Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File:                     gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier:          Rf2Qmx8ffUEpSF5eUhKPbuNH0HRDjdixQEVhwD/axkM=
Subject key identifier:   E3:8A:61:6C:C8:BC:18:2A:0D:BB:B6:29:B4:5D:55:D4:6D:DC:CD:00
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer:       /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial:       019357D2EF8CA3282EDAD9736397F8996799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number:          77
Signing time:             Sat 23 Nov 2024 07:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:01 +0000
Files and hashes:         1: RHnmXrYK4VZcsi9_67qhiwtd6JE.roa (hash: kT6JK4YgUku4RxEBkUHOuDr0Y5Lm23+ADbgBhbrS6/k=)
                          2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: 29cnYBNZT/I9i0ibsxFWgc9dIxOXiNKcQ3bS0xVH69Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ef:8c:a3:28:2e:da:d9:73:63:97:f8:99:67:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
        Validity
            Not Before: Nov 23 07:01:01 2024 GMT
            Not After : Nov 24 07:01:01 2024 GMT
        Subject: CN=e38a616cc8bc182a0dbbb629b45d55d46ddccd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:43:a7:06:14:62:6b:a7:50:c4:4c:88:3a:
                    81:11:42:82:0e:df:72:b9:f0:38:3d:e4:d5:1a:b6:
                    9d:e9:4d:42:cd:ad:cd:f1:be:6c:4f:6a:f5:12:b2:
                    5c:e3:58:a1:64:8e:f1:1c:12:5c:ce:db:36:6d:31:
                    64:f5:b3:7d:bf:41:13:b3:9d:cf:7b:b4:cc:b9:73:
                    10:05:ac:fc:f1:8c:c6:7e:99:6a:ca:3e:6a:a4:0f:
                    58:08:88:9a:9c:f2:87:c9:13:bb:64:0f:b5:0f:34:
                    b0:fb:2e:02:3e:dc:5c:33:d7:89:66:6b:f2:c8:1f:
                    ba:11:24:8d:54:44:69:23:95:1e:7a:7e:7a:c7:b7:
                    f7:b7:15:de:0c:58:32:e5:b4:d3:85:85:35:06:08:
                    08:87:f5:f0:b3:1c:a5:3f:6f:72:59:3b:60:f9:a9:
                    69:20:14:5a:f8:ef:14:cf:86:f3:9f:90:b2:7d:b0:
                    82:36:7c:d9:a6:f9:38:b4:eb:84:de:10:06:bb:e2:
                    e5:34:5f:f9:0c:6b:b8:b0:00:37:e9:49:5f:f0:61:
                    3a:d4:2e:4d:9b:98:86:94:3a:30:e9:f9:aa:db:e5:
                    dc:9f:21:2a:de:5c:6d:83:35:43:c4:f5:33:40:ee:
                    6c:c5:d8:ae:74:20:86:48:c6:12:f6:c7:73:63:db:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:61:6C:C8:BC:18:2A:0D:BB:B6:29:B4:5D:55:D4:6D:DC:CD:00
            X509v3 Authority Key Identifier:
                keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:b3:8c:9c:47:1c:2b:1e:4f:6d:de:31:27:69:44:64:79:
         5b:3d:e3:b2:93:e8:e2:fd:04:53:1b:ca:99:ba:9a:ce:c0:27:
         51:82:8f:49:80:97:bb:a7:be:69:68:f1:f4:23:56:f1:a1:9c:
         db:24:0e:46:1c:20:e5:a5:2e:68:a6:9a:39:29:8e:2b:48:c1:
         ec:96:b3:b3:53:19:06:2f:a2:57:02:1f:fa:7e:d7:48:80:98:
         3c:48:c6:63:df:18:fc:99:cb:74:f7:8c:e0:5d:ce:0b:8b:51:
         bf:a6:23:ac:fd:5e:03:e3:d9:02:3b:68:42:58:02:57:c1:63:
         4a:08:89:c0:7e:33:9c:00:29:91:42:98:b0:4c:45:f9:17:dd:
         3b:32:c5:aa:28:99:f0:a9:9f:05:a2:bb:06:52:36:6b:5a:99:
         bc:92:44:60:82:c7:f6:2a:4b:20:20:cf:be:1a:6b:e8:cd:85:
         88:8b:32:e9:bc:cb:83:ba:74:a2:37:df:11:3e:64:85:52:64:
         20:f6:5e:d7:95:96:f7:f0:7e:2e:ac:9a:35:fe:71:70:92:65:
         29:6c:10:c5:b8:c1:75:b0:cc:c9:8d:ed:6e:25:90:ae:78:2d:
         cb:04:0f:85:b1:ac:6d:71:9d:4f:cb:33:ae:36:71:73:d1:68:
         a6:2c:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:14 2024 by rpki-client on console-fra.rpki-client.org