Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          llQJM0XUGwU7aoPtgdq6WvYVoriX/seD+sBiJk+7s0Q=
Subject key identifier:   B4:16:4E:1D:A1:30:58:85:C8:0C:76:D0:45:02:5B:2A:53:0D:64:E0
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0193655789376A8AF787B809F5C4281D1056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          13A5
Signing time:             Mon 25 Nov 2024 22:00:55 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:55 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:55 +0000
Files and hashes:         1: NdSpJ4XYuJod2OWjMPxiXgOcw1M.roa (hash: MW8VqP19npNGZ0bZLadX0cAR6KWcVntPfqJTJFqZxVI=)
                          2: Q9xRecjMfex9Gqb0iWhpzHj176g.roa (hash: EfAXd3qPg95T2J/dgz7CHYA7M7YcXvoP2KswehdpefM=)
                          3: UPapl0YsuhTUsstjq5jDOgAjGgc.roa (hash: 3tPE9fRRxN/ZESy7TNJrj8FfJNUCI2KYAzFqAJ267sk=)
                          4: hkseXHGh824TKAvw6PhZ6rP0E7s.roa (hash: 5B+qCYTg5X4Pz04l3/yVe70ByxEwmRKTfDtC5O/oO0o=)
                          5: idYm34DBDg_vKUR9iabxAciq5kg.roa (hash: txyxK1IniPfYhJb5JlXLYnxCKjFnyem2lgHHC9TPX4c=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: 8s5aBfOQTPeMx0I1K5VFNjhOfBaPufifiC0ILBaWKKc=)
                          7: l4bdfPLLw2a9WyG2Pz_NdxSz8bM.roa (hash: 9D6IT6oA/DTofEMEWHs/AVm6Qmgue0JDBYCbWOZ8M78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:89:37:6a:8a:f7:87:b8:09:f5:c4:28:1d:10:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Nov 25 22:00:55 2024 GMT
            Not After : Nov 26 22:00:55 2024 GMT
        Subject: CN=b4164e1da1305885c80c76d045025b2a530d64e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:53:98:e6:4c:6c:b2:50:a2:f5:42:cd:50:
                    9c:10:22:18:36:73:42:ce:95:8f:8e:7c:a8:06:65:
                    b9:da:b5:80:84:23:67:62:0b:92:50:0f:cd:e4:da:
                    4d:fb:48:ff:da:5c:2e:32:02:28:bc:5e:4a:b0:b3:
                    54:03:dd:0d:f1:e3:0b:46:74:e7:72:53:c8:05:1f:
                    66:9c:52:de:a4:9b:5b:91:1a:58:cb:a9:9c:92:82:
                    66:36:27:ac:06:87:2e:4c:7c:95:7b:be:5e:8f:99:
                    b6:a3:f5:87:b8:51:af:5d:6f:55:1b:2b:9e:d8:0d:
                    84:f8:6a:f1:9b:64:1b:92:37:da:aa:b3:77:a1:e1:
                    99:22:08:70:4a:ac:55:27:42:df:ec:37:2e:5f:a9:
                    aa:78:58:3c:b3:ea:f3:62:88:fc:db:2e:8b:d2:ff:
                    4e:22:be:5c:65:19:32:ff:c6:8c:e2:a8:bb:0f:a2:
                    93:b7:e5:85:fc:a7:c4:41:55:07:12:79:1b:c0:b4:
                    78:a4:83:73:a6:11:03:2d:cc:b8:cc:fd:20:db:92:
                    a3:9f:ad:85:f1:80:ac:88:d4:72:82:36:90:97:14:
                    24:47:e1:c5:d2:7e:f5:71:22:40:b8:4e:20:98:d1:
                    89:85:8f:18:3b:39:f1:62:05:ee:cb:5d:1a:f6:df:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:16:4E:1D:A1:30:58:85:C8:0C:76:D0:45:02:5B:2A:53:0D:64:E0
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:21:fe:b4:2e:7e:79:5e:4a:20:44:f6:2e:e5:43:99:2c:41:
         46:ae:72:a0:6b:a0:4e:39:a7:6b:5e:1b:09:c3:9a:de:a2:f3:
         e1:57:7b:ff:61:51:df:7a:6f:a9:56:b5:81:c9:9e:ac:70:67:
         02:c8:1d:25:b7:4a:04:7c:a1:96:2b:6b:4e:5c:25:74:84:49:
         06:99:ca:f7:17:32:56:ba:6c:3f:4f:2d:33:e3:fb:b0:5e:c2:
         64:5c:7e:c9:69:79:0a:c5:7f:5f:4b:0c:a5:15:88:d4:11:93:
         38:cf:1a:ad:07:4a:f1:67:9d:e7:fb:8b:a6:d7:b0:1c:b1:6b:
         56:e5:93:c6:0b:ac:76:3b:62:a2:65:dc:2d:77:31:41:73:da:
         73:88:e1:7f:4a:37:24:12:44:50:aa:49:77:ee:64:54:cd:10:
         78:8d:1f:70:ba:2c:64:2f:3c:65:54:e3:36:64:05:7d:ca:7d:
         36:c3:51:66:1d:df:be:4c:a6:9e:b8:b3:a0:d2:b2:11:67:8c:
         c3:7b:16:81:03:1a:a1:80:69:23:2d:3e:97:cc:28:e1:4a:fb:
         20:fa:5c:98:66:0c:84:59:be:56:d6:56:5b:51:24:44:27:01:
         4b:48:91:70:e3:eb:d6:98:74:18:50:3e:1a:d3:16:27:fd:c1:
         b5:6e:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:50:37 2024 by rpki-client on console-ams.rpki-client.org