Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File:                     R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier:          wbshvaNxUBf73L3Ay97tDcQ/pjeKatYzQWrHUJC8/rE=
Subject key identifier:   36:70:92:29:20:F0:CA:5E:CA:80:42:2F:77:A6:0C:2B:A9:55:A8:A4
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer:       /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial:       019369D9658029AA96FEB494D03E79018A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number:          10B2
Signing time:             Tue 26 Nov 2024 19:01:14 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:14 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:14 +0000
Files and hashes:         1: EjHUkJUYl7Qm6y35Ef6AtaDF2F4.roa (hash: 7VywfiJhdSL+n+w0CxdURbNH8BJpyo9gOU/p27SBkz8=)
                          2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: I9+byM9jwTqmYgQZEMPhjPKxP8WB8T71PXvyilplRKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:65:80:29:aa:96:fe:b4:94:d0:3e:79:01:8a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
        Validity
            Not Before: Nov 26 19:01:14 2024 GMT
            Not After : Nov 27 19:01:14 2024 GMT
        Subject: CN=3670922920f0ca5eca80422f77a60c2ba955a8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:d0:66:6e:c7:da:d5:ed:5a:fb:0d:1a:15:
                    62:6a:de:72:fe:4a:d4:0b:2c:71:37:04:e7:bf:4a:
                    8e:a8:97:15:d3:eb:c5:e8:81:bf:3f:b3:8f:ce:4b:
                    87:c0:5b:8b:e2:aa:97:cd:5a:10:fa:f4:d2:a3:ed:
                    9d:a1:a1:13:13:da:1c:ef:28:b7:41:c4:5f:df:b6:
                    ab:a3:93:9a:b9:eb:10:1f:3f:2b:e7:52:f6:83:50:
                    84:30:48:f7:5b:c3:af:a9:05:d6:80:82:8d:fa:07:
                    70:f1:c4:13:a0:88:b2:09:8a:ff:f2:ef:9f:14:e8:
                    dd:5c:6c:cc:b2:38:0d:17:42:e1:bd:7b:ba:12:c6:
                    2e:f1:88:35:ee:60:31:04:e0:2e:8a:1c:15:ad:41:
                    62:32:bd:8f:aa:dd:3f:4c:1b:5e:bd:ee:3f:aa:cc:
                    b8:14:43:56:10:6e:76:20:44:82:01:37:b6:20:47:
                    5f:53:52:2c:fb:42:d1:20:e7:95:39:15:96:e1:1f:
                    16:26:23:e4:9b:c4:fb:ea:8e:87:9f:b0:da:25:ea:
                    d3:96:c0:ea:6d:ea:bd:05:b7:c6:1f:01:dd:ab:d8:
                    0d:88:3a:6a:00:bc:61:59:58:50:de:d4:cd:96:88:
                    97:72:c7:42:6b:24:8a:34:f4:05:e4:26:d0:a8:0a:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:92:29:20:F0:CA:5E:CA:80:42:2F:77:A6:0C:2B:A9:55:A8:A4
            X509v3 Authority Key Identifier:
                keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:36:34:f9:ea:f4:f2:12:a1:c6:ec:2f:42:20:ca:6b:bb:
         fd:36:88:c2:5d:bd:37:e8:bb:93:9b:1d:bf:e4:86:ff:82:b9:
         3a:69:6e:8a:2c:8a:ae:c9:d5:70:10:68:45:9f:81:11:4a:ff:
         ec:74:3c:3f:0e:d3:82:0f:9a:ad:04:ba:43:59:9a:6c:93:91:
         db:db:da:f5:da:ef:90:75:2b:2c:01:e5:ef:e5:da:0c:7f:1a:
         2f:54:07:ff:4b:58:c8:1b:6f:9b:a8:3f:21:da:8e:c6:46:c8:
         e6:bc:7e:1a:c0:d9:df:aa:82:e0:b8:34:77:66:76:09:f6:5c:
         91:64:6c:39:6a:95:f5:38:ee:1d:f1:09:98:05:8b:61:46:6a:
         10:5d:ea:9e:ee:3a:51:ab:54:5b:ac:02:77:39:fe:59:16:5b:
         ae:7b:1d:e0:98:ad:eb:0e:59:d4:89:b9:57:b4:1e:00:d8:31:
         37:8b:52:6d:83:f9:46:78:f0:43:f0:f6:71:95:44:fd:af:13:
         c3:f8:1d:63:94:e3:9a:ad:fe:2d:b7:b8:03:b6:02:09:d7:09:
         90:dd:83:c6:d6:94:ee:b2:ba:85:3b:55:ab:c8:a0:cb:4b:e7:
         c5:0b:ae:03:b1:ae:1d:ae:3b:3d:53:a4:69:38:f5:d9:a9:42:
         1f:f8:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:34 2024 by rpki-client on console-fra.rpki-client.org