Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
File:                     Rmv4di_kLwoT2n0hypbEMBUA68w.mft (raw, json)
Hash identifier:          cGhFfrETpzoIHO8ob6A+6uwdvMSpfjE2MNqX1A6kSRQ=
Subject key identifier:   92:D8:58:44:6E:CA:B2:47:04:6C:57:3F:B4:7B:0D:99:AE:29:0E:AB
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       0193549C8FA3149E2EE985823DEEF61D8BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
Manifest number:          03EA
Signing time:             Fri 22 Nov 2024 16:02:46 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:46 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:46 +0000
Files and hashes:         1: Rmv4di_kLwoT2n0hypbEMBUA68w.crl (hash: mtiwfKkY6qkrVydft5Ry3GHnvSDvIjkhy3/4WJdKWPw=)
                          2: dSbSFG5sfL958_lN1yyOaJsPNvA.roa (hash: En3H8/cPayH+2Z2eOW/+9j3ijdcrs9YOOSk22ibU9zY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:8f:a3:14:9e:2e:e9:85:82:3d:ee:f6:1d:8b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Nov 22 16:02:46 2024 GMT
            Not After : Nov 23 16:02:46 2024 GMT
        Subject: CN=92d858446ecab247046c573fb47b0d99ae290eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:d2:03:86:23:2c:37:e2:45:c1:fe:1a:7a:
                    be:dc:3f:b6:13:27:37:06:76:14:8a:fa:66:57:d9:
                    2b:70:03:61:a8:d3:87:43:4b:a5:66:73:d0:e8:8a:
                    ba:7c:61:7a:b9:72:75:c4:1c:37:1d:29:ae:e4:53:
                    94:00:ae:16:c1:e8:e9:0c:b8:2e:4e:e0:3a:1b:ed:
                    2d:c9:9e:e4:91:f9:fa:f6:df:aa:40:f4:58:89:85:
                    05:79:18:51:c2:fc:21:97:6c:d5:9e:e1:3d:f6:f5:
                    13:ce:44:f4:d0:2e:af:3b:31:89:d3:5d:a5:af:84:
                    99:f0:19:b8:31:28:43:e5:ef:2a:cb:be:f4:fa:2f:
                    d0:2b:33:12:be:94:54:01:06:76:43:e6:89:b9:71:
                    ec:aa:cd:c4:b9:ce:3a:b8:0c:63:8c:da:31:49:7f:
                    b6:26:60:af:a7:fc:ea:03:53:4a:e4:2d:92:47:a5:
                    ba:0b:64:15:97:e5:15:f1:0c:4b:94:f3:97:7c:4e:
                    0e:bd:b7:63:39:ae:d8:41:89:56:b1:b0:13:43:c3:
                    a7:dd:14:78:c4:33:1d:87:eb:fc:54:64:fd:7e:29:
                    61:34:d7:7d:13:4b:c2:c9:b3:da:38:33:a3:4b:28:
                    89:37:80:fe:86:2c:ff:18:3a:f3:5b:de:52:70:1a:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:58:44:6E:CA:B2:47:04:6C:57:3F:B4:7B:0D:99:AE:29:0E:AB
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:64:b0:f5:04:23:36:47:d0:fb:9a:69:de:2d:63:a9:5e:a9:
         ba:c1:73:ff:4b:8c:91:69:ea:49:f6:95:90:ee:98:a2:64:7b:
         3b:9e:91:c7:08:64:9f:0c:09:0d:49:13:14:e6:88:20:70:f6:
         87:d9:07:0a:80:27:30:a0:2b:f9:7d:c4:19:83:6a:2b:f9:73:
         13:8e:b8:51:29:3a:c9:0c:94:41:00:e2:9d:08:50:aa:3b:d8:
         3e:ef:a0:38:67:0c:9f:4b:00:2f:2b:a1:d6:79:8e:1b:32:0e:
         6a:c6:7d:7b:e8:4c:72:7c:1b:93:5c:37:71:11:f6:fb:9d:db:
         32:8d:d4:8f:54:a2:bb:d9:36:3f:72:06:c4:0f:6a:40:a1:9b:
         06:ec:9f:61:7e:c9:d3:42:50:97:e4:37:d9:ce:c7:be:00:b5:
         55:60:76:cf:3a:ed:a7:9a:a5:bd:ca:a6:09:49:21:4a:00:c1:
         33:45:1a:7a:1c:b8:98:92:96:53:d3:11:4f:76:96:48:ed:0d:
         8f:14:b9:dc:4c:2b:f0:fa:c8:37:f9:e1:83:41:7c:60:9e:b3:
         e2:4f:0a:a1:0f:28:c7:81:4d:49:4e:31:e9:1d:6d:22:49:01:
         c1:1b:f2:9c:d3:10:cd:98:ae:88:f1:9e:88:50:04:db:ab:5f:
         fe:b0:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:29 2024 by rpki-client on console-fra.rpki-client.org