Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File:                     rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier:          bUSaJ7KPKeUw4+vwarZ17c3P8ki9599qzHAhOjcy+D4=
Subject key identifier:   F1:17:66:AB:C3:BE:70:FE:13:78:F6:EE:4D:8B:7D:67:2B:6C:91:4E
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer:       /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial:       0193553F711B29A88AE12C7D568945DA5C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number:          0707
Signing time:             Fri 22 Nov 2024 19:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:41 +0000
Files and hashes:         1: aTAp5ZFkPsnJHtRfQBniuJRLNM4.roa (hash: nflAj5vJPMYtF0oFTdDYEtjApgfE1EZ7aQXjMhbJAXw=)
                          2: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: nvO/+yxXVPYls0m5NGTOpgNL1v+DBbQRQ3As2T6lB28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:71:1b:29:a8:8a:e1:2c:7d:56:89:45:da:5c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
        Validity
            Not Before: Nov 22 19:00:41 2024 GMT
            Not After : Nov 23 19:00:41 2024 GMT
        Subject: CN=f11766abc3be70fe1378f6ee4d8b7d672b6c914e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:ec:ce:5a:d1:f4:57:81:5b:fc:1b:e9:84:
                    1a:75:78:e2:62:95:97:08:30:4c:e3:e1:b3:e5:7b:
                    ba:c3:01:3a:03:0b:ce:56:44:f7:dd:e6:f5:32:c1:
                    32:a6:d2:4c:5b:d3:b5:ac:e3:67:1c:8a:72:84:c6:
                    1e:53:fa:22:03:68:85:0d:b9:6b:9a:4c:1f:6f:b9:
                    64:94:10:61:29:71:ea:16:ad:d4:45:da:ea:f6:89:
                    91:d6:2a:a2:81:09:fd:0c:5c:13:d4:26:0a:c8:08:
                    f4:67:20:a4:62:0a:ce:f6:f5:10:ad:a0:1f:5f:13:
                    55:df:30:d6:d3:0d:f9:7f:d0:8f:76:dc:22:97:23:
                    2d:1e:16:5a:a4:7e:5e:a2:2c:b5:96:c1:30:4d:4a:
                    2c:49:f2:08:70:c1:9b:15:08:1e:4c:e1:7a:fb:3c:
                    40:62:31:5c:9f:0e:10:21:f2:18:91:08:2e:df:25:
                    39:bf:19:28:0b:97:72:6b:44:f5:f9:b0:b7:70:82:
                    9d:98:61:f8:17:17:29:69:5c:cb:c8:9e:d5:eb:f1:
                    d2:99:a5:55:f2:88:2e:27:6b:f3:a8:24:ff:55:15:
                    7c:bf:96:a3:c2:1f:c2:03:0a:01:c0:5d:f2:3a:a5:
                    f2:9a:27:a6:09:60:34:27:38:ec:92:26:2f:a1:62:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:17:66:AB:C3:BE:70:FE:13:78:F6:EE:4D:8B:7D:67:2B:6C:91:4E
            X509v3 Authority Key Identifier:
                keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8c:ab:b4:2d:9a:52:25:ee:e8:13:43:b4:a5:dc:7d:55:0b:
         a4:86:9d:f8:2e:0b:cb:73:9d:81:b1:61:b9:a2:71:35:3b:2d:
         c0:f9:12:34:eb:5e:c9:b3:a2:82:97:10:f6:cf:8c:a0:dd:8b:
         09:d8:09:b5:c9:59:12:39:bd:f5:9c:f5:1c:46:5a:0e:f3:f7:
         1c:71:11:ef:a6:8c:a4:b7:4b:68:14:73:f4:c3:80:59:9b:07:
         d3:cb:6e:b0:ff:5b:45:e0:06:0c:5b:3f:a3:2c:48:ac:d5:79:
         ba:60:c9:0d:da:04:f0:7f:24:48:da:b2:da:84:64:ee:47:55:
         64:b0:6c:08:09:68:14:82:92:ca:68:f3:3c:2b:ff:48:e9:d7:
         18:da:39:bb:32:8b:ae:ef:74:1d:63:24:27:cc:19:57:eb:82:
         31:8f:8d:27:49:0b:30:6e:ca:4e:da:13:ae:2b:90:71:89:3b:
         15:f1:7a:68:1e:2b:dd:b3:a6:6e:af:5e:77:97:cb:bf:1f:39:
         96:5f:31:b7:39:34:3e:6c:01:92:f8:2d:58:7f:8e:50:df:53:
         22:f5:2d:1d:8a:c0:8a:2a:21:01:cb:50:04:69:03:01:c2:1f:
         29:2f:32:44:fd:5f:dd:0d:c6:3d:00:f6:46:2c:da:5e:83:49:
         8d:ad:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:25 2024 by rpki-client on console-ams.rpki-client.org