Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File:                     43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier:          F6UiGbEcBfnQSxWby7RSuHnIp3ibR8HZyi5jTLNrybA=
Subject key identifier:   48:08:AF:96:A4:B0:46:F5:34:83:AB:9B:49:6C:D6:01:07:EB:1B:49
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer:       /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial:       0193549B5D4BE84814793B2A871A08FDD1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number:          07C8
Signing time:             Fri 22 Nov 2024 16:01:28 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:28 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:28 +0000
Files and hashes:         1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: 676GDJWTKn3CI6780zV/eG56dRzYpbfzswTghcdKwe0=)
                          2: FaeR-Hv2Y_5UdbAqRqFB0nLvClI.roa (hash: KHv5liwt3bRMj3psjQsQ9zefHK59bNWALUAT3jZ4AuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:5d:4b:e8:48:14:79:3b:2a:87:1a:08:fd:d1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
        Validity
            Not Before: Nov 22 16:01:28 2024 GMT
            Not After : Nov 23 16:01:28 2024 GMT
        Subject: CN=4808af96a4b046f53483ab9b496cd60107eb1b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:00:39:78:e6:1b:22:4e:dc:ff:db:b2:3d:
                    c7:4b:13:8b:77:b6:fb:99:86:13:0d:d8:d9:df:d6:
                    a1:ec:19:22:62:0a:a8:23:09:56:81:94:99:d8:17:
                    b1:ac:f1:b7:37:61:2a:53:c9:43:71:92:7e:b1:47:
                    14:4a:e8:1d:0d:10:23:c7:9c:1c:fd:a1:3e:b7:46:
                    28:bf:34:ee:98:fe:a4:4a:c6:f2:70:c8:fe:c4:e1:
                    df:c4:8f:70:48:9f:b1:eb:74:42:64:1d:36:6e:e0:
                    be:4d:b6:d6:2c:34:6f:49:34:a8:2d:87:76:4d:e5:
                    e4:e8:3c:53:92:ef:d9:f6:66:6a:54:6a:4b:c9:64:
                    b7:9d:e4:4a:bf:ff:94:f0:37:f7:27:bd:0b:c2:40:
                    a7:b8:a1:15:90:55:de:84:7e:e1:fe:e7:4a:2f:bc:
                    32:e0:c1:cd:29:40:cf:2e:1d:06:ca:8c:00:69:92:
                    25:f7:5d:d9:3a:04:51:7d:8e:f5:58:59:d6:b8:2b:
                    86:43:6a:27:af:50:78:e9:46:d3:ce:0f:bc:98:84:
                    32:16:9e:7b:7d:6f:64:d3:4e:21:f5:4a:3a:86:77:
                    1b:4a:63:2e:dd:5d:84:1f:31:bb:02:a4:2f:c2:be:
                    4a:de:6a:3d:3e:31:04:8d:05:26:f6:0d:c1:1f:05:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:08:AF:96:A4:B0:46:F5:34:83:AB:9B:49:6C:D6:01:07:EB:1B:49
            X509v3 Authority Key Identifier:
                keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:b4:f2:b8:96:26:ce:22:f0:3d:8e:0d:9d:ca:55:95:4b:
         4b:81:e5:22:f2:d0:69:03:be:84:20:57:dd:3e:44:4c:ca:9d:
         e5:60:e0:bf:f7:24:58:e9:7a:b8:53:4b:aa:04:8e:da:f8:87:
         a0:6f:00:e0:f2:4d:b7:7f:96:20:7b:d5:cd:a2:c5:ef:e0:8f:
         83:e6:94:fe:36:8e:85:7d:93:03:d0:34:d0:03:3b:64:3d:34:
         e9:b2:d5:08:a7:e3:0f:60:4b:6a:08:22:57:85:9d:98:6d:1d:
         e0:47:a1:32:fe:87:62:39:12:70:c9:3e:17:99:d2:de:5d:fc:
         1c:b2:29:a1:b6:48:a5:46:92:17:48:53:95:5a:ba:6d:7e:cc:
         26:ad:c7:e1:d7:bc:82:ed:f2:f5:17:2b:59:d3:c1:4a:00:dd:
         23:aa:d9:82:56:ea:74:a5:15:45:c2:0f:2d:c8:08:23:59:9c:
         7a:f8:b5:dc:5a:72:e0:0a:3e:4b:b9:e4:dd:e2:57:dd:70:98:
         44:d1:81:a4:1a:fe:88:ff:90:b7:fb:f5:de:7f:c3:ed:d2:78:
         bd:02:ab:89:ec:35:23:3a:e0:19:31:d9:93:06:e7:36:fe:15:
         c9:4a:b2:2b:87:7e:f5:04:69:98:ed:e7:63:dd:59:61:cb:76:
         9e:c3:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:18 2024 by rpki-client on console-fra.rpki-client.org