Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File:                     MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier:          W6ks4zSO3ATVKSQFP9VCurqsoZkF/3mLKAdQwbuDZfM=
Subject key identifier:   D1:17:43:90:50:26:E8:EF:B0:3B:D2:57:69:2C:87:CE:F8:05:75:BB
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer:       /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial:       019351D0B76580F872B9B008B3317F74F5C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number:          05A9
Signing time:             Fri 22 Nov 2024 03:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:52 +0000
Files and hashes:         1: 28OO9taqdWuX45D1xybj01oToFM.roa (hash: NxqGPafne14RJjajYnYOjLNt1wR9c5mCTzWiNCVcxIc=)
                          2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: Cy2QMGM8eI4xtdh8rO412Krks1aNwRbg+M7MCwITjEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:b7:65:80:f8:72:b9:b0:08:b3:31:7f:74:f5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
        Validity
            Not Before: Nov 22 03:00:52 2024 GMT
            Not After : Nov 23 03:00:52 2024 GMT
        Subject: CN=d11743905026e8efb03bd257692c87cef80575bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:11:2d:43:9d:3a:a1:4a:5c:2f:0c:af:65:
                    7d:df:48:12:60:7e:4c:13:97:7b:56:10:07:53:06:
                    95:78:78:5a:d7:eb:f2:15:f4:72:dd:1c:52:24:18:
                    7f:4f:bf:4a:cd:7f:ad:5f:f8:11:10:35:fa:41:fd:
                    8b:ee:e0:03:9c:e6:d7:89:24:ef:ba:41:ab:c3:5a:
                    42:ee:49:da:81:bb:2c:bf:75:0f:66:2c:7f:d9:9a:
                    3c:91:fc:00:c1:4a:cc:76:8e:c9:1e:ec:07:43:41:
                    9a:31:57:33:be:00:59:03:7a:72:8d:41:e9:14:44:
                    07:70:fa:3c:f9:06:ea:42:65:0e:62:3e:cb:56:d2:
                    76:88:f9:66:7c:af:b6:9c:19:4d:11:a2:03:b0:ae:
                    2e:a8:26:3c:bf:0d:65:39:d8:eb:57:88:95:e8:a9:
                    14:c8:e2:35:70:95:bc:4c:45:f7:05:f3:8a:4b:ab:
                    07:6e:c5:3f:6a:b5:46:83:f4:49:04:dd:89:68:9b:
                    a9:04:90:f6:b4:df:d1:78:46:71:08:25:c5:73:45:
                    79:07:62:70:7e:73:41:96:42:8a:7f:a3:cf:f5:56:
                    aa:e3:24:b4:c3:fb:3a:c2:2f:4b:10:fd:21:f7:82:
                    48:6b:f8:c8:80:db:2e:15:bc:99:67:b4:ec:00:68:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:17:43:90:50:26:E8:EF:B0:3B:D2:57:69:2C:87:CE:F8:05:75:BB
            X509v3 Authority Key Identifier:
                keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ac:12:68:8d:a9:94:87:16:b2:00:ea:6d:61:44:a1:48:a1:
         62:8c:54:6f:46:15:6b:3f:42:61:dc:e9:89:30:9c:96:05:a2:
         ba:f1:3e:e3:11:4c:61:01:b5:75:bb:9f:0e:cb:3d:ff:24:b2:
         c0:05:4f:37:68:d6:6f:18:a4:0a:8d:bd:69:11:14:81:7d:33:
         e9:c9:75:68:61:a6:d5:ac:67:3d:88:de:6b:68:e6:ec:30:e0:
         86:33:97:c0:4e:0a:0d:fd:8d:1c:a4:cc:55:1b:4a:a1:c9:ef:
         d7:ff:cb:63:17:75:af:9f:be:51:2d:90:7d:ce:2b:5d:52:39:
         50:75:56:98:ef:19:93:fa:c2:54:6a:66:36:38:7e:b0:c7:b5:
         16:16:2b:9b:96:45:f2:46:cc:a4:f9:e8:35:9c:12:b9:d9:b4:
         80:f6:57:33:4c:50:77:b0:75:d9:39:fc:77:da:46:bc:5a:94:
         6a:09:9a:34:60:1e:74:d5:1b:1a:13:7e:3d:45:0a:ee:58:17:
         c3:a9:8f:e7:d8:77:00:e4:18:4c:ae:33:6e:a6:61:dd:41:9e:
         42:21:ef:9e:6f:89:6a:37:f2:b9:9c:db:5f:12:87:f9:54:a5:
         04:95:6d:e2:a5:32:ce:87:20:4d:dc:03:1d:78:e4:38:38:4c:
         5b:5a:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:45 2024 by rpki-client on console-fra.rpki-client.org