Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
File:                     rhexu-eM5Aqh7G0neLweTqKVFn4.mft (raw, json)
Hash identifier:          S1PPbeOX+RryPrHCMxoR6VUV1kTIFaNuxAvkel/c82Q=
Subject key identifier:   47:5A:B5:3C:85:8C:35:F1:B7:05:30:02:1C:18:B7:99:53:3C:E8:23
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Certificate issuer:       /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial:       01936AB469F7B4140EFF4B9DECDE4092018A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
Manifest number:          0D75
Signing time:             Tue 26 Nov 2024 23:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:28 +0000
Files and hashes:         1: rhexu-eM5Aqh7G0neLweTqKVFn4.crl (hash: J7HHQtrO3ZPO/e2cQT7hSzv9jwCg5F8h1T1SmEHCQAk=)
                          2: xM7arG7PWSQijRXtLHgKrhJu0ko.roa (hash: KE7xCoy9QQI966VxACoYg15b0kJUPEmT1xMDsukNo5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:69:f7:b4:14:0e:ff:4b:9d:ec:de:40:92:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
        Validity
            Not Before: Nov 26 23:00:28 2024 GMT
            Not After : Nov 27 23:00:28 2024 GMT
        Subject: CN=475ab53c858c35f1b70530021c18b799533ce823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:31:f2:6b:9d:42:37:a5:0c:a9:57:fb:93:
                    c1:66:0b:4b:6c:8f:d5:f4:03:13:69:24:c0:65:f0:
                    37:b3:1b:67:ec:60:da:e5:8c:df:4c:0c:e4:48:e4:
                    eb:31:88:49:45:cc:e0:7d:65:d8:0e:cb:ab:18:2d:
                    af:37:cb:ca:fb:c9:ff:58:ff:dc:a9:f4:03:e9:0f:
                    e3:49:91:1b:60:8b:72:23:93:98:e1:3d:ce:f7:a8:
                    21:a2:06:c1:5c:78:7a:34:ae:db:bf:d9:fb:be:be:
                    9f:b7:fa:00:c9:6a:14:34:5f:92:f2:8d:7f:68:5a:
                    89:b3:35:14:37:fa:8f:91:53:4c:d6:41:86:36:d4:
                    4b:30:5d:40:49:89:05:0b:84:74:70:eb:83:a1:69:
                    97:26:76:a8:f2:57:fe:47:1c:87:8e:e4:b6:d0:cf:
                    77:5d:b4:0e:ba:bc:b7:ea:4d:0e:ac:47:75:7a:02:
                    e1:c7:94:de:86:5b:20:2c:62:7b:1e:fc:9d:b5:03:
                    64:17:bc:b1:26:29:ce:f9:fc:3c:d0:e5:d7:03:7b:
                    dd:53:6d:6e:e3:82:4c:bd:4d:f5:97:9d:e9:7b:09:
                    3f:24:31:87:7b:70:d1:65:5b:17:a4:74:16:45:72:
                    e7:53:a5:71:c1:95:e0:af:98:3c:c2:e8:b0:ad:9a:
                    18:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:B5:3C:85:8C:35:F1:B7:05:30:02:1C:18:B7:99:53:3C:E8:23
            X509v3 Authority Key Identifier:
                keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6f:5e:36:10:94:78:25:27:0c:3a:b7:ff:95:80:5f:11:00:
         93:93:05:c6:63:fe:b1:96:c3:fa:0e:57:48:56:31:69:fe:31:
         51:ba:f8:d8:ec:cc:c2:e7:d0:db:ea:83:2f:17:ba:2c:fc:c6:
         03:cf:96:ed:64:9c:53:e3:a5:81:0c:e4:74:96:39:06:57:41:
         72:c1:6c:73:9c:84:b5:08:46:ca:51:2c:5a:9f:b8:7c:35:16:
         77:71:23:85:e5:35:6c:17:de:7d:9d:2b:ec:e3:35:c3:07:52:
         80:a1:34:c0:ce:c6:0b:4c:24:ff:35:43:35:38:c6:83:07:fa:
         60:24:1e:87:74:7a:c5:d0:71:59:4c:ae:83:52:09:46:f1:8c:
         e2:4e:c0:cd:e2:e0:d8:02:c0:d4:22:f1:92:05:59:53:ad:6c:
         7c:36:85:de:4b:52:47:eb:e3:7c:51:60:82:df:7a:e9:c9:aa:
         da:e3:0b:d0:06:e7:64:fe:24:77:90:58:a6:69:0e:5e:9f:20:
         41:5b:65:fc:cd:19:c2:85:9d:5d:49:b1:52:fb:8a:37:80:10:
         27:9a:97:c2:a0:c6:06:0a:d8:d5:fa:19:00:c4:63:67:77:b2:
         87:5b:ad:de:b4:77:65:d8:08:ee:5c:d8:02:1d:ac:d5:a2:d2:
         b5:ad:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:40 2024 by rpki-client on console-ams.rpki-client.org