Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          r+lYMlTRtdQRSIdC/VtiQ1zkvLF8A5SFHS9yTSOxciU=
Subject key identifier:   54:57:3E:18:84:F2:1A:CC:20:1A:66:37:29:77:29:81:62:46:96:FE
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       0193549BFC85BDB29A4D2435EE5E2D1D5D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          127F
Signing time:             Fri 22 Nov 2024 16:02:08 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:08 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:08 +0000
Files and hashes:         1: 1-Jfjr0TAKqCpSl3R4pR5UYejoh0.roa (hash: HC5b9FyO0eZIokGGpC1Fg+FnUw8J/4S+KK0BV0Fc3kg=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: A25EnNYvBx9vgxPy8DeIu+xFy+7J5xqVDAMOznYWOXE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:fc:85:bd:b2:9a:4d:24:35:ee:5e:2d:1d:5d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Nov 22 16:02:08 2024 GMT
            Not After : Nov 23 16:02:08 2024 GMT
        Subject: CN=54573e1884f21acc201a663729772981624696fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:12:17:d4:49:1f:23:86:c9:48:6c:a8:27:
                    84:05:f1:95:08:3f:25:0d:49:c4:d7:41:19:ee:0d:
                    c9:26:82:95:b6:48:5e:ec:5e:f3:d6:67:1c:1e:71:
                    00:8b:7e:0c:de:9b:44:29:2f:13:91:9e:6f:aa:c9:
                    64:62:7e:08:19:21:a8:93:af:e2:9f:72:46:e7:55:
                    18:60:d4:8f:b9:52:fd:b1:7e:c0:7c:6d:54:55:05:
                    17:9c:6d:70:0f:bd:6a:7f:d4:9c:6c:5c:0e:4a:7a:
                    54:78:74:06:b0:e6:a5:6b:8b:69:b5:71:7b:16:ec:
                    3d:58:22:ed:04:b3:00:4a:11:74:db:94:9d:d5:85:
                    e2:1a:21:d8:fa:b1:4a:d9:0f:0b:2b:76:55:09:21:
                    ab:79:63:80:4b:e7:69:93:15:93:90:00:5b:af:a5:
                    0e:5a:17:0f:7a:88:c9:b3:69:02:b8:cb:c1:46:67:
                    88:c8:e2:2e:d7:43:51:05:04:da:c4:52:fb:15:b4:
                    28:cb:e9:e6:bc:5d:22:b0:3b:5a:8b:98:ab:23:6a:
                    a1:ab:eb:94:10:c8:64:85:aa:ff:7e:1c:62:24:4e:
                    d5:02:a2:37:8e:33:0f:cd:c3:3c:ab:5a:85:f7:76:
                    11:ba:39:63:bb:32:4e:a3:12:1e:8b:e4:fe:4b:72:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:3E:18:84:F2:1A:CC:20:1A:66:37:29:77:29:81:62:46:96:FE
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:4e:5b:6a:aa:ec:03:53:03:db:7c:d4:16:24:7a:61:03:
         95:fc:c7:a0:4b:9b:a7:fd:48:a6:5d:1e:4f:96:45:4f:46:09:
         e1:bc:64:24:77:2f:6d:ac:ab:2b:d7:0f:a0:6a:27:1a:de:01:
         1b:06:cc:91:8c:e4:76:18:09:52:9f:8a:1f:75:90:35:01:60:
         8e:07:52:07:b1:ea:4b:9b:02:5d:97:aa:df:01:5b:e8:6c:0c:
         31:ae:7b:c5:aa:73:d5:57:d5:c5:0d:81:91:26:d0:6d:f3:8b:
         64:fc:1a:5a:6f:12:c4:40:08:26:1d:04:c4:2e:0c:7c:f4:d0:
         38:eb:93:b8:3a:49:e3:3f:5d:7f:85:8a:1b:89:b6:7d:0e:fa:
         48:35:1d:5c:ab:f0:c9:0c:15:39:1a:cc:c4:61:b4:b6:52:86:
         92:33:d4:84:6c:01:99:b2:8b:17:c2:68:6e:1a:63:bd:6f:5f:
         b4:f8:f8:f6:6d:92:11:7f:ff:6e:48:45:ef:38:66:98:ac:1f:
         30:5a:38:23:50:e3:39:6d:6c:9e:59:08:26:d2:25:f8:cb:6f:
         39:22:73:1b:41:49:3d:d1:09:61:4c:50:e3:28:3a:aa:6b:cf:
         e9:ce:94:0e:8e:67:0e:c1:d8:f6:26:ea:85:d7:14:76:65:4f:
         2f:c3:1d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:42 2024 by rpki-client on console-ams.rpki-client.org