Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File:                     CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier:          XbVlmDZU4dDhFzmFquI2LQ6mOTC3pSpNj7y8SQmBxoQ=
Subject key identifier:   5D:EA:B4:64:C1:90:8F:1D:3B:8F:43:2F:56:91:BD:5A:50:28:0C:F8
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer:       /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial:       0193512BE81E2E664848FADDFF99EBE9D802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number:          0C82
Signing time:             Fri 22 Nov 2024 00:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:52 +0000
Files and hashes:         1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: ewT9Dn2ARBzMdIvoSS1r8NNL0RMbu4dDfOP78jsHaO4=)
                          2: WpWAWNcYds_fdl6PzeRewgUyWNo.roa (hash: W3BpQohrrZGICSjPWZ7cwZ5ue7ZwnYGzSF2LzSDJ8wI=)
                          3: oe10k9qSRroAjM_oJLYRDKqoP7k.roa (hash: NbJkQ13wL+ZB/2/tOEl/Y/5/tmfK5FIJKSGt5C7AbVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:e8:1e:2e:66:48:48:fa:dd:ff:99:eb:e9:d8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
        Validity
            Not Before: Nov 22 00:00:52 2024 GMT
            Not After : Nov 23 00:00:52 2024 GMT
        Subject: CN=5deab464c1908f1d3b8f432f5691bd5a50280cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:d2:d3:50:36:33:33:97:0f:0e:04:8f:4d:
                    b7:78:7a:fb:76:ea:1d:fd:24:b2:33:9f:16:51:f0:
                    10:1c:4a:56:3e:b5:8d:90:99:ac:27:32:89:70:46:
                    f6:f4:d8:34:6a:b4:a2:1e:95:08:d8:69:62:54:b8:
                    7d:e1:1c:30:27:b7:9f:69:82:5a:61:ba:58:8b:8e:
                    a6:ac:7c:52:62:7f:bb:aa:9d:60:ad:66:5f:26:05:
                    76:27:db:d7:f3:11:55:1b:e6:bd:7e:5f:cb:2d:55:
                    d1:8a:08:1c:4a:55:31:e6:7b:41:1b:84:40:f1:0c:
                    b6:1e:14:6e:e1:c6:25:28:cd:d3:59:10:af:c5:12:
                    af:68:b0:a5:7a:45:3a:84:3d:ae:d3:06:d1:39:7b:
                    91:7d:de:77:13:61:4f:fa:e5:16:30:bb:d5:d5:97:
                    ce:5f:5c:62:7f:dd:a0:5e:07:23:03:32:f1:f6:a7:
                    31:5c:68:1a:bb:98:ea:9f:2f:4b:7e:36:2c:b5:2c:
                    ed:4b:24:f4:3b:d5:20:b9:11:a9:e5:f0:fa:04:d4:
                    a2:eb:94:99:06:59:26:f5:a6:48:ff:a4:e8:6c:5d:
                    18:ff:9f:6a:f7:ef:2a:0b:e0:69:56:0d:ca:14:b4:
                    ad:4b:ef:ab:a4:f2:37:ea:20:a1:e7:c6:bc:6f:f4:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EA:B4:64:C1:90:8F:1D:3B:8F:43:2F:56:91:BD:5A:50:28:0C:F8
            X509v3 Authority Key Identifier:
                keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:7c:91:02:d0:1b:08:0e:22:bf:72:4f:e4:57:98:cc:cb:
         7a:f1:c8:db:a0:5a:dd:d4:9e:d8:5d:99:8b:35:03:d9:fd:53:
         42:af:ac:89:fc:61:73:30:58:63:f2:1c:ba:c0:52:d8:4e:99:
         d6:fe:43:75:f2:4a:c6:c3:b4:3e:18:7d:43:8a:67:18:93:45:
         09:f2:81:13:ec:1d:27:87:e6:2d:5b:21:5b:63:99:3e:c3:e7:
         a7:d7:b3:04:84:8b:a7:0f:ac:16:ca:57:bb:c8:84:a1:d6:98:
         22:61:fc:2f:72:8b:a4:9e:63:f7:cf:db:ff:94:e3:41:1f:9e:
         fa:0c:bb:e7:24:ec:bf:c9:53:69:ab:22:f8:8f:7a:c4:8d:97:
         da:35:aa:2e:8b:70:b5:84:8f:82:3b:c1:34:84:e7:0e:b1:36:
         9e:ac:e1:b9:b1:c8:c3:f4:b1:b4:c6:c3:6e:fd:7a:79:e2:97:
         ef:a4:7e:e4:fc:21:88:91:51:08:b1:52:2d:39:2a:d5:f4:65:
         d1:53:11:06:f0:75:29:75:75:2b:9a:f9:5d:0e:fc:4b:d6:33:
         2b:92:9c:49:2a:6f:c7:77:be:14:1b:2e:ca:6e:a6:af:c1:32:
         c3:d9:e7:58:10:e6:96:79:e6:c6:14:61:cd:98:b7:d2:be:4a:
         16:b2:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:41:56 2024 by rpki-client on console-fra.rpki-client.org