Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File:                     B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier:          8AiXVlnJIJ3wVaRadjWxCuEGzJ8yrcejS1OXCutBoqw=
Subject key identifier:   5F:81:07:9D:5D:CB:8E:64:A6:DB:69:15:C5:32:69:07:72:B9:35:D3
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer:       /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial:       019357D24A8CBDA9FCE1724671E67DAA75F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 07:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:19 +0000
Files and hashes:         1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: VKnL2P2/t86eIuKZxAweLExEiztDVC/j8x31RtbgcLw=)
                          2: aioD9ujZ60hMObKSIDD8aRvgtsU.roa (hash: t2+XxfXvTayNk8zXu9CokWl7j0V3fJ4gS3J0STIHkak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:4a:8c:bd:a9:fc:e1:72:46:71:e6:7d:aa:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
        Validity
            Not Before: Nov 23 07:00:19 2024 GMT
            Not After : Nov 24 07:00:19 2024 GMT
        Subject: CN=5f81079d5dcb8e64a6db6915c532690772b935d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:58:67:f3:43:3f:f9:8b:82:92:b8:be:08:
                    46:ce:92:99:fe:b1:07:e9:f4:90:9e:35:3b:c2:b3:
                    6e:a4:67:34:93:53:9d:f2:0c:d8:75:11:45:ea:6e:
                    d8:e4:6f:cc:99:ed:89:e6:6a:f5:75:fd:12:b6:b9:
                    3e:fc:46:ce:7f:2f:01:73:4a:38:b3:c3:1c:c4:d5:
                    d0:3f:a1:f8:73:5e:5e:fa:81:e4:3b:8c:16:54:44:
                    b6:52:b9:91:16:b7:4e:99:74:34:54:bd:24:70:a6:
                    52:c6:ff:4c:73:84:60:d3:2d:59:b9:59:37:e4:e8:
                    cf:69:20:13:2d:5c:1d:ac:48:fe:f9:9f:d1:44:ae:
                    e0:ba:72:f6:f2:92:6b:6d:51:97:66:3c:15:26:8b:
                    05:ee:78:7c:da:2c:18:eb:5d:85:87:59:61:96:1d:
                    fd:f1:5e:fd:2c:91:fc:d2:b5:70:af:7f:eb:bd:aa:
                    55:ed:3d:98:d7:5c:6f:71:0f:f2:82:a1:c8:7c:33:
                    9d:b8:a7:af:cd:29:4c:c8:10:0e:a8:94:ac:0b:3b:
                    07:4d:60:39:c2:d9:da:42:ca:25:34:4d:ed:0c:09:
                    af:9c:e4:90:98:5c:17:e4:b1:10:62:bf:a1:e2:91:
                    01:6b:f1:f2:79:45:2a:23:9c:c1:01:5a:21:79:8e:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:81:07:9D:5D:CB:8E:64:A6:DB:69:15:C5:32:69:07:72:B9:35:D3
            X509v3 Authority Key Identifier:
                keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:01:32:a4:c0:dd:8f:85:bf:3f:47:66:b9:eb:20:f1:20:a9:
         64:77:56:9c:8f:3e:56:8d:aa:2c:97:34:5f:e8:61:95:62:f9:
         68:8e:41:39:77:6f:11:02:92:e7:2e:ad:af:2f:c7:48:79:77:
         0a:17:21:16:19:4c:f8:b0:75:d6:2f:85:af:3e:5e:81:4d:4b:
         73:b5:77:d1:0a:45:35:bd:1c:33:2d:1d:f7:fb:2e:20:12:0a:
         d3:ea:0a:f4:6d:2b:ef:e8:8d:73:2c:33:41:db:75:19:86:fe:
         f7:75:d3:8c:00:09:28:8a:b2:11:41:0c:62:fb:28:99:76:a2:
         d0:6e:ce:a9:0f:02:90:22:64:a0:1d:a4:c6:8f:48:a7:4b:1d:
         40:da:7a:d8:8d:7a:b5:f3:ee:11:06:ef:78:83:bf:e0:58:28:
         31:d9:cd:dc:cb:07:54:94:9e:3d:e8:ca:76:c4:40:75:76:e0:
         1b:db:c7:06:23:27:cd:72:70:70:fe:bd:04:97:90:70:57:88:
         3e:e8:4c:ef:c1:73:b8:55:d5:c9:40:c4:56:19:5d:ff:ec:7b:
         75:86:b1:e7:02:f4:59:f2:e5:bf:69:8c:0e:ce:93:82:e3:c8:
         0a:55:45:bd:af:d3:3d:5a:42:4a:e7:f6:f1:64:36:4d:37:f7:
         29:58:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:25 2024 by rpki-client on console-fra.rpki-client.org