Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          UlwETREFy0zMIB7XleU2qZQtKwpQCrmFf0ZSIk8jZA0=
Subject key identifier:   83:F2:98:11:C9:9B:B0:7E:03:44:95:41:0E:06:5A:B0:00:FB:29:8A
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       019358402E6E855F6B5BE79029824F0382ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          03A9
Signing time:             Sat 23 Nov 2024 09:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:21 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: IF4GwsoTHa6a/Zdxb683eJdqMxV6urn0xP4F1zT1EwE=)
                          2: lRJtSdYl6Dj2MMK_EQFQAIQl4RI.roa (hash: +DhLcg1+Xi2lrJeetshYj4mCqssvOQIWEKxj/mpEz+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:2e:6e:85:5f:6b:5b:e7:90:29:82:4f:03:82:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Nov 23 09:00:21 2024 GMT
            Not After : Nov 24 09:00:21 2024 GMT
        Subject: CN=83f29811c99bb07e034495410e065ab000fb298a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:1d:36:37:9c:f4:c5:5a:d5:d0:da:9c:23:
                    d0:26:19:d5:b0:95:92:e4:f6:2f:e3:14:dc:f8:a7:
                    5f:90:c6:48:b3:45:68:1b:28:9c:40:29:6c:3d:6e:
                    eb:15:db:12:be:4a:90:02:41:7b:b9:e6:2e:c4:bd:
                    60:c3:f0:44:fa:c3:8f:0f:a7:6b:d4:56:3a:6d:a2:
                    83:e6:1e:2c:fc:f4:a6:cf:ae:ad:40:d3:84:ef:b0:
                    bc:c7:73:8b:71:54:ee:11:eb:64:f7:d5:95:03:17:
                    bb:8b:df:d8:a1:b6:90:5b:fa:9a:a4:14:a2:e5:a6:
                    6d:95:e6:bf:35:20:ce:14:3c:f0:4b:df:e1:0c:0f:
                    d9:ab:a0:35:44:24:42:dc:98:a2:7c:ac:26:34:d6:
                    60:79:63:a8:be:44:b6:dd:d3:1e:a9:1d:5b:a8:01:
                    5a:95:f8:b4:8a:a4:2f:be:08:78:10:f6:5b:9d:98:
                    f6:f8:d2:3e:bc:f4:c8:a4:f6:5a:4d:56:89:47:fa:
                    8e:d0:9d:53:9f:d2:d3:bd:a2:11:bf:f7:8f:0d:f8:
                    27:3b:ec:59:8a:3e:11:37:9d:f1:91:a5:ff:15:9a:
                    11:0f:fc:c4:9e:52:e8:c1:47:e9:34:59:d9:92:8e:
                    4d:5d:4e:4b:09:c7:30:74:67:0c:59:30:da:d6:3e:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:98:11:C9:9B:B0:7E:03:44:95:41:0E:06:5A:B0:00:FB:29:8A
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:71:b2:b3:68:84:22:1c:43:1e:f9:b9:af:44:0b:13:b5:35:
         f8:98:f0:c5:e2:71:d5:52:48:20:72:c9:6d:50:ac:61:db:81:
         74:eb:56:8b:f8:8d:64:aa:23:3b:52:cb:51:e7:cb:97:ef:ac:
         c5:f4:5e:e2:85:df:54:0a:69:12:a0:6a:81:55:ce:ac:e0:f7:
         38:c3:21:00:01:15:e0:52:73:1e:85:3c:22:d0:a3:0d:4c:20:
         2f:78:d1:b1:7a:06:f6:59:58:6c:4a:10:6a:d0:8b:d4:35:e8:
         31:8b:05:ed:6b:fe:c8:ea:11:40:1a:9e:8b:f6:b8:66:5b:ca:
         7a:b1:70:98:af:da:94:8c:f3:c6:58:0d:70:24:8b:f5:1f:1d:
         0d:84:4c:9a:28:7e:bf:3f:d8:c3:c1:14:65:4f:f6:63:f0:f1:
         e6:fb:fa:22:09:4a:15:fb:9e:89:d3:0c:4b:1f:9b:8b:c3:24:
         4e:43:39:aa:6e:85:fa:99:15:5c:32:26:8b:77:8c:50:18:20:
         4e:f7:c7:1c:b3:35:94:c0:81:5e:dc:f2:bf:45:16:43:25:de:
         58:f7:b8:9d:fe:6a:1d:05:69:a9:93:60:ce:9c:de:33:4a:1c:
         c5:f2:8e:f9:09:c7:d1:c7:2e:6b:53:08:bf:d9:47:dd:11:67:
         e2:94:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:42 2024 by rpki-client on console-fra.rpki-client.org