Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File:                     IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier:          pjYLdM0Xvbzqb6sL0YxrGt2LeR27hyYeD+qrbjDXqeE=
Subject key identifier:   9E:E3:D8:38:4A:FD:26:3A:B2:D6:36:25:FC:87:93:8E:B2:DB:57:08
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer:       /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial:       01935840612BDBC68CE9D59E7072651BE8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number:          112D
Signing time:             Sat 23 Nov 2024 09:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:34 +0000
Files and hashes:         1: 1LPaXo_F64ph253UkGkgiWbj09w.roa (hash: PoEfB2M0g0fk5vnw9jJfEr4K5rNsyGj486rJNmsqahA=)
                          2: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: Mvzsf7kXUgNlxPfPCeHItH6qbXL3c0VYzO3FXE+Q9/I=)
                          3: v1sZsNUC6VbnO-9TZ8ASCj4rYMM.roa (hash: 0d+Q7UDziIZGuROltH+Xiq59360WQR5Xq6tilF8kNdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:61:2b:db:c6:8c:e9:d5:9e:70:72:65:1b:e8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
        Validity
            Not Before: Nov 23 09:00:34 2024 GMT
            Not After : Nov 24 09:00:34 2024 GMT
        Subject: CN=9ee3d8384afd263ab2d63625fc87938eb2db5708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:15:a6:eb:09:cd:f1:fa:5e:17:fd:12:c8:
                    c1:09:29:f3:34:90:fd:0e:c1:6e:6b:1c:a7:3d:db:
                    c5:c1:e8:c0:70:1c:41:53:6d:cc:d3:8d:ef:31:b8:
                    ec:d4:5f:e0:f4:9c:4f:a8:9c:99:e7:10:87:0e:40:
                    72:f5:c2:f1:3f:e1:e3:04:f0:65:bb:e7:1d:d1:f4:
                    6b:84:74:3d:c3:e0:37:be:80:e5:0f:13:a8:3d:b4:
                    64:18:fe:2a:26:98:13:61:38:00:8d:f0:51:61:3d:
                    28:f7:4b:73:3a:f6:a7:9a:73:cc:bf:81:89:4c:75:
                    a1:c3:43:72:5a:c5:19:d5:32:ab:41:6e:72:0f:3c:
                    c9:77:46:bf:5b:ac:90:2a:3d:5b:34:06:94:4c:07:
                    9e:fe:44:a5:fd:26:8a:8d:bc:79:52:3f:e0:c6:1b:
                    7c:4d:03:ba:61:78:da:1f:dd:4f:da:d9:ec:da:c6:
                    b8:6d:33:64:15:f3:16:da:06:11:46:87:40:3a:b6:
                    45:14:31:71:b7:3c:ca:00:c5:74:e3:21:ae:01:5d:
                    d0:7e:01:4a:68:8b:0e:13:21:fb:7e:27:a7:10:e7:
                    72:a9:aa:e5:52:f9:48:0e:9c:1b:6d:90:45:09:52:
                    3e:66:dc:f2:17:fd:0a:16:cb:4b:b4:fb:c7:a1:6a:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:D8:38:4A:FD:26:3A:B2:D6:36:25:FC:87:93:8E:B2:DB:57:08
            X509v3 Authority Key Identifier:
                keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:39:53:00:13:31:83:62:be:15:06:c1:fb:ab:fc:39:5e:d5:
         94:ca:13:19:8e:52:2e:2a:ac:5d:e1:42:5a:04:c9:b3:c8:11:
         52:5f:df:d0:31:0b:c3:41:23:1c:cd:be:96:4a:fa:6f:71:ed:
         5f:2e:54:3e:97:9e:8a:78:f6:8c:41:f9:d0:25:22:fc:94:a4:
         38:98:55:c8:81:51:90:41:70:bd:2b:17:86:5a:f9:b8:1f:4c:
         23:e4:bc:e4:f7:d1:56:f4:3e:8c:c5:10:a2:ab:9c:9e:90:4b:
         fc:0b:40:6b:7b:16:cd:7b:d5:f2:c4:6f:ad:4f:73:8f:c5:b9:
         bc:ae:56:84:68:97:2e:b5:7c:c6:5e:73:39:4b:fa:79:d9:bb:
         72:1a:7f:44:17:fb:a0:b3:9e:2f:a0:70:8c:c7:8f:af:e1:4e:
         be:c8:a0:2a:ff:38:df:a3:aa:8c:4c:a0:6e:92:59:92:f2:14:
         39:f8:fc:6f:19:d4:13:82:00:7f:fb:02:70:55:17:25:5c:d9:
         db:18:ee:93:be:d8:89:2c:e7:b9:24:c8:15:0e:c9:74:c9:a8:
         d9:df:9c:4d:5e:7d:3d:43:d2:be:61:46:8a:84:ba:4f:93:ce:
         a7:ad:c3:6d:b7:0f:25:ac:0c:ea:71:e3:66:fb:68:7d:3a:82:
         75:6f:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:22 2024 by rpki-client on console-fra.rpki-client.org