Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File:                     RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier:          Ua7kyHQJBDUHNHGXozkj4esxcg3Z1601ySaXsECv3wk=
Subject key identifier:   2D:E3:31:19:BE:25:DC:7C:CB:79:0E:82:90:A5:8D:B8:A1:86:74:2C
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer:       /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial:       01935B0A984EDAF25BC6A7247CF0CD71C520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number:          045A
Signing time:             Sat 23 Nov 2024 22:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 22:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 22:00:41 +0000
Files and hashes:         1: 3kDHaWERSDGnky_Y8mCUMsI0RG8.roa (hash: 3KfqA2shfg9aGRITiSFAOawVaxTpDv6s6CQbgrl5tms=)
                          2: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: 3dgx4nDseTPT3XLN9PyaoiRwL8U5IYpA2f0V15v7AHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5b:0a:98:4e:da:f2:5b:c6:a7:24:7c:f0:cd:71:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
        Validity
            Not Before: Nov 23 22:00:41 2024 GMT
            Not After : Nov 24 22:00:41 2024 GMT
        Subject: CN=2de33119be25dc7ccb790e8290a58db8a186742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:56:64:5d:b8:47:47:cd:7a:2f:93:52:9a:
                    4c:48:44:c4:b0:dd:3c:c9:7c:3b:32:1d:8d:2a:54:
                    b7:34:0f:a6:3a:3a:56:af:83:9f:a3:1b:df:40:d0:
                    77:12:41:d6:a5:b2:4c:0f:3b:25:e1:03:95:95:bd:
                    f5:85:ae:ad:ed:fa:f7:81:93:81:13:47:d3:32:da:
                    0c:93:6e:9d:b7:3f:f4:f2:c3:2b:d4:d4:f2:5f:0c:
                    f1:c5:de:97:ff:e2:ca:c0:52:38:7d:db:5b:33:7a:
                    e2:56:2d:b5:e2:fc:76:b4:fd:60:a4:8a:50:8c:bc:
                    8b:2f:8a:ab:10:05:01:a5:94:23:61:cf:7a:4b:0f:
                    72:7c:f1:5f:73:d8:08:70:79:2b:0e:8d:25:e9:aa:
                    97:e9:2c:ee:88:ea:23:87:9f:27:02:bc:7a:fd:4e:
                    25:f8:21:b9:c5:ee:18:a5:96:c5:79:ac:0f:21:9d:
                    39:60:d9:c1:52:79:da:b5:9a:eb:68:f0:de:c8:30:
                    13:0e:3b:bd:7f:a1:db:07:ec:a0:7d:12:16:62:43:
                    bd:22:00:8d:79:54:af:81:fb:3a:26:fd:a3:7c:86:
                    17:ac:5a:4d:0d:d9:09:b4:d3:18:3c:92:73:b6:55:
                    90:ba:42:35:fc:07:15:c1:c2:23:7e:1b:bb:72:6f:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E3:31:19:BE:25:DC:7C:CB:79:0E:82:90:A5:8D:B8:A1:86:74:2C
            X509v3 Authority Key Identifier:
                keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:97:40:b8:23:d7:78:91:c0:0d:c9:3b:f4:c8:c2:42:8f:31:
         d5:47:1d:60:6e:35:1d:dd:cf:7d:71:f2:1b:08:41:3e:40:56:
         b0:e7:d0:3e:ac:92:ed:3c:0a:72:56:54:f7:3d:8e:99:85:62:
         28:69:69:d9:ea:df:ef:03:40:ed:34:86:34:4c:c6:0c:01:b7:
         93:a7:db:73:29:d0:ce:f5:bb:dd:2b:98:3d:4c:57:7d:59:53:
         d6:11:5a:f0:82:2d:2e:93:88:5f:0c:ba:a0:ba:93:2b:a7:ea:
         88:3b:92:e5:04:f4:07:9b:4e:95:72:10:20:6a:f3:6e:bf:bf:
         63:9d:ea:db:c6:cf:48:4a:f0:aa:b0:db:ca:06:b1:f5:5d:76:
         a0:7e:88:16:54:fc:3d:9f:a0:8c:d2:25:74:07:3c:73:8d:b5:
         ba:89:2f:c7:ea:d3:bb:6b:9b:8d:8a:8f:16:58:ce:3c:ed:c2:
         8f:0c:60:f2:b1:0e:5c:ca:73:f7:b9:28:5c:6e:3a:b1:0e:08:
         dc:d8:43:78:6c:b6:6e:a8:a5:3f:5c:32:38:ee:51:64:7c:d6:
         e2:5f:21:c9:61:dd:17:ae:2a:30:66:ac:8e:49:67:47:9b:cc:
         87:ed:58:8c:00:06:59:4d:41:fd:77:93:4c:d3:84:7b:1f:59:
         a8:aa:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:23:54 2024 by rpki-client on console-fra.rpki-client.org