Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
File:                     5L3Wsev8lYmaWDM9yUz4Khmms74.mft (raw, json)
Hash identifier:          z+wtnPPV7NjX0alSEojQboTA54PgqfYBUDiLk7y6SJM=
Subject key identifier:   1F:11:15:37:E5:11:3A:56:DB:5D:75:B9:AD:BF:1F:74:BD:B3:29:AF
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Certificate issuer:       /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial:       0193598A438B4C7FA6B6CA3EE1E452E8A7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 15:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:53 +0000
Files and hashes:         1: 5L3Wsev8lYmaWDM9yUz4Khmms74.crl (hash: H7eFrXY/e8e8WE3z/I2L0Z0NhbXo8RzmdgnwmAfsIaE=)
                          2: A8ZamxFiefAYo3OuaL2EjivsQak.roa (hash: 1fFb39Z6VlihVCxpfhnP+SXiy2wF5/qpoTG2WZjaxeI=)
                          3: d9c-uzH88-miU1xZMhw7Fongcaw.roa (hash: rgXyxH4QE1acioDU9dJ/KbtOIZ9cSDqILuSujqNQ/PU=)
                          4: oN9bLxViS3H9h679xqkIa0XAt5U.roa (hash: LnvXrcyDZQy0JxC38lDk0YL0oUi+2JnuVVgYO49U7g0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:8a:43:8b:4c:7f:a6:b6:ca:3e:e1:e4:52:e8:a7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
        Validity
            Not Before: Nov 23 15:00:53 2024 GMT
            Not After : Nov 24 15:00:53 2024 GMT
        Subject: CN=1f111537e5113a56db5d75b9adbf1f74bdb329af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:69:14:de:9e:57:f8:7a:89:ed:62:81:78:
                    2f:e2:36:e5:d5:42:33:00:31:27:85:cb:e8:e4:50:
                    0a:f4:13:a1:04:eb:96:49:7d:cd:17:a6:48:3c:21:
                    61:fa:12:00:ad:70:a6:40:e5:9a:27:37:63:21:92:
                    f3:97:cd:57:2d:ff:76:75:cd:6b:f0:89:d5:9b:da:
                    9d:77:57:1c:bf:38:ad:3e:cd:b5:c8:59:e4:c7:e5:
                    fd:0f:bf:e3:94:0f:fd:90:30:97:ed:27:11:fc:02:
                    d1:b0:81:92:df:20:dc:b1:01:6c:32:4c:3a:c7:61:
                    7e:c5:aa:89:9d:b6:9f:7e:18:1a:a3:c6:4e:69:90:
                    b1:2b:a1:ec:8c:05:55:27:cf:30:88:7a:ce:5f:a3:
                    c2:d5:f4:7a:0f:97:47:0d:38:48:5d:12:31:48:0d:
                    a7:04:28:ef:b7:eb:a9:b1:d3:ff:df:9e:9b:31:32:
                    5d:00:33:7d:14:13:fa:91:4f:db:93:f1:5b:47:ff:
                    07:1c:b9:5b:25:74:f6:c8:a4:18:94:fb:96:4f:7f:
                    1c:80:16:41:9e:8a:a8:4c:a7:d5:32:13:4b:08:4a:
                    27:a9:9f:19:f4:7f:55:30:5b:dd:f8:24:ce:ba:90:
                    1b:db:bb:d4:ab:c2:08:54:2e:68:b3:69:c1:6d:1d:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:11:15:37:E5:11:3A:56:DB:5D:75:B9:AD:BF:1F:74:BD:B3:29:AF
            X509v3 Authority Key Identifier:
                keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:41:ff:f4:38:62:a8:7c:c8:b1:20:c7:cc:ab:eb:a7:26:95:
         18:c4:97:c1:1a:ff:bf:86:f0:95:1d:4a:c3:d9:92:a1:92:f0:
         0f:7f:3a:a7:13:09:6b:dc:e2:27:6e:64:8a:25:e0:b7:44:0c:
         45:fc:01:7b:49:d7:2d:9c:d1:ff:86:5b:ef:60:26:a7:cd:7c:
         9c:af:8a:6f:cd:b5:76:b0:08:5b:0f:a5:f0:fb:d9:66:98:4a:
         1f:ea:f8:4e:8b:79:0f:5f:83:96:ae:71:d0:b1:05:b3:22:c8:
         9f:de:47:63:e2:15:a4:ff:88:c8:18:08:c9:de:33:38:df:25:
         74:f5:4c:e8:a7:2a:61:80:66:61:3f:2d:e0:15:18:b1:8c:25:
         dd:83:b9:c7:36:24:4b:86:06:e0:47:91:c3:5e:74:94:7a:b5:
         16:1c:14:09:55:0f:a1:2d:5e:0a:0c:54:a4:01:23:06:e8:4f:
         d3:f2:e8:60:4c:fb:98:d3:87:ad:d1:4a:b2:68:09:11:92:86:
         cd:a5:be:e2:5d:18:bc:99:a3:5a:f2:e8:86:05:92:9f:72:04:
         19:91:d8:40:e2:8b:f3:7b:9e:96:2a:22:f6:be:51:53:63:ae:
         08:e3:71:1a:f2:f9:0e:50:f6:6c:76:59:ba:1f:60:f3:d6:bf:
         22:a0:be:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:28 2024 by rpki-client on console-ams.rpki-client.org