Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File:                     U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier:          YCKFX62avaQMizyxJ7Abcb3GQhgeLKQ8jYCVl7afj7k=
Subject key identifier:   51:3E:D8:CD:11:61:FD:3E:48:7B:D8:84:45:62:17:9F:A2:70:4A:C1
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer:       /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial:       0193561AD4B60C28537106D83A344869D493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number:          41
Signing time:             Fri 22 Nov 2024 23:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:18 +0000
Files and hashes:         1: DrNEC0Zr5yeCTdcsJNhFv2ajlmE.roa (hash: ZBsKHJe83hSzLPB/DbNV1wJjL7N3di4x0lhgSaQ+1Rg=)
                          2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: YFUiakYe+by+8EemsFwp8eJxug40Qje5VgJ29lq42yI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:d4:b6:0c:28:53:71:06:d8:3a:34:48:69:d4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
        Validity
            Not Before: Nov 22 23:00:18 2024 GMT
            Not After : Nov 23 23:00:18 2024 GMT
        Subject: CN=513ed8cd1161fd3e487bd8844562179fa2704ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:4e:f9:74:a3:41:ec:77:02:ec:14:3e:4d:
                    e7:e3:db:25:8f:de:55:32:34:97:04:ca:05:b6:cf:
                    87:93:c1:96:68:e1:65:b1:a6:5b:b0:7e:78:90:dc:
                    3a:ef:c3:d7:5a:05:08:6c:25:a9:ef:b3:62:a1:5b:
                    12:1a:87:26:51:67:8d:07:71:3e:57:32:0c:d6:16:
                    ce:33:ce:ba:2a:12:5f:4e:40:f3:88:0f:a5:8b:84:
                    03:7e:0c:f9:81:7f:3c:37:df:c9:f7:64:62:37:45:
                    6d:90:21:80:ce:78:e0:57:8c:8d:9a:94:ba:d1:bd:
                    41:30:3d:07:0c:ae:4f:e3:fd:12:4d:d9:f2:75:47:
                    92:f6:42:ed:17:97:aa:96:ff:90:7d:8e:a3:2c:6f:
                    95:64:52:b4:13:c1:31:af:9f:f6:51:92:b7:43:10:
                    99:d4:a6:4a:85:01:b8:38:8c:1e:10:6c:04:47:c2:
                    f7:1b:b1:17:07:2d:63:ee:66:1a:83:ae:84:2f:f0:
                    a9:b1:16:c8:9c:97:0a:11:98:08:1d:17:b0:25:fd:
                    6f:73:19:c6:b3:ff:01:fb:88:f6:83:1f:7b:0e:04:
                    e4:81:ab:a4:21:23:81:e5:a0:1f:1a:1a:54:6b:f4:
                    8a:d4:3e:28:79:52:f1:64:2f:f6:db:15:49:9c:e5:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:D8:CD:11:61:FD:3E:48:7B:D8:84:45:62:17:9F:A2:70:4A:C1
            X509v3 Authority Key Identifier:
                keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:11:e0:dd:9d:ce:29:c9:d6:14:55:34:a4:9f:ff:bf:87:
         ab:89:09:c8:e3:af:e8:4b:8b:10:66:e5:49:a6:7c:85:f2:e8:
         99:4e:73:a7:cb:3b:24:a1:72:dd:e6:2d:30:0a:41:2a:1f:e8:
         d0:dd:10:64:ad:76:38:a0:66:65:ac:52:69:a4:b0:7c:76:59:
         4d:6a:4c:4f:67:c9:b2:8f:90:d3:ab:97:12:42:60:c2:73:18:
         d4:0b:87:4b:ab:72:8e:4d:28:9b:45:c8:5e:e3:95:ba:2d:7c:
         b8:d5:3b:66:d7:92:f2:9d:88:31:39:66:75:f0:f2:91:04:d0:
         40:b6:d6:f9:8d:4a:a8:22:d0:cb:de:5f:72:07:ef:49:7d:b0:
         f7:9a:12:77:9f:bc:b5:cf:f7:12:33:be:84:31:9a:a0:bd:22:
         57:28:09:ab:fe:6c:c3:b6:85:af:7f:12:7a:e5:fc:70:17:61:
         c1:33:d1:2e:a3:ee:02:54:15:94:a4:b1:c5:bd:78:5b:e8:7a:
         09:57:7e:91:34:e5:93:21:2c:7f:86:36:d5:b3:fd:d6:e5:ba:
         12:e5:ed:e0:6b:2e:00:8c:de:bf:25:ca:dd:3a:7e:13:ef:8a:
         52:d8:7d:73:23:da:85:c7:68:60:a2:68:d9:1c:9e:06:15:46:
         05:e9:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:12:03 2024 by rpki-client on console-ams.rpki-client.org