Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File:                     EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier:          /b1wfqm0y0vAkPCLVYc26IvsMRsBOwKUWIGCOAIeW8I=
Subject key identifier:   D6:AD:BF:76:26:C1:82:CB:ED:5D:28:52:AD:3D:7B:C1:23:C3:84:DB
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer:       /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial:       019357D2369355D329459C838C904B460BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number:          0BE4
Signing time:             Sat 23 Nov 2024 07:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:14 +0000
Files and hashes:         1: BNkQtXiM60kiU0nw9OarYUPU-FE.roa (hash: KAnMTU1uozNUXciKFw3TttqCR8L3QyMCFO63edikSUY=)
                          2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: CYRIVXA5NUKFkZELSyyXtlTemUL5ensSON7QqFl6zG8=)
                          3: aLjkyAxMPisUuYCRxYnARfBfL0M.roa (hash: 9pi6Ylk00/3KLSmCG+1iIYjFj9v4sRoKnrKayG5PyBM=)
                          4: rbGJu-19FyYCfFpBw5Oxao96RdU.roa (hash: QZmOGlhNQO0zk4vlG0w6wLC0NhdZHV8cLHMUA7ZbECQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:36:93:55:d3:29:45:9c:83:8c:90:4b:46:0b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
        Validity
            Not Before: Nov 23 07:00:14 2024 GMT
            Not After : Nov 24 07:00:14 2024 GMT
        Subject: CN=d6adbf7626c182cbed5d2852ad3d7bc123c384db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:3e:5f:90:2d:34:cc:8b:bb:0f:32:74:dd:
                    b7:d5:ca:96:d2:bb:d5:a0:0d:22:f8:ee:a6:b4:78:
                    b8:77:63:0a:50:33:82:62:dd:44:47:d6:45:05:e3:
                    e7:49:7d:a9:44:1e:04:b4:3f:b2:f0:d6:89:12:a5:
                    5c:39:e0:29:3c:52:da:e6:57:a6:d0:a4:da:86:54:
                    01:ae:a5:e7:2b:20:62:93:54:c4:e3:87:e8:9b:ef:
                    f9:5a:e6:78:74:9b:9b:2c:89:fd:51:b5:17:00:02:
                    cc:96:77:cd:e4:6d:f4:5e:d6:ca:b9:e1:8c:75:e5:
                    fc:49:3d:79:7a:e6:54:2e:19:17:7b:b2:26:b4:59:
                    aa:f9:7b:22:05:a1:fc:f0:f7:59:48:16:56:a1:ba:
                    ed:6e:19:52:76:0d:a5:95:3f:39:67:9b:86:f9:6d:
                    84:a3:86:ca:8e:ce:48:59:db:af:ae:a8:de:27:aa:
                    26:e0:df:6e:ea:50:42:60:11:bd:ee:27:55:40:00:
                    e0:17:e4:df:59:a5:6e:ef:77:b1:fd:87:6f:af:3a:
                    c9:95:07:5a:7e:8e:c5:37:4d:ae:1d:7a:bd:b4:32:
                    25:cd:f8:26:28:40:f3:af:c7:63:58:5d:46:be:6b:
                    1e:a5:7a:72:70:45:9f:d0:37:06:e7:3a:16:41:7b:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AD:BF:76:26:C1:82:CB:ED:5D:28:52:AD:3D:7B:C1:23:C3:84:DB
            X509v3 Authority Key Identifier:
                keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:cc:ca:aa:92:c4:b2:14:a9:1d:1c:b1:11:16:d6:71:7a:
         bb:10:a3:93:13:4c:aa:1f:6f:4f:d6:f0:c2:dc:74:98:45:d2:
         c0:aa:48:e4:67:49:02:e9:f8:b4:8e:c6:78:6a:8f:ef:d8:fa:
         02:a1:61:1f:57:4b:87:f6:79:c9:8f:7f:7a:c1:12:18:80:1c:
         1d:40:14:fa:b2:26:6f:29:5b:69:f7:23:dd:f1:12:4d:75:04:
         42:92:83:33:a3:bc:5c:ad:f6:4c:82:c0:5a:3a:30:26:62:f0:
         a3:93:75:81:f4:5b:95:c6:38:99:84:e6:b5:14:83:d9:50:de:
         d2:65:87:23:8c:66:bd:36:b5:8c:43:f8:b3:d7:fc:3e:d3:c9:
         b8:e2:1b:55:01:76:a2:8f:2a:15:1c:4f:a2:fc:df:07:f5:28:
         7c:b6:68:ad:da:0b:12:b5:09:e2:65:2f:20:ad:9c:dd:56:2e:
         9b:d0:e4:47:11:6f:d7:34:48:30:f1:f8:b5:8b:2d:89:01:20:
         83:d8:d1:f0:fd:0f:ad:a5:12:47:6c:d7:e5:83:d5:77:c8:ba:
         ff:3d:03:88:c5:48:05:dd:b2:6d:ae:60:2e:39:7c:96:d9:44:
         c0:e3:e2:71:c5:75:08:b3:2b:10:27:73:86:e2:70:81:0b:10:
         70:ce:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:29 2024 by rpki-client on console-fra.rpki-client.org