Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File:                     50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier:          bi7m7XQKCfynXJGyIMllD5Zfgj7JCyGckaeS4ZbFyeA=
Subject key identifier:   58:1F:87:5D:5C:8C:26:68:AA:BE:0E:79:22:AB:A6:60:AC:D1:A8:FD
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer:       /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial:       0194064696717AD786F07C2F9EEC2CF4A24B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number:          0BE1
Signing time:             Fri 27 Dec 2024 04:01:16 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:16 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:16 +0000
Files and hashes:         1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: WBtAIB1Xg1oBhHqFHBqkPq3HoZp9pWSsYQ0noerAm/0=)
                          2: h2kdEHJ8ZmUVYpCXvcN_I8wGJW8.roa (hash: TrK9DD/Oh3WPvN//64AauJd6X8u1btW/GohjCDBQ6ps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:96:71:7a:d7:86:f0:7c:2f:9e:ec:2c:f4:a2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Validity
            Not Before: Dec 27 04:01:16 2024 GMT
            Not After : Dec 28 04:01:16 2024 GMT
        Subject: CN=581f875d5c8c2668aabe0e7922aba660acd1a8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:71:42:3d:9a:b9:91:90:7d:33:4e:68:cd:
                    b5:28:45:22:0e:a0:00:f3:d0:80:7d:70:5a:41:55:
                    b9:c6:f8:94:97:47:18:b0:7c:5b:c4:78:d0:9a:63:
                    23:bb:23:b5:c4:ab:df:07:d3:a7:6c:1d:fd:53:0a:
                    9a:20:8c:e6:88:a6:0f:9b:4f:03:b0:e6:b4:ad:80:
                    b3:42:43:d1:22:db:fe:0f:ff:f2:a3:ec:4e:dc:6e:
                    bf:b3:cb:b9:57:a1:6f:0f:5c:0e:5f:87:4e:d0:4f:
                    83:f7:6f:fc:5e:84:96:10:6d:52:b9:58:a5:cc:f4:
                    84:fa:3d:32:31:85:76:5d:2d:ef:7a:b0:e1:da:9d:
                    51:74:72:5a:f3:31:df:e2:78:e1:6d:fb:37:76:3d:
                    fd:a8:7a:54:d1:0b:49:4c:13:2d:fd:15:d3:45:c9:
                    77:3d:c4:e2:62:a5:3c:5a:16:4f:e2:8d:69:bf:14:
                    f3:50:9d:58:dd:36:b6:52:af:43:42:6b:41:dd:fe:
                    bc:e9:0a:e6:6d:4d:c2:5b:85:7d:08:b3:63:65:00:
                    37:62:a4:b9:6e:8c:bd:90:ad:c6:17:6d:14:69:ba:
                    6d:f6:7d:7c:19:30:11:7d:bd:49:a7:71:a5:ea:a3:
                    e3:ad:b7:9c:49:08:94:91:28:ab:70:71:1a:98:a4:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1F:87:5D:5C:8C:26:68:AA:BE:0E:79:22:AB:A6:60:AC:D1:A8:FD
            X509v3 Authority Key Identifier:
                keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:92:ce:1d:7e:3d:3f:af:5d:f6:3f:18:07:bc:e6:cb:ef:93:
         3d:06:41:92:82:e5:0b:52:b8:8c:64:6f:0f:4c:ef:1c:d3:8f:
         81:91:49:ae:a0:b8:a7:10:67:e3:90:02:7a:84:49:e9:f4:a2:
         6a:ad:57:d8:31:5d:1c:d9:4a:d5:47:16:74:01:22:c9:ea:bb:
         f2:57:75:ec:6f:6b:7c:90:a2:b0:27:a1:f7:e0:d5:d1:78:54:
         88:4e:c1:2c:bf:cf:08:aa:33:cb:81:37:ac:48:66:5f:c4:05:
         1b:51:63:05:7d:05:ba:fb:1c:46:af:e8:8b:41:c6:f2:70:20:
         62:74:02:e4:9a:34:6a:aa:31:3e:42:56:28:0d:1f:94:c3:c9:
         e0:6f:a7:25:d7:30:f1:c0:97:1a:ef:e0:b8:55:a1:e1:1c:cf:
         fb:c7:6b:96:63:a0:c4:e3:f1:7e:22:fd:67:f0:d6:e3:1b:93:
         1b:29:c9:16:3d:da:9e:75:a9:a5:69:fb:b7:15:83:2b:46:2d:
         19:74:fe:66:ca:40:d7:ff:8f:94:e5:87:fc:b4:85:14:b7:61:
         c4:66:1c:8d:53:e8:e2:6b:81:a0:da:b7:ea:a0:7d:1b:9b:a8:
         5c:1b:bb:29:ad:d8:68:67:d8:7d:e1:d0:cc:bb:a2:15:02:d2:
         cf:7f:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:59:54 2024 by rpki-client on console-ams.rpki-client.org