Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          LW+rZVspxVQTdqtAR8TSWzVDb7s34xpXH6TTdAufX4c=
Subject key identifier:   E7:F3:CF:8B:B9:07:50:39:DA:0A:78:BB:B0:58:DC:93:44:56:EA:F7
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019355AD76BF8D4FC068DAB37FA8C4F0AA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0611
Signing time:             Fri 22 Nov 2024 21:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:51 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: 2lEWpEBBEh0P/AFFESuPncEG9P7EofYEgo7hjCKNSBo=)
                          2: UWoPvQi7A9UW8V1WTJrHDlAoxts.roa (hash: Uq+YJPrL13PEfVtGKOdmzIJ+EA+9qKFpwKpgMfxGlpg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:76:bf:8d:4f:c0:68:da:b3:7f:a8:c4:f0:aa:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Nov 22 21:00:51 2024 GMT
            Not After : Nov 23 21:00:51 2024 GMT
        Subject: CN=e7f3cf8bb9075039da0a78bbb058dc934456eaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:81:d7:1f:3c:73:02:71:0e:b4:bf:8b:d7:
                    80:91:26:ec:2e:8c:99:dd:08:25:19:9a:4b:31:bd:
                    ec:24:e4:49:3f:8e:e9:69:3d:fc:b2:04:a6:21:4e:
                    c1:3c:0c:38:21:6a:01:c2:2e:f7:fa:14:e6:9e:57:
                    1e:66:40:a1:3f:ce:59:a5:47:8c:5d:18:29:7f:25:
                    cd:3b:09:81:17:50:b7:c2:16:ef:36:14:48:b8:65:
                    df:5e:f4:8e:71:57:72:c1:23:42:bf:c7:f7:b4:98:
                    5b:7d:ab:08:2e:1b:09:50:3a:40:70:f2:7a:8c:0b:
                    3c:1f:15:74:99:ec:45:ed:0e:11:4d:f4:d8:00:02:
                    34:04:32:5d:65:30:3a:9f:30:9f:f7:d6:ca:19:d4:
                    c2:cb:b0:f1:18:2a:c2:55:3c:5e:3f:c0:58:24:08:
                    21:56:84:eb:c7:84:8f:0a:fe:5e:a5:2b:b6:e0:e4:
                    02:8e:f2:87:4f:6a:8e:7e:ed:8b:65:56:b5:62:c8:
                    a5:6b:aa:14:ab:63:45:66:6b:26:87:d6:ef:48:98:
                    a6:78:f3:b5:cf:a9:e1:4b:dd:8c:44:ef:e5:e8:9f:
                    e0:d7:29:ca:90:e1:a3:d2:8f:c1:a2:ad:62:fe:1d:
                    7e:ad:c6:2a:c2:ec:93:8a:77:35:ba:89:45:b1:7a:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:CF:8B:B9:07:50:39:DA:0A:78:BB:B0:58:DC:93:44:56:EA:F7
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:92:04:98:c4:b6:77:72:8c:9c:4c:c3:5e:45:e5:15:b0:ea:
         68:c3:d2:a7:a9:57:37:e1:b4:a9:16:ea:ff:b1:71:0c:c4:97:
         3b:d0:00:ca:99:d0:1b:7a:55:cb:90:01:a7:f5:41:ce:07:c1:
         24:4b:70:59:87:c0:2c:25:1e:e6:34:3b:89:d8:59:a8:f6:89:
         74:37:cb:a6:ef:a6:a1:19:15:24:79:f8:7e:07:80:80:6d:3a:
         89:e2:4e:74:a5:83:aa:43:d2:ca:f9:5d:71:d4:d5:e6:13:32:
         b3:93:41:01:ee:7b:2b:82:9d:02:8e:c1:54:f1:c3:bc:12:fa:
         0c:52:54:3e:36:eb:53:17:3b:c8:38:cc:1b:e6:5d:ec:c8:6f:
         71:f2:03:8e:56:75:ee:c6:53:91:a5:bb:6e:83:5e:01:46:df:
         81:4e:9b:b0:aa:8b:0b:83:54:a7:78:65:bc:dd:43:0f:27:8f:
         57:a0:d7:7f:33:fc:56:18:2e:67:55:ab:e7:b4:c6:d5:73:06:
         ed:e6:8e:c5:33:04:5b:60:cc:60:fb:ac:0d:6f:fc:0a:0a:02:
         55:0c:90:c4:2b:de:44:28:8f:45:3f:49:61:54:7b:74:57:51:
         67:61:86:0c:a7:18:34:ad:16:ff:c5:c0:8d:64:58:18:4d:48:
         7f:71:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:45 2024 by rpki-client on console-ams.rpki-client.org