Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          22j2ClewgNv4vhe/72PhprE8Uh0H+Us5bX9s4OUONhM=
Subject key identifier:   2E:42:F3:C2:3D:0C:96:1B:49:32:63:84:F5:8E:2D:B5:89:8F:12:D2
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       0192F09C996547B3200DF20AC3C4EA3C7BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          0124
Signing time:             Sun 03 Nov 2024 06:00:47 +0000
Manifest this update:     Sun 03 Nov 2024 06:00:47 +0000
Manifest next update:     Mon 04 Nov 2024 06:00:47 +0000
Files and hashes:         1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: gRE5nY08gNlMuyR54ozlthJVhVk/vIN7+tj5q4CPCkA=)
                          2: BMUaOd9B0fDH5y_4hFsCE2vfjq8.roa (hash: dsqqMecITajuvsNc74H0R1kCWegFHZbKCcuROOuqQCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f0:9c:99:65:47:b3:20:0d:f2:0a:c3:c4:ea:3c:7b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: Nov  3 06:00:47 2024 GMT
            Not After : Nov  4 06:00:47 2024 GMT
        Subject: CN=2e42f3c23d0c961b49326384f58e2db5898f12d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b8:c4:91:16:a6:ce:f3:d2:7e:e6:1c:46:90:
                    f2:f2:f7:0f:a8:15:a6:ef:73:fa:3a:11:36:83:16:
                    63:ac:25:77:be:52:b2:89:26:a2:d3:89:a2:84:44:
                    82:e0:0d:ab:53:7e:1e:73:9d:14:b1:19:5a:79:46:
                    01:e6:23:37:82:4c:73:5e:8a:a7:b7:ce:2d:cb:5e:
                    64:bd:78:46:2d:1d:03:6b:87:56:86:f1:c9:f5:e4:
                    02:8c:28:de:0e:31:ec:0d:c7:36:96:38:a9:7d:c5:
                    d0:62:08:07:eb:bb:5d:0b:5f:d8:dd:40:99:f8:26:
                    f1:e4:9d:7d:19:14:aa:87:ae:74:f8:43:36:cf:3e:
                    dc:d1:f1:9e:71:d2:09:0f:78:7f:9b:1f:51:90:ca:
                    10:4e:b5:7d:37:7b:4b:18:e9:95:e0:15:8c:49:63:
                    ec:40:e0:a0:cb:00:f4:61:5c:64:01:a4:a3:ad:8f:
                    c2:69:33:e1:2f:e0:6d:ac:26:c5:fa:ce:34:56:03:
                    f0:e7:7c:e7:f7:5c:72:b9:71:fb:8f:d5:91:14:2f:
                    f8:ee:e7:8c:13:ca:f4:f5:df:8d:44:21:67:bb:10:
                    dd:18:23:f1:25:54:54:26:ab:db:8c:21:ea:8f:8a:
                    31:a2:ee:a8:fb:c9:25:06:39:88:62:63:bf:64:3f:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:42:F3:C2:3D:0C:96:1B:49:32:63:84:F5:8E:2D:B5:89:8F:12:D2
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:8a:57:19:d1:2a:3f:5e:a6:8a:95:04:25:b4:5c:6d:e5:bc:
         81:b5:a5:60:23:d0:5c:17:89:00:59:22:8a:b7:35:ff:d6:df:
         b3:be:45:f8:ac:22:08:a5:8d:46:b1:b4:b5:97:65:d7:cf:37:
         29:ef:17:32:17:09:35:0c:ae:c9:79:54:ba:4b:08:f0:1a:27:
         91:9e:bf:cd:aa:38:20:75:9e:dc:a9:c4:42:19:dd:dd:f0:72:
         7f:2d:a0:64:4d:8a:2c:31:df:82:3b:51:92:27:70:6d:3d:b6:
         04:aa:11:e2:0e:cd:6d:30:04:79:71:5c:74:67:bd:9a:c2:7a:
         00:09:3e:41:5b:08:e0:dc:8c:5b:6e:b8:90:38:80:aa:a3:39:
         50:3d:e3:46:83:b2:c3:6b:19:96:36:51:d0:09:e8:66:5d:be:
         e8:26:e9:5c:11:d6:a9:22:60:44:6b:43:f9:2e:70:45:52:c0:
         65:d0:4a:52:72:6f:a8:e5:6a:55:4b:4b:15:ec:51:ab:d5:42:
         94:65:1d:25:f7:ed:cf:0c:a7:78:4d:11:e6:92:4d:58:cf:34:
         5d:9d:49:2a:6e:04:b4:8f:79:6b:14:f8:74:ce:77:6e:f2:99:
         c6:a7:0d:07:58:b7:10:73:fe:fa:19:4d:17:13:8f:dc:f1:cb:
         53:c8:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:28:39 2024 by rpki-client on console-fra.rpki-client.org