Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File:                     A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier:          BZ5F8YuWtNxICMTXDRQTtwZHai4MwVLWUk3U2VOtf2o=
Subject key identifier:   AC:77:51:80:F7:C5:50:5E:48:2E:9A:61:DA:CE:DF:41:10:50:E4:7E
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer:       /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial:       019405A11269A2C69BDFBCDC9CF3BAA4EC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number:          4E
Signing time:             Fri 27 Dec 2024 01:00:29 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:29 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:29 +0000
Files and hashes:         1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: av8y7GXqq2orccgxqSb6tZMeTd6NC2C9kUu99O6YHfs=)
                          2: gBVIgxuL2lHcvyQiCBdS9veAyZo.roa (hash: do41gRRTTJ+A6nnwcMUIwPg8nUAbjs7rO4F9XUbPsns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:12:69:a2:c6:9b:df:bc:dc:9c:f3:ba:a4:ec:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
        Validity
            Not Before: Dec 27 01:00:29 2024 GMT
            Not After : Dec 28 01:00:29 2024 GMT
        Subject: CN=ac775180f7c5505e482e9a61dacedf411050e47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:b0:c6:0b:b4:b8:89:d1:76:8e:7f:af:0d:
                    f0:9f:54:27:37:04:25:21:05:b5:da:22:2c:f9:f8:
                    27:4a:13:8b:5f:b4:f3:75:57:a0:49:7e:bc:4e:00:
                    3a:ef:38:8b:ae:72:3c:3e:67:ff:04:40:02:5e:4e:
                    f8:66:0a:89:c7:20:bc:b5:36:d5:0b:42:10:44:f9:
                    42:73:11:b4:64:af:7b:27:c7:93:98:85:34:13:2f:
                    c9:33:a7:a5:cd:fa:ec:f1:e8:65:cd:31:96:f5:46:
                    ee:88:1b:34:45:7d:81:78:6f:00:50:22:df:ee:79:
                    a3:b4:2c:a9:2c:e8:f2:aa:18:f0:07:c0:e5:e6:0f:
                    1c:d1:78:34:3e:03:40:e9:f0:a7:94:30:73:b6:99:
                    e9:9b:01:fb:b4:2d:41:c2:dd:ab:b1:32:02:53:3a:
                    54:52:e8:63:d3:ed:40:da:60:f6:4c:ae:27:e2:88:
                    a4:46:80:5a:e8:7f:37:b1:13:86:b9:54:17:16:2a:
                    3e:62:65:89:18:02:f4:1f:73:40:70:1f:b2:af:18:
                    77:97:9f:30:d4:b7:a8:c2:16:2d:7d:a3:a9:d2:8f:
                    fa:01:78:5a:77:3c:9d:39:e2:b0:52:96:25:15:94:
                    44:02:1d:89:30:25:b6:c4:37:13:cd:85:18:f1:49:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:77:51:80:F7:C5:50:5E:48:2E:9A:61:DA:CE:DF:41:10:50:E4:7E
            X509v3 Authority Key Identifier:
                keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c2:55:5c:7b:1c:ee:c2:5d:f0:62:db:ef:3c:84:9d:25:d3:
         82:8e:37:d7:12:63:ed:90:cf:fc:b6:af:d7:20:22:70:94:bb:
         6b:1d:56:48:53:2a:b0:a6:db:c6:58:54:3f:e9:0b:28:70:00:
         40:f9:1c:f8:ee:d4:33:34:59:29:18:0d:3c:0a:6c:3d:0f:60:
         aa:e5:ea:e3:3a:01:3f:16:e0:7f:a2:a5:74:8f:a0:52:96:f2:
         5e:d1:d6:bc:80:86:cf:f7:1d:09:be:52:68:39:1b:d9:fb:51:
         db:34:2a:bb:d1:7e:cc:33:ae:b9:60:14:e5:8f:b2:14:18:a3:
         30:20:13:91:06:95:bd:db:97:74:1b:34:5b:60:00:a9:9f:82:
         8b:44:e9:18:7d:a6:3c:cc:e2:04:89:17:e8:f5:c7:75:26:c7:
         47:1b:c5:c1:1a:13:a5:6e:60:d6:47:88:11:9d:9f:2c:b7:31:
         7a:fc:26:ea:62:ae:1e:d3:a0:1b:34:5c:2f:19:b0:c3:71:fc:
         7a:48:93:d2:f5:8c:73:bf:fb:7f:86:84:99:8f:32:61:73:2f:
         4c:2c:26:d2:50:75:a4:b2:23:37:bb:f6:81:6d:c7:35:02:8e:
         5e:38:1d:7b:2e:99:b9:63:be:70:5e:b8:c7:63:54:3d:3c:97:
         fe:fa:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:31 2024 by rpki-client on console-fra.rpki-client.org