5:b5:47:fd:
         e3:0b:aa:75:f5:89:57:c6:8f:33:71:4b:47:e4:8a:56:07:3d:
         90:e5:98:6d:29:1a:21:4c:2f:f6:a1:4f:0c:8f:f4:05:dc:04:
         44:51:04:f6:0b:70:81:20:f7:ba:de:cc:74:5e:c2:02:0b:80:
         03:2a:5c:9f:34:9d:02:ef:03:85:71:42:c1:d8:e6:d1:18:60:
         df:7a:8c:d2:08:72:17:f0:2e:e5:7b:72:f9:fd:a6:76:e3:41:
         3c:6e:94:12:b6:ee:0e:7a:ac:5e:a8:44:4a:79:7e:bc:38:7e:
         42:8f:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:08 2024 by rpki-client on console-fra.rpki-client.org