Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File:                     5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier:          Y/NMu+uKJX3rqApPH7KDtEiV004su3AkZDtvDekA0HU=
Subject key identifier:   4B:8D:A2:F3:AA:A2:EE:A0:D8:AF:02:64:81:8D:36:DB:E6:9D:74:E4
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer:       /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial:       0193568A61778C82FDF872BDCC06B0011C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number:          042F
Signing time:             Sat 23 Nov 2024 01:02:09 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:09 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:09 +0000
Files and hashes:         1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: 0iBKW0rv7xl8C8uUsbM4PEbugdjYJt20a6HdvAcJt5A=)
                          2: ZGoD8oYguJ2K9iTSzN31blSHztQ.roa (hash: PbOmiD5S84qqRs5LmUwW2yMoGK7TVnSoVud20qypPXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:61:77:8c:82:fd:f8:72:bd:cc:06:b0:01:1c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
        Validity
            Not Before: Nov 23 01:02:09 2024 GMT
            Not After : Nov 24 01:02:09 2024 GMT
        Subject: CN=4b8da2f3aaa2eea0d8af0264818d36dbe69d74e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:37:98:aa:ea:17:aa:1e:c8:c7:1f:dd:d5:
                    af:63:78:71:d3:60:b1:d6:bc:97:2b:df:68:f6:93:
                    be:2d:57:5a:cd:e8:e7:30:a5:5c:b6:f4:8a:a5:96:
                    28:04:6f:9e:6e:8a:46:fe:31:8f:a1:80:ee:86:c5:
                    c1:cd:9c:64:91:db:f2:ee:25:c2:e7:39:99:7c:45:
                    63:00:2a:aa:cf:c5:bf:76:bc:3a:de:5d:ca:03:08:
                    33:94:e5:be:a1:c4:09:d8:79:64:00:13:6f:10:39:
                    b2:4e:a2:ab:43:c8:e1:5b:b4:25:d6:7e:2d:04:6a:
                    2e:26:57:9b:da:f6:87:c8:2e:85:b4:f2:25:9a:8e:
                    ff:6e:c1:85:d8:c1:27:85:5c:f0:f7:2a:6b:5f:17:
                    15:cb:6d:52:96:0a:e5:c4:e1:f4:51:e2:a3:5a:7a:
                    9b:c9:2e:14:1a:95:41:af:0f:b7:61:39:9d:fc:d8:
                    0c:51:0f:a7:fa:2b:81:a8:0f:94:72:be:77:12:b3:
                    ee:d3:77:29:54:39:84:65:46:77:31:f7:be:f2:5c:
                    51:bf:d4:13:0f:05:a0:96:d3:4f:55:8a:d8:18:a0:
                    73:bf:a9:49:84:91:5a:72:83:fe:7b:3b:a1:a4:98:
                    32:85:81:5e:38:68:a9:13:36:ec:f6:7f:94:8b:36:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:A2:F3:AA:A2:EE:A0:D8:AF:02:64:81:8D:36:DB:E6:9D:74:E4
            X509v3 Authority Key Identifier:
                keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:b9:ed:d9:81:fa:3d:04:2f:57:be:89:07:cb:cd:95:8e:
         3b:57:3a:7d:4d:36:ff:c8:a0:20:a4:d6:50:d5:91:c3:3b:9e:
         d2:3f:64:60:fc:78:bd:7c:c7:16:d7:1c:fb:2c:23:42:c1:c6:
         77:d5:4c:d5:6d:18:e0:c6:82:b4:49:7a:49:b6:b0:cc:55:2c:
         7e:66:bc:56:7c:3c:5c:32:d6:45:be:94:3c:88:50:3c:47:66:
         bc:3c:03:a6:3e:64:03:38:74:5c:bd:6e:fc:3d:1c:24:db:57:
         e3:7d:0b:3f:ad:62:6c:15:3e:bc:15:8c:ed:27:e5:7e:59:33:
         6d:90:5e:5a:bd:48:e9:9b:28:56:d9:0f:2e:eb:9c:76:61:39:
         aa:60:68:de:c0:5d:9f:04:af:a1:0b:4f:32:c3:e8:6a:01:84:
         31:07:fb:d3:a4:46:f2:57:f3:0a:41:00:9f:7c:34:94:f3:03:
         df:e4:33:04:79:a5:d4:50:7b:25:f7:d1:fb:25:ae:c3:44:57:
         0c:46:54:df:8e:cb:5a:9a:8d:de:c1:68:54:cf:e6:ff:2d:37:
         aa:34:14:2d:f5:55:8a:41:70:12:57:31:9b:a5:85:46:c5:c2:
         67:06:cb:64:7e:e8:c3:21:4f:90:f2:24:cd:90:77:b8:4b:0e:
         19:50:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:36 2024 by rpki-client on console-fra.rpki-client.org