Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File:                     704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier:          xm4ZZPiRMClzuLxhfzB3PCZfipLiDqyeVeLUUHfSv+Q=
Subject key identifier:   E1:CE:61:A7:1A:AF:69:9A:34:FE:B1:C1:AE:77:7B:1B:BF:1E:15:88
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer:       /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial:       019355088EF025EA3E34D63496D0F00112BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number:          0285
Signing time:             Fri 22 Nov 2024 18:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:44 +0000
Files and hashes:         1: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: 5reX+s1o+/0wZaVH6tP8Aa8wj6rC0RxFl/logfY3q/M=)
                          2: ikbS_HKMwPSlg3MbxLYJZmBMNfk.roa (hash: xQnzNYA7fV/5hC/1x7Sjg4rqjdZ4jj0P+/his4ijUe0=)
                          3: tFvDvjrNx-hGqJMWJ5GGjlGCjj0.roa (hash: 43MOWNxj1i3du6uFljH5KohoFMTLyoc7MPDaEdexui4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:8e:f0:25:ea:3e:34:d6:34:96:d0:f0:01:12:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
        Validity
            Not Before: Nov 22 18:00:44 2024 GMT
            Not After : Nov 23 18:00:44 2024 GMT
        Subject: CN=e1ce61a71aaf699a34feb1c1ae777b1bbf1e1588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:30:8d:8c:1d:7c:e0:b0:19:78:e3:9c:14:
                    31:14:7f:0a:a8:f2:55:c7:d7:d1:2c:e2:88:3f:33:
                    21:05:30:16:72:f2:27:a6:f1:27:eb:b4:eb:a3:0b:
                    a3:2e:68:cb:09:c4:e4:ed:ef:bd:06:5a:be:0b:1d:
                    e9:50:64:42:39:5b:e8:16:af:95:9a:46:24:2e:0a:
                    a1:4c:39:5c:23:7b:ad:d0:72:72:a8:27:7a:c3:3f:
                    63:9f:b7:a4:cc:4d:7e:27:1f:2f:a8:eb:ce:46:64:
                    f6:af:4d:95:c3:3a:2b:b8:9b:1b:ec:61:d3:e3:4f:
                    0e:13:0d:e0:8d:83:44:34:21:68:76:fb:13:e0:6e:
                    e9:bc:ae:d5:95:75:fb:5a:78:fa:3b:ac:6d:fe:20:
                    59:ea:ab:1f:0e:60:49:cb:2f:0d:be:ee:ae:e2:6a:
                    63:b6:5a:28:7d:f1:13:f2:5f:e7:63:94:6d:f4:fb:
                    a2:5c:b1:ef:0b:b9:6e:6c:6d:27:2d:b0:58:85:fd:
                    4f:51:59:22:4b:fb:de:27:0d:1e:df:73:48:c4:2e:
                    62:ce:02:8e:53:84:2f:be:26:c0:b0:15:06:4b:b1:
                    c1:ac:7b:f7:c1:f2:73:3b:b3:50:5d:2d:90:29:e1:
                    81:ab:cc:60:57:a2:23:18:7f:07:62:ee:a9:59:f8:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CE:61:A7:1A:AF:69:9A:34:FE:B1:C1:AE:77:7B:1B:BF:1E:15:88
            X509v3 Authority Key Identifier:
                keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:70:27:dc:62:28:75:d1:c9:dc:d7:90:08:2e:90:18:c5:47:
         e6:ca:b5:61:c4:89:76:bd:7f:68:e6:21:a6:50:25:fe:1a:c7:
         b9:64:6a:93:21:8f:cb:52:f5:0c:71:a3:08:06:10:d2:64:ab:
         65:f0:79:24:d5:50:bf:f3:72:fc:54:0a:98:65:c2:df:43:6e:
         2c:fb:80:6c:8a:79:ab:02:26:a8:6e:f0:b0:5b:85:1d:30:5a:
         1e:21:d1:60:49:80:a4:eb:ad:e1:b1:7d:c5:3f:9b:e2:c7:d7:
         0f:7c:0c:4e:d5:8b:09:4e:e4:4c:3d:ae:db:a1:c8:76:cf:8f:
         1a:76:00:74:17:63:e6:eb:0b:29:17:23:7a:bc:d2:67:48:87:
         19:6f:f5:81:dd:f4:c7:91:12:f2:03:4e:30:84:e4:35:4d:1f:
         cf:72:7b:00:3a:8a:0b:50:37:89:1b:8a:06:30:21:b4:c9:43:
         78:76:dd:64:f9:c1:5d:7b:96:23:46:ad:8a:da:78:16:c9:db:
         2f:a8:4f:0b:ed:bf:7f:05:9a:f8:32:76:bf:7c:b5:cf:92:29:
         51:bf:83:0c:d0:3c:12:a2:3d:db:ec:69:a9:dd:32:7b:66:cc:
         0d:e5:8b:e1:b2:5d:96:da:7c:1b:d8:34:26:02:92:71:bd:69:
         de:df:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:14:32 2024 by rpki-client on console-ams.rpki-client.org