Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          bcx7yTObj/A6YhxL5AkvDVbAwPQbnScDS8MfaUpu4zc=
Subject key identifier:   C1:10:52:D3:D3:10:13:D3:24:5F:A5:33:5E:FF:30:F8:37:97:77:CB
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       019351628C575CCAD4177ACA7480B5063430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          0E51
Signing time:             Fri 22 Nov 2024 01:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:32 +0000
Files and hashes:         1: M_d2Kh6Ca1TRQXO9NP-3v9PR3jA.roa (hash: qLLe/B/cRKjLVL0b+lK/xu1RvDI6u2VKb2zILLVIAHU=)
                          2: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: 2EbIpOgS4G1ErYoLs0AiSmXLBffwDZNlsZi3/x4Rvvo=)
                          3: TZ9HHR7bGQRjDsbDdsLsls6wyfQ.roa (hash: nmiNDw0mlTS2GRoWIUmEprwYMFwKPaGYKoguqpTNKuo=)
                          4: Z2JmVlcZ5ETaPcpqRYotg3uDctY.roa (hash: +swLJ43pjjAD6Z9rHPw5YoBeeo080blyujraqkrt70M=)
                          5: s8OMML9zcdY9bd1pRXlcrq1ftT4.roa (hash: jYzRc9QQIybIwaWR1aK5jXMtdD0FUISOUCQnFE7tJ1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:8c:57:5c:ca:d4:17:7a:ca:74:80:b5:06:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: Nov 22 01:00:32 2024 GMT
            Not After : Nov 23 01:00:32 2024 GMT
        Subject: CN=c11052d3d31013d3245fa5335eff30f8379777cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:f5:e2:6e:ce:aa:d4:14:b5:fd:11:96:3d:
                    e9:c0:3f:2e:a9:e3:e7:e5:0f:e3:49:e2:d7:cd:fa:
                    51:e0:aa:84:e0:45:ac:68:67:84:ff:07:f8:ab:85:
                    23:81:fc:b0:66:f7:94:bb:89:5a:3d:3b:f6:0e:81:
                    5a:88:82:75:a3:d0:2d:72:cc:05:47:3d:43:65:19:
                    24:78:82:db:35:63:c1:aa:07:59:ab:25:1e:0e:91:
                    7a:5b:1e:91:c2:76:35:33:2e:54:90:29:3a:68:0a:
                    98:ca:e0:86:de:a6:ad:1b:0a:32:a4:43:04:ca:6c:
                    79:c2:15:89:32:29:aa:3f:b9:5b:f3:e2:cc:8e:3d:
                    e5:95:fe:0e:49:61:e1:e2:63:76:ad:12:59:ec:ff:
                    72:7c:75:fa:f7:f5:39:91:5b:be:53:f3:11:64:c0:
                    47:b6:c7:44:a6:2c:3a:7b:9a:aa:b3:f5:d4:2a:3d:
                    46:70:1d:a4:31:aa:1f:cc:2b:82:ca:8d:f9:73:ca:
                    69:2b:f8:e6:3f:93:3d:47:c6:bf:1b:4d:12:8a:52:
                    9e:0a:2d:84:03:e2:c0:87:f4:94:fa:99:8d:bc:45:
                    9f:d9:e7:d5:25:b8:2a:19:bd:b2:f2:d3:c6:33:d9:
                    78:19:6b:4f:64:1e:cf:46:73:ce:66:2e:de:e1:16:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:52:D3:D3:10:13:D3:24:5F:A5:33:5E:FF:30:F8:37:97:77:CB
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:15:03:b7:4f:46:fa:af:00:20:3f:fb:67:61:9f:4d:9b:ba:
         64:8d:f4:63:7d:59:0b:3b:61:dc:43:45:b8:b8:4c:61:91:68:
         4d:44:0d:cb:f1:61:65:af:87:6e:76:7a:7e:66:96:07:b0:b3:
         94:b7:36:dc:1e:44:09:76:72:79:3b:ec:02:af:12:07:b5:06:
         8b:f3:6e:cc:7d:e4:b6:8b:bc:2a:71:48:d0:eb:ce:ec:6d:44:
         23:c4:8c:5a:49:51:37:5b:f4:1e:66:66:04:9c:46:19:b7:7d:
         ff:ba:69:df:f9:c6:ad:f2:af:1e:52:e0:cb:77:8d:64:04:16:
         a7:a6:34:99:09:8b:64:34:29:e4:71:95:65:69:d1:06:9c:b1:
         19:5b:66:92:dd:fe:38:05:46:a7:e2:c0:4a:1c:c1:15:0f:94:
         dd:29:1b:a9:32:c2:2f:f1:db:cc:34:4e:f6:21:f8:6b:e0:ce:
         81:e1:48:5e:c9:08:76:90:dd:44:8c:43:42:d3:45:89:fe:eb:
         fb:db:78:31:a6:d2:6e:09:68:6a:0c:87:85:d1:a4:69:e6:df:
         c9:9b:43:4a:07:8d:05:59:28:b5:ca:44:e5:ca:07:f6:c5:7f:
         8e:d6:41:89:e6:bf:41:b1:70:10:d6:25:ec:86:95:c3:f0:fb:
         45:c5:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:57 2024 by rpki-client on console-fra.rpki-client.org