Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File:                     snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier:          AYQiCyduG5A7lT19BT8lESse+A0ryZ9frePn9X3kzrY=
Subject key identifier:   04:79:E8:FB:4A:83:D6:ED:52:55:78:F9:19:F5:B7:B7:A7:23:A8:46
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer:       /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial:       0193647BDB9E9D9B5BC7A417DDAF47CDF179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number:          0DD0
Signing time:             Mon 25 Nov 2024 18:00:58 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:58 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:58 +0000
Files and hashes:         1: NaG2UyiZsKZmP-03cna1ovVqzPw.roa (hash: ZMhmNZyGF2A1qnQpr8u+VkjQjlfJcWwfyYEXX139E1E=)
                          2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: UD5zJ0jEQtHXxAwHSMjIXPaYDHMfsG1nubfU74IpmEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:db:9e:9d:9b:5b:c7:a4:17:dd:af:47:cd:f1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
        Validity
            Not Before: Nov 25 18:00:58 2024 GMT
            Not After : Nov 26 18:00:58 2024 GMT
        Subject: CN=0479e8fb4a83d6ed525578f919f5b7b7a723a846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:76:a9:e8:58:56:a8:7d:14:1d:31:21:14:
                    88:fe:80:4a:36:54:d5:6e:d9:f2:76:fa:c1:59:57:
                    43:91:16:d9:86:09:19:6f:c3:74:a9:7d:bd:66:4d:
                    84:c0:b7:df:f3:26:5b:1a:a4:7b:8e:c1:38:c5:98:
                    e6:67:a0:a0:88:d2:f0:30:49:a3:c5:26:3b:cc:ee:
                    8b:b5:de:80:d5:78:6d:f9:ca:26:b2:fa:a1:a8:a8:
                    53:47:51:6c:f2:e5:4f:60:1f:11:4c:ea:f9:aa:e1:
                    4e:41:3d:16:ae:0e:70:e1:f1:bf:76:59:08:a6:80:
                    31:76:c9:b5:fd:04:fa:bb:88:89:31:d8:f1:29:1f:
                    6c:2f:fa:25:57:2b:59:c6:f4:7a:07:aa:c3:7d:a9:
                    31:58:d3:7a:7b:8d:06:fb:33:41:09:42:c1:88:25:
                    82:bc:0a:32:28:ed:d7:36:81:c6:64:ef:13:48:51:
                    fe:55:6a:c2:b0:64:f6:ba:38:00:3b:88:6a:26:5e:
                    29:8e:3f:28:3b:6b:a8:08:52:14:08:9a:c3:42:4c:
                    32:52:58:e7:14:30:e7:60:67:05:00:98:d0:e8:f9:
                    6f:38:41:b2:2c:e0:03:83:d4:e8:74:60:79:f4:4c:
                    3c:6e:d0:9f:7e:9c:f8:41:eb:4c:e0:9e:c0:ea:ff:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:E8:FB:4A:83:D6:ED:52:55:78:F9:19:F5:B7:B7:A7:23:A8:46
            X509v3 Authority Key Identifier:
                keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:9e:24:55:f9:f7:07:9f:d3:0d:f9:f2:5f:ff:e3:1b:e6:
         fc:68:a3:a7:13:56:26:d4:6d:b8:f6:fd:f1:56:72:d6:d0:a7:
         9d:9c:74:11:27:ef:5a:f0:9a:05:1f:23:42:95:23:22:7e:95:
         47:46:09:1a:c7:41:fc:7d:ae:fb:54:9e:52:d0:17:8c:90:54:
         ae:09:4e:d8:54:63:21:82:3e:a7:14:f7:70:78:ed:0f:85:2a:
         24:65:ee:ec:7b:f0:4f:43:ff:99:0a:9c:ef:c3:29:c7:9a:d5:
         59:2d:44:73:b1:b6:b0:99:d0:a7:80:dc:cd:ef:94:cd:95:1b:
         fe:48:5c:c6:11:de:ee:66:fd:05:05:a7:f4:fe:29:57:5a:bc:
         6b:d9:cc:15:49:ed:16:d5:76:10:85:56:83:62:af:b7:85:08:
         d5:c0:8b:c5:55:da:24:11:20:9f:0b:65:9f:c0:f1:5e:a8:9c:
         1e:b6:40:28:b0:4e:ec:c4:b8:1f:c3:3b:4d:d1:4a:33:f5:13:
         83:2c:87:4b:92:86:e7:81:a9:9b:ab:aa:06:3e:98:a5:1c:83:
         b2:a0:b7:0f:99:9c:1a:1d:e8:ce:51:3b:7d:9e:7d:be:b8:61:
         b0:df:30:a2:0e:9c:28:ff:1c:25:3a:b0:56:34:50:fb:8d:55:
         8f:22:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:02:05 2024 by rpki-client on console-fra.rpki-client.org