Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
File:                     eVoYZBqRazBgdNHhH9CxDp39xDA.mft (raw, json)
Hash identifier:          je/+vnKILZ5mBln30f6ca3SjKlXB5T5dYaHmJZ1vyU0=
Subject key identifier:   0A:13:1A:0E:C1:BD:F6:35:53:F6:8A:F9:7C:0A:3F:1F:CE:C1:75:B4
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Certificate issuer:       /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial:       019356F6BE8818C7E4EC07A05EA4F1CCA151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
Manifest number:          0576
Signing time:             Sat 23 Nov 2024 03:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:31 +0000
Files and hashes:         1: QE91P7FhBRPqqABVZQnH3EQFI4M.roa (hash: cJq1C6Ip/zMBt1IrgVNgw6MqMY5hZOSTQyE+rkx5VU8=)
                          2: eVoYZBqRazBgdNHhH9CxDp39xDA.crl (hash: f/0UEqksPrjZiAPgtGmG4a3/A1x8QS5uqJ4tKCiWMOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:be:88:18:c7:e4:ec:07:a0:5e:a4:f1:cc:a1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
        Validity
            Not Before: Nov 23 03:00:31 2024 GMT
            Not After : Nov 24 03:00:31 2024 GMT
        Subject: CN=0a131a0ec1bdf63553f68af97c0a3f1fcec175b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:08:6e:89:23:3f:02:d8:a8:3d:90:bf:bb:
                    91:9b:59:3b:a2:16:01:82:2c:9b:46:e3:7b:b3:70:
                    96:1d:6f:67:73:0b:c0:ce:6b:48:77:f0:93:6e:8a:
                    e9:e2:b2:08:32:d3:75:a1:b3:05:4a:8d:0c:c8:5e:
                    15:de:f4:48:61:a7:ae:3f:43:96:83:c4:4e:0c:e6:
                    4a:36:8d:6e:31:bb:63:f0:17:f7:ee:25:08:82:8b:
                    10:55:3f:25:5b:be:6c:cd:1c:74:0f:af:eb:01:f4:
                    f6:ea:9d:de:a8:6e:86:e6:c4:82:2b:20:14:bc:36:
                    3e:15:ca:7c:88:17:c7:9b:ea:1d:37:e4:05:df:dd:
                    54:e4:22:93:8d:36:79:47:1c:81:7d:3a:d0:08:e4:
                    76:51:79:ea:e7:d6:82:f7:35:bb:61:ca:15:d5:1c:
                    41:91:76:42:5e:3a:97:ef:de:7c:70:bc:b9:b0:1e:
                    65:63:bf:41:14:e9:c1:25:d2:25:22:34:70:46:b9:
                    63:f9:44:5e:7e:e8:68:4f:a7:48:92:0b:90:2e:fa:
                    c3:79:47:e2:d2:f6:8c:2b:d1:1a:16:bb:3d:13:83:
                    c8:3d:57:38:68:1a:0e:e3:d7:e6:3a:46:3d:35:f8:
                    09:3e:a8:21:17:77:d4:8d:86:78:fb:1c:07:a9:e2:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:1A:0E:C1:BD:F6:35:53:F6:8A:F9:7C:0A:3F:1F:CE:C1:75:B4
            X509v3 Authority Key Identifier:
                keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:4e:27:04:46:3f:72:2f:c7:fc:e1:be:2e:d0:e8:55:f1:
         f3:40:c9:15:35:76:10:e7:9f:65:ef:b9:96:e3:3b:07:6c:6c:
         01:75:99:44:73:b5:55:ad:6f:b6:db:8e:70:fd:68:74:ca:9a:
         3a:c3:69:09:e1:f7:d6:f7:f2:32:aa:24:ea:a7:b5:e8:73:7d:
         82:d8:78:02:99:4b:7c:5d:f9:94:1b:64:ab:71:f7:94:a0:26:
         f3:ec:ad:ad:26:8f:37:b1:19:13:2f:68:0a:f0:95:49:73:63:
         32:4f:c5:04:d0:0f:e3:6b:13:15:24:ea:81:fa:bc:3e:3e:73:
         de:9e:ff:0b:95:b3:da:32:b7:f3:88:b2:15:d4:9d:a3:6b:23:
         94:66:c6:ba:88:d7:07:c1:53:9a:56:00:d6:71:08:04:cd:80:
         34:02:f6:fc:10:24:36:dc:46:77:b5:77:70:ae:5c:00:6a:ef:
         4d:6e:24:f5:e3:ec:f2:35:f4:eb:09:76:cb:b3:12:5d:1d:a7:
         2d:38:1c:31:47:27:c9:e7:22:bc:f9:fc:d6:12:9e:a5:a7:2b:
         d7:8f:9b:8d:bc:a6:a7:dc:11:43:30:48:38:83:fb:91:9c:6d:
         6e:5b:26:1b:d7:b4:9b:ff:d3:7e:d3:0c:2c:35:6f:68:fa:08:
         1c:4f:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:51 2024 by rpki-client on console-ams.rpki-client.org