Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
File:                     t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json)
Hash identifier:          hfTjHN894RkBeAr2WLi+w8T9DFNuJ2KTIJEDG5e95WA=
Subject key identifier:   39:A7:49:8D:3C:BB:6B:DA:BA:76:72:0D:68:A1:0E:CC:B3:7D:C1:4B
Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
Certificate issuer:       /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Certificate serial:       019352ADD7131930B5C17ADB80CA661F6BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
Manifest number:          0481
Signing time:             Fri 22 Nov 2024 07:02:24 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:24 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:24 +0000
Files and hashes:         1: p3KFkqJ-lOHfsVEEMz07E1iZH7Q.roa (hash: k78tjFHEJIwPb3v0CY/Fc6wBB+L/Nd1ZqgXsK7m+UFw=)
                          2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: foFB8NyEkODPmFJK74HCpVVbDg+6q7eqjbAr/FBfe68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:d7:13:19:30:b5:c1:7a:db:80:ca:66:1f:6b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
        Validity
            Not Before: Nov 22 07:02:24 2024 GMT
            Not After : Nov 23 07:02:24 2024 GMT
        Subject: CN=39a7498d3cbb6bdaba76720d68a10eccb37dc14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:e1:fc:54:c9:09:15:ee:51:2d:52:ed:52:
                    77:69:eb:a6:48:9d:e7:44:3c:b3:39:ea:48:cf:19:
                    24:5a:4d:a7:39:51:da:73:81:0e:d1:32:6b:17:14:
                    27:c5:b5:90:3e:73:d7:8e:bb:17:e3:79:39:60:fa:
                    45:59:4a:b4:c5:67:91:e2:e1:0f:68:57:2c:ca:f2:
                    c3:24:a9:e5:24:f0:3e:b9:1d:9e:04:d9:67:7c:fe:
                    47:2a:12:48:24:88:02:49:53:2f:62:99:dc:fe:85:
                    3b:3d:e5:96:dd:23:ac:c1:5f:0b:db:18:f1:d1:65:
                    b0:69:b9:7e:e2:44:b6:aa:91:a7:9c:87:3f:5f:dd:
                    e3:ae:66:36:f1:89:38:6b:5b:50:e0:c1:79:b4:f3:
                    5f:22:38:fc:fc:71:ff:b5:f1:9c:c5:97:1d:13:fe:
                    32:cc:a6:66:ec:1e:1b:67:c9:80:62:c1:88:bd:32:
                    6f:92:35:ad:4d:23:90:0d:06:da:89:58:5d:6a:57:
                    13:8e:fc:51:26:b6:44:d6:95:8b:9a:ba:dc:2b:2d:
                    aa:d6:37:2c:cf:b6:3e:35:b5:df:07:9d:63:71:cc:
                    9a:f9:31:94:bb:70:b7:6d:c6:6b:31:d2:28:31:54:
                    7d:15:40:24:fb:68:89:c1:ee:3d:28:52:62:72:a8:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A7:49:8D:3C:BB:6B:DA:BA:76:72:0D:68:A1:0E:CC:B3:7D:C1:4B
            X509v3 Authority Key Identifier:
                keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:c2:d8:07:c7:01:a2:c9:15:c9:fb:7a:ea:39:1d:74:2f:
         3b:77:58:e2:ca:36:7e:ff:63:b6:0b:4f:6d:b2:48:7d:29:d5:
         35:f7:96:77:ee:6e:a6:55:3d:00:56:53:8a:46:00:69:99:a5:
         8c:a9:1e:99:99:ad:41:c5:c2:52:a0:23:dd:fb:d7:21:0b:a4:
         17:c0:02:ae:16:a8:09:3d:3d:81:e6:ce:4a:c0:cc:a2:b8:50:
         db:53:f1:d4:cf:6f:be:54:61:28:4b:d3:0c:6a:51:e1:72:b8:
         2a:70:bd:c4:47:54:d0:7c:e7:e3:b0:51:9f:f9:cf:76:3f:e3:
         03:26:66:51:9e:97:0b:ea:f6:e1:0e:fd:91:a3:52:f3:4c:e2:
         4c:0a:42:2d:a8:1b:ad:c1:52:52:88:14:a3:b2:60:84:35:84:
         02:c9:2d:f3:16:23:c9:e8:44:fd:18:38:fc:35:d0:4a:14:b3:
         73:c5:ab:2b:86:6e:85:47:ee:58:95:fc:27:06:a2:1f:19:0a:
         bb:71:75:fd:1b:65:2b:7a:81:d3:cb:0e:64:8e:94:37:88:b4:
         c4:13:d3:61:42:f1:d1:84:86:36:ea:2c:c5:ab:98:2e:58:00:
         c3:9e:70:90:90:45:68:e5:0a:1a:59:ab:0e:3d:6e:60:4e:6f:
         17:b9:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:58 2024 by rpki-client on console-ams.rpki-client.org