Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File:                     smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier:          639J47rXWsa+812Q+ADe2bp+qWTMZT/wqUsIfG8QhiM=
Subject key identifier:   ED:23:7C:7C:DA:89:D7:23:40:47:01:75:50:EC:EA:5B:4B:AD:3F:42
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer:       /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial:       019352ACF6079CB48CA69B3D80905E76FD72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number:          0E26
Signing time:             Fri 22 Nov 2024 07:01:26 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:26 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:26 +0000
Files and hashes:         1: gWh6Wk1LztjLY4cJieIrlrOv81k.roa (hash: X+mt5gykzuaxS7MckaWIkBuTxnA4YhoMqCK0nkS2JBw=)
                          2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: sjax9Xcs5RouUL3eifN7Czv+SgFJiobW6qI284EkQVM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:f6:07:9c:b4:8c:a6:9b:3d:80:90:5e:76:fd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
        Validity
            Not Before: Nov 22 07:01:26 2024 GMT
            Not After : Nov 23 07:01:26 2024 GMT
        Subject: CN=ed237c7cda89d7234047017550ecea5b4bad3f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:61:70:ed:f9:96:f0:d6:b3:5d:d8:b9:e4:
                    bc:50:8f:98:ca:cb:35:2d:be:0c:9f:3b:63:22:76:
                    05:48:9e:f8:36:7a:1b:8e:63:8a:59:61:82:3d:37:
                    6b:f4:03:92:c5:0c:a8:4e:72:80:69:90:be:16:88:
                    05:1e:23:8c:dd:01:51:5b:6a:85:cd:c9:f5:b4:21:
                    34:4f:8a:e2:3b:22:b4:8a:42:59:4b:1f:78:89:3d:
                    8d:d7:24:8e:ec:d2:89:c3:fc:74:58:54:a8:d4:65:
                    eb:01:d8:35:c4:20:43:53:2e:0c:2e:ca:ce:75:39:
                    aa:43:f9:4e:83:6a:55:3e:27:97:ea:4b:5f:eb:5e:
                    8f:47:4a:ea:69:ab:39:a9:78:e7:6e:9c:33:0e:83:
                    71:6f:c8:f4:2d:46:fd:6f:2a:4d:7f:8d:7f:60:11:
                    30:be:db:b1:b6:2c:21:6f:30:b4:9a:a4:97:d6:41:
                    80:5f:d2:cd:8a:39:23:d4:57:a7:43:08:60:46:8a:
                    5e:f2:6a:fb:18:3e:35:59:7c:86:70:4d:15:b0:ed:
                    d4:7d:a7:f7:e2:0a:48:b5:e2:71:7f:c6:fa:ff:5d:
                    4e:32:19:0f:18:2a:cf:aa:24:88:01:8d:49:81:2a:
                    95:1b:3e:5a:ca:d5:9c:3f:e1:c2:7e:ce:e0:b3:a8:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:7C:7C:DA:89:D7:23:40:47:01:75:50:EC:EA:5B:4B:AD:3F:42
            X509v3 Authority Key Identifier:
                keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:b6:b2:4b:aa:b6:98:5f:25:49:16:a2:26:b8:ff:db:7e:
         88:61:3f:8b:8c:6d:9c:c7:2f:31:c0:1b:98:4a:52:5c:c3:47:
         da:33:1f:99:3c:c6:66:d1:ff:96:e9:cb:84:08:b0:0b:c9:0f:
         2e:05:0f:fa:75:c7:60:ec:e4:a4:b4:8e:74:ce:09:e3:9e:a0:
         5c:5c:92:ae:c3:56:36:c0:80:58:df:b0:e8:31:c3:72:6a:38:
         67:6c:aa:20:7c:c0:e8:fd:e1:c2:ca:cc:f3:79:51:22:44:b8:
         79:af:eb:8d:c6:cb:55:22:a8:51:60:c3:91:49:7a:c9:f9:5e:
         52:ef:87:f2:62:24:32:23:eb:c3:55:ea:ba:53:8e:b2:ce:52:
         3b:3f:cf:8f:04:2d:d2:d2:3b:b2:5e:0d:e9:12:26:77:d2:9e:
         a2:ca:82:0d:c3:b6:51:53:ac:cb:c0:a7:ab:56:c8:fd:6c:32:
         80:2f:54:ab:45:ac:38:7b:9f:aa:67:ed:bb:6a:a1:c8:92:f2:
         25:20:e6:5f:60:f9:2e:b9:54:6e:04:aa:76:da:ee:92:2e:d2:
         c5:eb:ac:59:73:9d:de:66:a9:74:fd:2d:b4:0d:5e:90:8a:a5:
         92:d3:45:ee:bd:8b:fe:b1:b6:a7:18:c0:93:f5:26:28:8b:7c:
         42:17:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:18:48 2024 by rpki-client on console-fra.rpki-client.org