Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          PJVIkryt1bSV9AqpUsoCsjEP8smxhs330xKdEe2VOsM=
Subject key identifier:   E8:5C:44:35:E9:1B:31:5B:4D:0F:A6:25:CD:47:CA:5F:3E:5E:2A:DF
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       019359C1542AB48373553D8D4FA91E404B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          0D09
Signing time:             Sat 23 Nov 2024 16:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 16:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 16:01:02 +0000
Files and hashes:         1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: ffGfWsPyeiW7a12FScp+R9yDM0LxlyPnGljnUwT6JVU=)
                          2: lEM7voHZ4kIjN9pTLMW_Fzby9qw.roa (hash: xehplS6By0BioM3I/N8Yk6zvZjv8jTM2kU5AHa+3nso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:54:2a:b4:83:73:55:3d:8d:4f:a9:1e:40:4b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Nov 23 16:01:02 2024 GMT
            Not After : Nov 24 16:01:02 2024 GMT
        Subject: CN=e85c4435e91b315b4d0fa625cd47ca5f3e5e2adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:2e:06:1b:c8:15:fd:72:03:55:c2:9f:b0:
                    89:dd:62:0d:a1:b3:8d:0d:50:af:d2:86:46:97:78:
                    c0:27:c2:ed:fd:7a:37:dd:93:84:65:a8:e6:23:ca:
                    01:87:73:a1:1f:11:eb:e6:0e:27:24:2b:71:57:fe:
                    94:34:96:0d:45:fd:79:13:87:00:96:8c:80:2a:17:
                    af:ed:89:85:2f:52:8d:ad:26:73:b5:86:db:43:62:
                    75:4c:1a:06:f2:be:b8:ef:52:ac:3c:c4:70:2e:4a:
                    ce:6c:90:05:ba:81:52:45:3e:51:af:74:f4:59:63:
                    eb:f9:8e:05:75:71:ff:e4:f9:8e:5d:01:d2:52:a7:
                    5f:29:de:1c:8d:bb:4a:1a:90:45:5e:bf:e0:51:31:
                    9b:ef:18:ff:fd:3e:3e:30:f1:7e:c8:9b:d1:e8:27:
                    ac:56:8f:dc:f8:b6:44:3b:01:9b:f7:25:5b:1a:17:
                    30:86:c4:eb:35:40:5d:22:5e:3d:57:0f:1a:c0:91:
                    b1:1b:8a:7a:b0:3b:0e:d1:b8:d5:64:09:e2:02:3c:
                    51:61:12:aa:bb:1b:7b:a0:31:2d:48:01:40:a7:b1:
                    c7:31:f0:1f:35:22:0a:bd:81:59:df:ee:f9:7b:3d:
                    1d:d9:af:57:b4:24:40:e2:6a:b0:e2:56:fd:07:c4:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5C:44:35:E9:1B:31:5B:4D:0F:A6:25:CD:47:CA:5F:3E:5E:2A:DF
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:60:af:58:7f:db:28:bd:0a:64:a3:fc:41:5b:b1:5e:ca:17:
         55:99:c9:4a:5f:8b:a7:21:4c:7f:56:c0:b5:9d:01:2a:15:c0:
         03:95:ce:b6:12:de:46:09:4a:5d:7b:12:56:09:78:df:0e:5c:
         bb:5b:a3:a1:ed:fd:90:a2:c8:0f:74:67:ef:63:08:b5:25:5c:
         da:41:5a:2f:8d:6f:54:34:de:67:43:1c:9e:2c:06:79:d7:d0:
         95:da:53:3d:2d:de:40:b2:4f:61:1a:fb:f9:28:53:14:e2:5d:
         cd:2b:86:2a:c8:c9:a9:0c:4f:7a:98:cc:06:cb:db:e9:d5:0e:
         03:33:71:7f:bf:73:bd:7e:f5:c9:3e:79:a7:e5:95:1b:b5:9b:
         94:e5:47:43:ab:2a:51:a0:45:3c:7a:cf:d0:de:40:f6:60:54:
         2d:b2:3a:5a:f9:40:d1:96:8b:5b:25:7e:31:bf:1a:51:01:fe:
         1e:64:43:a2:02:39:6e:35:c8:ca:be:f1:11:80:11:cc:50:52:
         3a:da:7c:0b:5c:53:5f:6f:be:ae:bd:ff:69:60:51:91:b2:93:
         06:76:33:42:cf:40:9f:f6:d4:66:9c:4e:b0:0e:f7:10:b3:4c:
         20:30:d6:3b:47:65:ab:c4:e5:18:50:c5:db:94:47:66:d1:7a:
         4b:4c:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:19:12 2024 by rpki-client on console-fra.rpki-client.org