Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          PojeVLI9TN/IFIwqDwei3EH8xZ73nnh6QY1HKb1HAKE=
Subject key identifier:   63:52:B9:1D:CF:B9:CE:5E:53:2D:30:23:92:53:67:20:86:01:67:5C
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       019356F73A199ACCB396A5D6607DE2002958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          0159
Signing time:             Sat 23 Nov 2024 03:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:03 +0000
Files and hashes:         1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: lpb/LPW8HYT1LrnHNrf3vZv3KKjKcL5NmfHsuYYPce0=)
                          2: BMUaOd9B0fDH5y_4hFsCE2vfjq8.roa (hash: dsqqMecITajuvsNc74H0R1kCWegFHZbKCcuROOuqQCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:3a:19:9a:cc:b3:96:a5:d6:60:7d:e2:00:29:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: Nov 23 03:01:03 2024 GMT
            Not After : Nov 24 03:01:03 2024 GMT
        Subject: CN=6352b91dcfb9ce5e532d3023925367208601675c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:06:c8:32:2c:5e:37:c7:bc:e6:ff:4c:b3:
                    bd:4e:de:10:a6:da:31:27:26:9f:d4:47:b2:69:15:
                    0e:a9:3e:ba:73:c7:d4:22:70:ed:f6:27:19:27:f8:
                    cd:37:63:33:18:2b:0f:09:fa:78:7a:b5:c7:e1:79:
                    88:a5:35:3a:78:57:57:75:a5:8d:46:1f:62:93:63:
                    ed:05:8c:f0:7d:ba:b8:4a:db:ab:15:0b:8f:8f:ec:
                    d0:7c:8d:bb:79:d6:e7:3b:70:90:04:02:6f:e5:3e:
                    c0:e3:45:ca:fb:c0:f6:f7:dd:66:a5:3b:2b:02:4c:
                    a4:0c:45:10:44:1a:7a:0f:34:f1:d1:62:e3:45:90:
                    b8:b9:1c:81:04:42:17:84:0d:ff:cc:58:71:df:7b:
                    8d:7f:fa:56:9c:09:f7:b1:c8:26:dc:89:16:b5:17:
                    d3:d8:cb:1e:ea:2d:4a:37:52:e1:c3:40:31:a8:62:
                    41:fd:06:ac:77:eb:9f:b3:62:02:9d:d4:a6:94:92:
                    b6:33:b8:71:8f:52:a7:51:a0:4f:a9:cb:93:76:c4:
                    e8:75:83:51:6e:50:b6:7d:cd:79:a2:dc:b6:2b:8a:
                    8c:81:18:b6:a4:1f:a4:51:54:e1:c0:57:b8:18:46:
                    16:a3:98:5b:49:51:6a:91:c2:46:55:6e:3d:31:42:
                    d3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:52:B9:1D:CF:B9:CE:5E:53:2D:30:23:92:53:67:20:86:01:67:5C
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:9e:62:9c:28:1f:e9:50:be:58:ba:b4:17:5d:92:f6:f1:
         8d:7b:fe:a2:9e:f2:39:9c:f8:72:e0:a4:d8:06:dc:ba:7d:fa:
         95:bf:77:0d:0b:1f:4d:b5:0a:e7:4a:e0:eb:3f:fc:8c:19:bc:
         cf:0d:d9:9a:4d:25:d5:29:1b:16:fa:41:1b:74:dc:2b:b9:57:
         b0:d2:dc:9c:8e:79:a8:bb:ea:49:06:55:e4:fa:25:f4:0c:84:
         43:c7:da:80:50:9c:77:0a:fd:cb:6c:4c:d5:5e:57:45:ec:4d:
         87:ed:6e:00:b1:fc:fb:4a:d7:e8:76:5a:43:7a:fb:da:11:e6:
         60:64:06:58:5a:c6:7b:53:4b:b1:19:83:42:22:7c:f3:d7:44:
         ac:b6:b0:1d:79:f4:ae:8b:58:69:92:6c:26:dc:16:e0:3d:2c:
         e1:37:9d:7a:26:f7:52:06:1e:f4:b9:cd:22:3a:31:73:95:6a:
         f8:f7:58:30:47:b0:42:96:fc:b2:d3:30:b2:72:e6:84:6f:b4:
         cf:13:c8:89:a5:e0:94:5b:7e:2d:7d:05:15:f8:e0:7a:4f:0f:
         29:1a:88:74:7f:00:c3:03:50:8d:37:93:6b:76:2e:cf:0a:c2:
         78:85:2c:7e:e3:c5:f8:fe:d7:ed:c3:b8:b8:61:2b:9c:56:a1:
         fe:7e:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:20 2024 by rpki-client on console-ams.rpki-client.org