Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File:                     fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier:          R+MQdRBbANVhuPbHHaVPI1tA6CnBGn0arup0iBnWPyc=
Subject key identifier:   F5:44:46:D9:12:9C:8B:CB:42:54:2C:8E:D7:E1:D1:B7:0F:4D:4D:98
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer:       /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial:       01935878791BA25CF5181C828E821C9D44FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number:          0483
Signing time:             Sat 23 Nov 2024 10:01:50 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:50 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:50 +0000
Files and hashes:         1: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: 2yPCxrczzAm+bKPMEMpJwcz591QJuv6Jrc7nHSmJUxo=)
                          2: i_4tr2uYxoJL0ZEMT86PMcs0dZs.roa (hash: POC4xcMQE5vOENuBCX5v3JsLiW/TzlOMFFXoegONbvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:79:1b:a2:5c:f5:18:1c:82:8e:82:1c:9d:44:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
        Validity
            Not Before: Nov 23 10:01:50 2024 GMT
            Not After : Nov 24 10:01:50 2024 GMT
        Subject: CN=f54446d9129c8bcb42542c8ed7e1d1b70f4d4d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:10:0f:f1:93:ff:ec:37:43:10:aa:eb:c6:
                    46:d0:7d:13:6a:39:0a:a1:a5:e5:c8:7e:61:78:3e:
                    4c:a3:a5:cb:43:0f:5e:91:78:d4:ee:2f:cb:4d:ba:
                    3f:b6:4b:be:8f:e9:05:5e:b4:c6:da:2c:0c:af:84:
                    29:d3:4d:66:08:e1:ef:9a:df:3d:9d:3a:f1:8a:f4:
                    54:ac:ad:47:bf:73:ee:6f:48:25:49:5b:58:55:86:
                    56:fa:41:02:69:b1:cd:61:9a:08:ae:e2:94:19:e1:
                    81:be:d0:66:e3:32:4f:45:5d:49:bf:18:20:c4:2e:
                    25:24:20:26:de:5c:f6:b8:5a:9e:3a:ce:80:d8:e5:
                    c4:03:dc:8b:82:95:8b:82:54:f1:9e:8b:06:33:e9:
                    e0:e2:02:6f:5b:71:53:16:8e:4d:ab:fb:be:8e:20:
                    94:f4:78:10:c9:7e:55:6e:2c:1d:b3:a4:f3:3b:1e:
                    7c:cf:66:68:e3:46:21:75:e8:3c:f0:5d:1b:8c:1f:
                    73:34:76:79:4b:dc:16:18:02:99:25:6d:6f:55:cf:
                    65:3f:4c:9f:d9:02:7b:c0:3b:56:24:9d:dd:61:99:
                    38:55:5f:cf:24:7f:97:2c:f4:e7:21:bc:a7:dd:e8:
                    0f:a3:53:c1:86:1a:ec:32:25:f3:49:d2:33:8a:6c:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:46:D9:12:9C:8B:CB:42:54:2C:8E:D7:E1:D1:B7:0F:4D:4D:98
            X509v3 Authority Key Identifier:
                keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:74:5b:fd:9e:20:7a:14:0a:b4:a4:03:c3:94:55:aa:b3:06:
         9e:78:18:f6:c5:d6:6c:b9:b5:09:7f:c9:eb:86:2b:4c:4b:6e:
         db:4d:9e:1e:04:97:32:f9:6b:69:30:f9:77:85:e3:e0:eb:94:
         4d:af:a7:49:c5:12:0e:99:af:a9:c1:ff:b0:f9:15:f3:c6:d5:
         86:93:9e:ea:8d:07:19:24:bd:32:49:af:74:25:53:69:00:af:
         5b:b3:ef:96:18:0a:fe:74:92:99:e6:20:9b:26:e8:ef:e6:f5:
         7c:e7:a7:72:df:86:1e:d4:a7:38:f4:1c:91:7f:5d:60:e0:ed:
         ba:6a:35:14:e2:d8:50:75:3c:b3:0c:88:eb:22:89:ad:56:65:
         31:21:30:6c:ed:f3:c7:2b:76:8b:ea:b5:8c:be:b8:e2:d4:af:
         dc:a2:35:ca:a8:56:38:11:c3:a2:e6:4c:1b:63:9c:15:01:4d:
         8d:e5:c4:09:ee:f7:51:0a:18:26:d6:67:77:85:e4:6a:fb:d3:
         b0:ee:57:8a:8b:69:e6:72:2a:a6:c3:76:23:00:1a:8c:65:e4:
         92:26:22:db:99:aa:88:f5:c4:4c:14:9c:6c:5c:57:6c:c9:ff:
         37:30:a1:cd:a5:e6:54:77:bd:1c:49:29:f6:b1:4f:27:54:06:
         af:c6:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:03 2024 by rpki-client on console-fra.rpki-client.org