Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          AgGp6922xpYNbYq3jnRz9p10IQX/MSEvlU9Yn9f4HAw=
Subject key identifier:   45:2C:E3:5B:45:55:95:B2:5E:3E:94:27:CB:B6:CA:FD:B3:F2:65:B5
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       0193587702D482736447A3C6F00699E4AB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          0A6B
Signing time:             Sat 23 Nov 2024 10:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:14 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: lKqv9xp9QdGTbj4DGqN05hTR3VQEUsUIiu+GbAYqedk=)
                          2: megfOu-ol4tql4HdpXE-nFHIaAU.roa (hash: QBcHKaa3q0LeDHwOFxc0gpmctYgpyo6PoiHJyQijL38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:02:d4:82:73:64:47:a3:c6:f0:06:99:e4:ab:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Nov 23 10:00:14 2024 GMT
            Not After : Nov 24 10:00:14 2024 GMT
        Subject: CN=452ce35b455595b25e3e9427cbb6cafdb3f265b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:02:13:88:c2:4f:ab:6f:f1:2e:51:30:95:
                    a5:91:76:f9:6e:4c:21:2d:78:71:1f:91:a8:f4:28:
                    f6:50:c2:a4:d0:7c:34:64:c8:79:e0:2b:43:61:d6:
                    a7:16:d9:f4:40:9a:0c:f1:ca:14:c6:de:b7:57:fb:
                    58:77:20:78:b2:c1:c1:53:73:76:2e:20:ac:49:0b:
                    55:75:98:f6:38:1f:d5:81:da:b1:91:5c:81:0a:03:
                    09:68:84:7d:52:af:4e:9d:a7:28:90:47:dc:1f:28:
                    0b:9a:1a:d2:62:04:b4:8e:c4:2c:59:e3:6b:ff:7e:
                    25:5c:37:5d:fc:6c:89:5e:f9:44:50:4f:bd:19:c1:
                    39:a8:04:fc:6b:0c:32:22:7b:21:72:27:5f:f8:04:
                    8f:4c:11:7b:36:9a:04:73:a0:33:cb:a6:e1:23:ec:
                    05:ec:95:6e:e7:4e:21:1d:71:04:58:b1:87:6c:a7:
                    41:a7:a3:9c:61:81:98:41:11:ca:02:35:1a:59:a4:
                    24:d7:7d:a6:d6:48:2d:f3:b1:9f:06:0c:6e:f3:1e:
                    27:9c:f9:cd:97:78:ef:80:1b:3e:bf:60:a0:99:14:
                    a0:08:79:87:33:91:2c:6e:c7:cf:1f:19:42:44:1c:
                    5f:79:01:ff:e0:20:eb:bf:fa:37:0c:e6:f8:39:79:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2C:E3:5B:45:55:95:B2:5E:3E:94:27:CB:B6:CA:FD:B3:F2:65:B5
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:df:d4:2d:e8:9c:5a:54:18:86:3f:fb:0c:39:a9:57:ca:
         5f:57:53:9b:87:0f:f9:dc:ff:6b:3e:58:95:7f:a3:25:dc:fe:
         3f:a9:1a:a4:78:f2:04:b4:e4:83:ee:46:6b:3b:2b:04:6a:ec:
         b2:f3:5d:17:d1:d6:a6:33:3f:51:32:1b:75:aa:ef:98:51:f6:
         eb:89:f0:8e:b6:94:c2:ff:aa:d9:46:6e:8e:81:5f:f3:c0:aa:
         0d:79:70:6c:94:2c:62:c3:a6:f1:f9:f2:59:5c:3d:9e:1a:13:
         af:6c:f5:a3:f5:a4:cc:62:5d:a0:62:fa:b6:a0:f7:0e:1b:9e:
         7c:b5:00:ac:0e:25:0b:6b:e2:3f:b2:3a:9a:30:81:36:25:6a:
         70:a5:6d:dc:9a:13:95:80:2d:24:4c:b9:62:26:66:b6:89:41:
         a6:b2:13:cd:5e:b1:5d:1a:06:a9:32:70:8f:fa:d6:34:da:52:
         7c:dc:9b:44:86:d7:39:1c:12:bb:13:5a:33:20:c6:1a:d9:60:
         4c:28:66:6f:93:83:55:06:6d:be:da:ea:c3:1d:f0:64:11:ce:
         fd:aa:5d:32:95:be:82:b7:75:07:2b:45:fd:8a:91:7f:53:30:
         73:4c:d4:de:94:9a:93:6c:93:b1:e2:fa:3a:32:9e:56:91:88:
         d8:61:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:49 2024 by rpki-client on console-ams.rpki-client.org