Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File:                     CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier:          hEJSpV0bNvRL96wnOVu1IaDApqcT2PWJd9Fcz7nNhb8=
Subject key identifier:   AB:48:81:7A:1E:C1:BB:8F:FF:34:47:5D:90:CA:38:40:30:3D:64:6A
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer:       /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial:       019369D9E4CC036DB978B1A78469ECC7AC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number:          053D
Signing time:             Tue 26 Nov 2024 19:01:47 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:47 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:47 +0000
Files and hashes:         1: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: Xw132vnZrHpoKLj6AnewuQpMIQRz+nQhnvtgr6cpy3s=)
                          2: o9k1QpzqEzlUccqRAJzqHR9jnjs.roa (hash: oSZ0+SJtYQGSY2Rx1ZhlXNmU/p9IMPMcjWjG1iaf1Go=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:e4:cc:03:6d:b9:78:b1:a7:84:69:ec:c7:ac:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
        Validity
            Not Before: Nov 26 19:01:47 2024 GMT
            Not After : Nov 27 19:01:47 2024 GMT
        Subject: CN=ab48817a1ec1bb8fff34475d90ca3840303d646a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:ad:ff:c7:ad:d5:d2:7e:f3:db:ac:cd:c0:
                    5c:15:1f:3c:03:e6:d6:f5:b0:0a:82:ee:f6:13:ca:
                    92:7c:0c:0c:86:40:cd:33:53:f9:26:55:b9:d0:7e:
                    36:c3:bb:42:c8:35:1c:dc:40:96:2f:af:82:88:0d:
                    b5:b5:1c:12:ac:c7:13:91:9f:6d:62:3a:fb:5a:48:
                    19:8b:e7:fc:6a:45:44:0b:f4:93:18:f0:cb:b2:77:
                    f0:7d:c1:87:c5:6e:14:ad:62:0f:49:e8:23:d6:05:
                    77:f6:2b:85:f2:75:5d:5e:4a:ad:b9:d6:34:35:56:
                    8e:c5:6a:dd:8c:0a:4e:91:02:f8:35:09:27:c3:b5:
                    e0:a0:e8:72:b4:bb:90:84:1f:e8:c2:39:31:48:d9:
                    b1:96:00:d9:3f:92:9e:57:d8:5b:37:b4:5f:11:22:
                    9a:6a:23:52:b3:22:f3:67:71:1b:36:08:8b:aa:59:
                    ae:71:e1:bf:d9:ee:69:32:bd:6a:35:62:31:b4:c6:
                    5c:39:21:45:ca:21:ac:9f:40:cb:e0:e7:a7:aa:5c:
                    ba:6d:49:5b:92:22:dd:e5:f5:d6:01:fe:b3:7f:4a:
                    c8:68:9f:a9:37:72:8f:ff:b3:7c:6c:b0:4d:08:6a:
                    42:46:3b:15:53:ee:a5:f6:1b:74:64:0a:96:a4:53:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:48:81:7A:1E:C1:BB:8F:FF:34:47:5D:90:CA:38:40:30:3D:64:6A
            X509v3 Authority Key Identifier:
                keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:12:5b:18:db:14:83:b4:f9:75:89:a0:9f:5e:e6:51:9e:53:
         9e:32:32:2e:7b:96:7c:1e:e2:95:15:31:18:4c:ea:15:93:bb:
         e8:05:5d:c9:fa:8f:fa:54:9d:e2:a6:2b:0f:95:c1:b5:0c:74:
         39:d1:9e:08:ba:7b:28:98:5c:31:47:5d:58:45:bb:c6:0a:e5:
         0f:b2:10:6a:00:13:57:4f:92:74:55:49:2b:2c:26:fb:1a:b2:
         a1:ce:66:7d:52:b4:38:b8:1d:bf:c3:14:96:ca:9a:2c:93:f2:
         bc:30:ee:3f:d5:b5:35:3b:82:ca:09:c0:6d:a7:b4:95:41:b5:
         6e:37:d3:fa:d0:5f:a4:d4:84:8b:be:db:e4:31:99:07:f3:ea:
         99:91:4d:28:41:b4:21:47:6a:f9:19:e2:5c:71:d5:31:8e:88:
         6e:93:cc:10:4a:c4:80:a1:29:5d:f2:ae:1d:e5:a2:16:ab:aa:
         a4:aa:ba:70:c9:72:5f:49:a1:2a:26:17:20:40:1e:68:6b:82:
         b4:f3:59:45:23:25:80:8b:3f:1d:05:f9:19:50:f4:66:e7:e7:
         0a:b6:91:a4:11:b5:e9:a8:8b:52:cb:bb:94:81:42:00:7f:de:
         fb:d4:7d:38:c0:e1:8f:91:7b:53:8f:7f:ef:da:1f:18:a0:8e:
         11:b8:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:03 2024 by rpki-client on console-fra.rpki-client.org