Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          jdC3SiNILa7rf16dp637379QWF8Qy0papAYmyr/FO1Q=
Subject key identifier:   E4:4E:F8:CA:36:B0:2B:FC:9E:C4:0D:C5:97:BA:1B:E0:6E:37:A9:F0
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       0193640E417D73C564620E07EF34A88476E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          06A3
Signing time:             Mon 25 Nov 2024 16:01:15 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:15 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:15 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: UZabtrPTnz8LfmevtSpmAzWyrvev+B9F0+FeRT/c7hI=)
                          2: jc9Op99dDyRvkHSMmokMpLw6KU4.roa (hash: Fhbj4q1x9B7tW/7v48vt0F+oOVtUG/gao2d7se9IwRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:41:7d:73:c5:64:62:0e:07:ef:34:a8:84:76:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Nov 25 16:01:15 2024 GMT
            Not After : Nov 26 16:01:15 2024 GMT
        Subject: CN=e44ef8ca36b02bfc9ec40dc597ba1be06e37a9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:93:ed:9d:a7:0e:61:f2:97:4c:10:56:b3:
                    68:7a:89:ad:0e:fb:22:6d:9f:45:41:e7:61:42:22:
                    9c:40:b0:aa:88:12:21:02:67:5c:5f:a4:fb:58:e6:
                    d0:de:8a:78:6c:5a:b5:7f:8f:a2:10:e0:a5:f3:a2:
                    13:f5:34:fd:20:44:b0:8b:8c:bc:31:75:07:01:c4:
                    21:2e:19:d2:ee:60:9b:7e:58:20:a0:1a:e0:fc:64:
                    71:ca:16:b8:e8:c7:7c:0f:f6:81:64:f7:7d:6b:57:
                    9b:92:cc:6a:d2:d0:85:5d:8e:7d:7d:10:7a:53:d9:
                    07:41:a0:27:b8:41:c2:94:df:8c:ed:16:82:67:e0:
                    2e:ad:8e:52:c8:33:47:1f:7c:91:fb:4f:3c:a5:6b:
                    fa:bf:b9:62:22:d1:57:48:9f:e2:c9:55:bf:a8:56:
                    86:45:5f:a3:6f:59:c8:ef:f7:0d:df:19:4e:fc:d7:
                    7e:53:f0:56:22:da:45:42:ba:b1:fa:ff:7e:c9:7b:
                    a6:fc:43:fc:3b:43:7a:02:ee:9b:4b:ec:f6:2e:ea:
                    0f:35:05:ce:99:0b:9b:4f:65:7b:49:d0:7e:e7:e8:
                    6c:ee:72:4a:e4:38:0e:5c:45:9a:d8:c0:2c:8c:0a:
                    b6:50:96:20:3c:0b:d0:37:bd:ed:d8:ca:67:a8:53:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4E:F8:CA:36:B0:2B:FC:9E:C4:0D:C5:97:BA:1B:E0:6E:37:A9:F0
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:e0:50:d0:3f:da:12:ca:45:18:98:da:b3:fb:aa:07:e5:
         ce:8e:ca:74:38:62:aa:4f:2f:55:f7:43:c8:4c:8b:99:7b:99:
         b3:dc:f7:4a:48:1d:03:5b:1f:d5:2f:88:c3:07:a0:83:b5:59:
         ba:16:5f:4c:80:e1:cf:ba:83:94:08:1d:4a:ee:b3:7a:47:29:
         18:ce:57:59:fb:c6:8e:70:e2:4c:e5:97:78:a5:3e:69:d9:62:
         5d:0f:4b:b3:67:e6:47:6d:54:48:e3:d3:09:bc:2b:87:47:26:
         ac:e8:66:28:9e:56:a0:6f:e0:58:60:5a:74:cb:21:f7:c7:32:
         84:4d:19:46:65:76:1d:84:b9:c1:e6:51:cb:9f:09:d2:48:41:
         1e:bf:81:b8:63:6b:cc:fe:22:e7:b1:c0:23:72:51:6f:c2:ca:
         12:45:97:90:5f:c3:49:be:8f:a8:88:d9:58:da:5f:4d:7a:e9:
         8c:c9:0b:78:f5:ab:50:8b:75:cd:b2:0b:92:6c:48:bf:3b:45:
         2c:3a:e5:6c:a1:3c:d7:99:54:f4:af:57:77:b0:fd:8d:02:ca:
         da:8d:2c:fd:29:34:c2:03:5c:62:7e:57:1e:d3:19:c6:62:87:
         33:7e:2f:d2:63:6d:0a:09:40:37:e8:e6:65:44:5d:f4:6b:1a:
         31:41:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:53:56 2024 by rpki-client on console-fra.rpki-client.org