Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File:                     SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier:          KEjvjItvavvLu2X+ibxCciY+8bkKgxLVMJ1yPPCg2og=
Subject key identifier:   2E:5C:99:0B:78:1B:11:14:82:C3:88:74:A8:16:02:54:85:AB:2C:74
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer:       /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial:       01936B224766564E7BBECEAB739E0380CE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number:          0EF8
Signing time:             Wed 27 Nov 2024 01:00:28 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:28 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:28 +0000
Files and hashes:         1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: KaByGV021KZH4jRHxUt6FogmRtzSpxkK4+maBecyAbM=)
                          2: WeK1z97yQbPYGIo8av-F4JURaK0.roa (hash: H4I7EhJAkgI4NDzXJVjuwB8HNCzCkfR6f+lO4w6WwFs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:47:66:56:4e:7b:be:ce:ab:73:9e:03:80:ce:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
        Validity
            Not Before: Nov 27 01:00:28 2024 GMT
            Not After : Nov 28 01:00:28 2024 GMT
        Subject: CN=2e5c990b781b111482c38874a816025485ab2c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:a4:20:42:c9:4d:2f:c8:2c:38:fa:90:33:
                    e7:63:78:55:64:f6:16:97:42:9d:69:5b:67:c2:d8:
                    14:a3:28:01:f5:85:4f:32:7b:cf:17:de:9b:e5:d9:
                    d6:b3:1d:a1:75:44:5f:86:1d:21:60:98:f8:4b:5d:
                    72:3f:ed:1e:50:b4:85:a0:fc:ed:6c:80:f6:21:88:
                    40:61:ec:3f:cd:17:e8:9e:2a:e4:c4:88:18:90:49:
                    80:cd:f2:01:09:06:9d:1e:35:2d:09:17:38:9f:fe:
                    c8:05:42:39:30:5d:50:d4:a9:28:ec:1c:27:b6:26:
                    cd:3b:c5:8f:55:98:9b:e6:cd:60:c6:88:6e:62:a0:
                    d2:08:64:a5:f1:03:ab:26:d4:eb:6b:83:82:17:78:
                    43:3d:f7:75:75:0a:9b:2f:37:93:d3:a0:c2:9a:6a:
                    d3:91:bb:1a:6e:ec:12:16:69:d3:85:f7:d9:dd:29:
                    0b:6a:37:53:f4:1a:b2:ba:f0:a9:5c:25:54:7e:86:
                    04:46:27:3b:39:19:59:31:01:0d:0a:fd:a9:ba:91:
                    5f:2a:0b:6d:b1:c5:53:fc:31:6b:8b:78:f5:4e:38:
                    29:3a:a8:d7:03:d3:32:ce:f1:7c:fc:4e:34:df:21:
                    25:7b:f2:59:75:f0:0e:2f:cc:a2:8d:a9:93:4c:b9:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:99:0B:78:1B:11:14:82:C3:88:74:A8:16:02:54:85:AB:2C:74
            X509v3 Authority Key Identifier:
                keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:04:86:05:de:47:4a:3e:14:f0:44:56:07:41:a6:1a:62:df:
         72:2a:d1:a8:6b:d6:46:71:aa:db:93:98:0b:81:c8:ab:f0:fa:
         d2:c2:82:9a:0b:74:e0:23:c1:26:8a:5d:50:0c:42:29:7b:01:
         1d:5a:18:35:bb:87:fb:cb:77:b9:66:84:5f:23:b4:29:90:88:
         48:b3:97:e4:07:cb:8e:cd:c9:a5:2a:24:1d:c3:70:4d:e7:1f:
         ee:ef:9c:51:81:03:b2:38:89:71:53:11:5a:98:0a:ef:83:79:
         db:7c:11:c4:4e:5f:ca:f5:40:d3:e6:3b:8f:91:39:dc:9d:d4:
         17:c0:cc:85:d3:53:08:e6:73:29:25:8a:f5:0a:e1:81:2e:46:
         6e:f9:34:02:b6:36:d5:c1:2b:d8:26:6a:20:a9:9d:9c:82:08:
         08:73:3e:f1:b8:bb:1a:82:fc:5d:2c:78:05:44:e3:cf:1b:7c:
         ab:24:24:66:ef:e1:14:36:81:16:fc:1d:ad:f3:cf:aa:e9:ff:
         cb:8d:48:e5:92:ce:ce:7c:09:8f:23:c7:d3:16:ed:9a:98:3b:
         28:38:08:97:64:77:6d:bf:56:dc:e9:98:6b:12:da:9e:2a:d9:
         72:ef:ac:4c:91:47:b7:7e:ec:8b:98:b0:61:f2:4d:35:4a:8c:
         bc:41:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:38 2024 by rpki-client on console-ams.rpki-client.org