Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          C4My1ffy5iATwi6Nu2N1ctjl8DycD2ISLJ14q/wiFug=
Subject key identifier:   7D:3C:A6:DD:0F:8B:58:43:59:E0:D2:EA:15:91:B1:0C:9B:A3:8E:08
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       019406461DC76A5EB7E12DF01479DDC4CB35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          13CA
Signing time:             Fri 27 Dec 2024 04:00:45 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:45 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:45 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: n7o0NKsOi+RwBkDSZY/tEtMqEbWth2Xa8ojN5H4fRw4=)
                          2: iujXlx3NG7uK79vV1ix0J6cZZak.roa (hash: fqyUWDYie4zsXrXs9EaGbdVGvjdTu8lHQZwtOfUIoiQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:1d:c7:6a:5e:b7:e1:2d:f0:14:79:dd:c4:cb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Dec 27 04:00:45 2024 GMT
            Not After : Dec 28 04:00:45 2024 GMT
        Subject: CN=7d3ca6dd0f8b584359e0d2ea1591b10c9ba38e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:d5:66:ee:f9:92:b2:d3:28:8d:56:e2:b0:
                    8b:96:dc:d6:82:78:f1:75:70:b9:09:79:64:2e:41:
                    d6:5b:ff:f8:21:79:a5:0c:89:5b:56:bd:9f:c5:ae:
                    60:39:5c:b2:cd:d2:8b:23:c3:db:2f:82:2c:17:6e:
                    1e:f3:58:71:22:32:1f:2d:b7:99:18:4e:c0:99:ed:
                    1c:28:02:55:fa:91:fb:27:a0:3d:76:e2:41:6b:48:
                    4a:b0:19:b9:15:0d:70:3a:13:1c:8b:ec:2d:b8:54:
                    10:79:6e:31:6b:bf:77:13:07:b6:b1:cb:6e:e6:e1:
                    82:ff:10:29:b3:57:66:b6:e8:57:86:4a:bb:69:88:
                    8b:6d:30:2c:c3:13:aa:96:f3:cb:f2:9b:59:55:be:
                    8b:25:7d:0f:87:69:f1:d3:38:41:a1:17:9c:82:45:
                    e9:ea:38:ab:0a:5b:d6:2e:cf:d7:49:b6:b6:a0:14:
                    1c:a3:28:03:56:75:bd:f7:97:5d:5c:45:ac:ba:4e:
                    b1:bb:8d:ef:af:5b:cb:d3:1c:6b:6c:f8:0e:ac:e4:
                    8a:af:be:09:87:28:4c:8c:3f:88:22:83:d2:42:76:
                    8d:1e:78:d3:42:d5:33:44:df:29:73:7d:5f:2f:8d:
                    1b:5d:37:9a:8e:77:56:78:cd:0d:c7:2d:ec:a9:a2:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:A6:DD:0F:8B:58:43:59:E0:D2:EA:15:91:B1:0C:9B:A3:8E:08
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:41:11:25:31:67:95:7f:86:97:aa:cc:0f:4c:7a:ff:bb:f3:
         cd:c7:33:66:07:3e:12:a0:18:23:7b:0e:b4:cd:ee:04:83:b6:
         27:78:aa:89:50:40:65:f0:b4:ff:4e:76:f1:13:0d:12:bc:07:
         b2:63:49:e5:e3:9e:20:7b:db:5c:be:94:8b:df:12:43:c1:05:
         7a:af:1f:56:9c:e8:84:4c:e5:cc:06:12:52:45:cf:c2:02:e8:
         5d:96:fd:b7:7e:8f:de:12:86:48:e6:9f:e3:80:65:06:4a:6e:
         e8:29:e9:d6:ab:23:83:69:d5:21:8e:81:5c:76:31:56:af:9a:
         4d:40:cd:31:2f:b5:3c:95:86:2d:73:2e:b9:e6:e7:37:ea:79:
         95:b2:69:9f:1e:1a:db:0b:35:e5:83:b5:03:8d:41:20:02:16:
         c7:09:23:b8:14:6e:1b:0c:52:cb:e3:43:0a:49:ae:ed:3d:be:
         c5:e1:10:3b:ef:b3:e5:7f:b2:a6:25:83:2f:ba:f5:42:c1:93:
         ff:76:29:b3:43:d9:e7:63:26:33:7f:6d:cf:c7:53:16:72:0b:
         1a:f9:56:b6:13:18:f5:21:c0:d9:ed:4e:0a:ed:61:2e:a5:11:
         35:60:10:76:a4:af:3b:13:36:f3:63:11:34:ff:ac:72:97:2c:
         1e:0a:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:01:39 2024 by rpki-client on console-ams.rpki-client.org