Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
File:                     Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json)
Hash identifier:          uKvabI8Ywk+xd11NvWoFNCwRs8hW/wb0I7NwxC7k9hA=
Subject key identifier:   81:C2:75:A1:E4:8E:DA:14:48:AE:5C:D9:5C:07:63:07:11:02:7C:FB
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Certificate issuer:       /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial:       0193579BF12A5698F36B2A3B216F9194C733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
Manifest number:          083C
Signing time:             Sat 23 Nov 2024 06:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:57 +0000
Files and hashes:         1: 2EIzexQ0O1e6OAwkqoEqc-hS4eI.roa (hash: 9XBVWOg6AwbDq5K8di/+/ApXibs9CxjFDJ0FbrXspZc=)
                          2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: /iPxpJkePdhL5W26MpjhLVp3G7SAu1+olu8qy2jxWXE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:f1:2a:56:98:f3:6b:2a:3b:21:6f:91:94:c7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
        Validity
            Not Before: Nov 23 06:00:57 2024 GMT
            Not After : Nov 24 06:00:57 2024 GMT
        Subject: CN=81c275a1e48eda1448ae5cd95c07630711027cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:36:67:67:92:10:c7:02:4b:e9:17:1c:f5:
                    46:f9:0b:74:e5:99:a6:f7:02:1f:e2:49:99:4f:2c:
                    e1:c4:fd:27:a1:b2:28:6e:dc:58:b5:8e:32:14:25:
                    e4:ea:4b:80:47:e4:8b:59:ab:69:0c:4f:68:ba:bc:
                    9f:ee:25:e6:cd:8f:d9:a9:c3:8f:55:d6:50:0c:eb:
                    2b:29:b2:96:83:a0:88:ee:63:a1:6d:e5:1e:6e:ba:
                    a2:54:9b:eb:77:d0:66:6c:e2:ad:c6:c6:cc:b6:7b:
                    e6:8d:3c:04:6b:94:f5:73:a4:ca:c9:f8:8d:21:41:
                    e6:d0:7e:96:55:44:46:18:50:48:ee:c2:9b:f5:0b:
                    ff:8a:d5:5e:52:b3:c2:da:1d:bb:2f:5b:39:96:6d:
                    6b:66:79:66:46:53:30:dd:f4:d5:50:8b:59:a9:42:
                    d5:89:90:8a:3e:2b:2a:2d:37:cb:e5:e4:b6:7a:0b:
                    a7:3d:41:6e:ef:d1:4c:25:f7:08:66:4a:67:29:cd:
                    3c:34:be:98:30:37:56:81:03:0b:34:9f:14:3e:0a:
                    74:2c:90:be:1d:b7:a7:04:10:ad:86:35:93:c1:05:
                    02:3d:18:61:04:c8:ef:a9:70:05:0a:34:a4:80:fb:
                    ca:09:95:7e:13:c9:9d:d9:2b:df:fc:eb:fc:e0:9a:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C2:75:A1:E4:8E:DA:14:48:AE:5C:D9:5C:07:63:07:11:02:7C:FB
            X509v3 Authority Key Identifier:
                keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:33:06:e1:82:b9:e0:0b:8d:c2:e3:2c:04:63:f1:bd:ba:ff:
         d8:e9:78:57:66:e4:c9:95:0f:43:00:6f:12:31:a6:8f:24:67:
         ff:f9:be:63:cf:39:53:c7:0d:fb:2e:21:25:72:94:f9:d8:73:
         9b:7b:79:28:dc:2d:80:d3:3b:48:0d:f4:ae:56:e0:ee:62:7e:
         b5:e0:7a:73:83:72:0c:5f:57:8f:ee:00:02:ab:f2:e4:58:3d:
         30:0d:6c:2b:ed:45:89:6e:5b:3d:5f:ae:db:8d:12:1f:c1:cf:
         89:e3:1e:7c:46:78:c7:7a:75:c0:be:cd:8f:0f:77:60:2c:4e:
         fc:80:b7:b2:37:17:bb:1c:8e:03:74:2b:99:f3:b6:c6:6f:2b:
         2c:5d:2d:cf:d3:88:10:1c:00:fa:55:a4:09:44:51:62:33:d6:
         2a:1b:5a:87:48:39:cb:b5:5f:4c:5a:04:0a:a1:4c:1e:da:f9:
         04:fb:1b:35:36:c9:55:7e:e7:fa:0a:ab:76:25:31:1b:eb:c9:
         fa:cf:0a:03:ea:6c:6d:7f:df:a0:f8:57:2c:e0:7b:15:35:2c:
         9a:2a:cc:ae:d4:4f:5e:9c:1f:54:5e:74:cb:b9:43:54:a4:56:
         e1:f4:b4:6e:39:d1:f3:ed:68:32:9d:21:a9:35:7d:7f:8f:58:
         ae:08:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:26 2024 by rpki-client on console-fra.rpki-client.org