Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
File:                     e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft (raw, json)
Hash identifier:          OHM0bzbTg6Vp9lmxy5sV6C5LyFy2lcTVomicjCpLWoc=
Subject key identifier:   8F:40:14:CB:D6:80:A7:AA:E4:B1:F8:AD:11:62:58:8A:AC:86:42:83
Authority key identifier: 7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2
Certificate issuer:       /CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
Certificate serial:       019353F596E5F6ADFB0C7D7C79B4690D5235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
Manifest number:          0A04
Signing time:             Fri 22 Nov 2024 13:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:23 +0000
Files and hashes:         1: 1dXjX5_rDnX8tiXG147qvWFUQsQ.roa (hash: +lAOOv17hW2G+tHe0GGa4JbG18R9drFst1eaiBudqDw=)
                          2: e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl (hash: tFJLscAbsZSzKZ3omlDgGmLX39qvWtwIBA09Hn0McBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:96:e5:f6:ad:fb:0c:7d:7c:79:b4:69:0d:52:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
        Validity
            Not Before: Nov 22 13:00:23 2024 GMT
            Not After : Nov 23 13:00:23 2024 GMT
        Subject: CN=8f4014cbd680a7aae4b1f8ad1162588aac864283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:c3:c3:d6:f5:30:15:3c:eb:e9:43:b2:49:
                    43:af:24:e5:bb:fa:62:72:d3:22:b3:7b:a6:6a:eb:
                    ae:0d:69:36:17:09:bb:33:4e:22:17:e8:e7:6b:b1:
                    b2:5f:94:ad:61:31:00:17:1f:61:1c:0a:c8:cf:f4:
                    7c:3d:42:ce:7f:89:b7:04:4f:1e:50:f4:27:bf:8b:
                    cd:ef:44:e3:fb:9b:d6:66:bf:0b:1d:8b:4f:f5:97:
                    82:2b:5f:fd:fe:85:6e:6b:98:3c:02:26:6a:c2:49:
                    63:e1:0f:8b:9c:2f:50:37:94:ec:e6:bc:89:30:23:
                    7b:72:d4:1d:54:7a:e5:4e:94:9d:ed:74:97:6f:8d:
                    1d:0b:3e:d8:d3:81:00:f8:8d:3a:d0:d1:f3:1d:5a:
                    a2:05:7d:44:cd:73:5a:f5:8e:f9:c7:63:4d:34:58:
                    d4:9e:40:8d:e6:c0:b1:1e:66:f5:86:a5:dc:bb:75:
                    27:f0:b0:a2:9b:9c:cc:bb:ca:be:95:8a:b0:1a:d2:
                    65:3d:40:d5:0c:a2:d1:ca:e5:8a:3e:e4:ed:b8:5d:
                    4d:d6:e0:22:ca:f1:1e:58:5e:9e:ea:4c:4b:93:7b:
                    9f:79:3e:d2:7e:18:b4:14:6e:57:e3:f4:70:17:12:
                    3e:e4:60:dc:4b:e9:36:0f:0a:3d:40:47:e3:a8:af:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:40:14:CB:D6:80:A7:AA:E4:B1:F8:AD:11:62:58:8A:AC:86:42:83
            X509v3 Authority Key Identifier:
                keyid:7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:2d:42:22:ee:26:45:50:49:95:75:77:51:32:6a:f1:64:
         a5:68:f7:7b:76:b6:17:c5:14:c0:21:73:5f:6a:7c:e4:72:c8:
         69:2a:61:da:7f:42:f5:f8:fb:ca:d1:e2:0d:e0:4b:bd:ca:49:
         e9:5a:24:db:e8:8c:7a:f1:a3:67:4d:76:ca:a8:93:14:8e:34:
         23:dd:9e:0a:5d:f9:39:f2:74:f1:11:26:b3:c1:70:7c:20:59:
         ed:c3:f6:76:f6:88:96:36:bf:37:e5:39:14:ef:30:d1:e4:7f:
         79:a4:50:e1:57:8e:4c:d6:dd:85:66:a7:6e:a8:8b:df:4b:f5:
         8a:79:52:ca:83:ba:91:66:53:97:2c:09:bb:46:06:4a:79:58:
         3f:0b:af:65:df:af:17:85:3c:72:9e:f5:c3:6d:ac:6f:f1:7f:
         14:18:fe:5e:ae:16:76:cf:ee:8b:b4:e6:3b:42:96:84:26:40:
         fc:1b:d4:78:60:16:f4:17:1a:04:0a:4a:99:b7:ea:37:7b:09:
         3b:08:62:03:4c:d3:f6:87:8b:82:bd:38:49:53:65:b0:dc:89:
         6d:3b:ff:eb:53:eb:0a:a6:84:46:f1:7b:a3:cd:59:38:23:04:
         d4:45:5e:1f:5c:a9:a7:39:23:3a:aa:12:7c:a5:89:c7:9f:ec:
         94:e7:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:15:12 2024 by rpki-client on console-fra.rpki-client.org