Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier:          iD1nnSMlw1hMYg9gl6EY88+9qDxkpwjE6KRGyrvgfdg=
Subject key identifier:   8C:A7:20:FC:05:9F:3F:89:9D:4E:F8:0B:61:CA:87:ED:A9:E4:93:CC
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       019406473025514BDDAA18AB45431C245491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 04:01:56 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:56 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:56 +0000
Files and hashes:         1: 1-arrEgj5LmKdT47Pm86qEshvyGY.roa (hash: zUPqjnWJZw40De4R6HEefs+zPqcFq65dn63Ktvj7c88=)
                          2: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: NHPk7Pik12I2futVYSHSmEIjRZJpYyhvB+AGRRbXjUY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:30:25:51:4b:dd:aa:18:ab:45:43:1c:24:54:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: Dec 27 04:01:56 2024 GMT
            Not After : Dec 28 04:01:56 2024 GMT
        Subject: CN=8ca720fc059f3f899d4ef80b61ca87eda9e493cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:1e:d3:8d:34:20:e8:78:cc:1a:30:06:f2:
                    ab:fa:13:0d:9c:eb:9e:88:80:f5:1f:ca:1c:27:3e:
                    68:2e:d0:7b:c1:84:14:38:33:a0:41:c4:27:ce:bb:
                    90:2e:10:ec:56:16:40:81:1c:75:dd:a8:11:5d:7e:
                    2a:ba:99:8d:08:1f:3c:27:a6:40:8b:4d:bb:64:9a:
                    c1:5b:79:66:b4:45:b7:05:7b:e9:82:76:47:d9:c2:
                    6f:0a:3a:2d:2c:99:26:b9:43:64:40:06:67:8b:a6:
                    ac:f6:db:e5:7d:a6:61:e7:9a:85:cd:05:35:c2:92:
                    e1:3b:9b:40:f1:9b:14:9b:c5:a1:1b:c1:cf:78:4f:
                    db:69:e2:2f:1d:67:71:d1:96:62:ba:a1:e8:0b:d0:
                    12:d3:1b:a4:a5:55:33:30:85:95:54:16:f3:46:95:
                    1c:8d:b2:f1:6a:1d:59:fe:12:8d:b5:41:46:f9:4b:
                    af:a7:70:a5:1b:cf:d4:aa:64:51:19:cf:e1:b1:0f:
                    29:94:ac:d3:43:df:20:4d:ab:3f:10:8f:9f:10:84:
                    99:81:5f:73:98:c8:01:c3:10:fa:29:9c:13:8a:ed:
                    37:77:6e:02:64:7f:ad:41:17:eb:4f:f1:60:b8:d0:
                    7a:2d:6d:06:aa:60:9e:6d:10:8f:ac:14:e9:a3:cf:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A7:20:FC:05:9F:3F:89:9D:4E:F8:0B:61:CA:87:ED:A9:E4:93:CC
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:47:83:71:ef:fa:46:49:65:c0:32:19:e8:ad:96:b4:12:11:
         d2:4d:8d:54:44:7d:d3:b2:f7:36:3f:76:10:07:eb:ca:82:ad:
         ba:f0:87:de:33:1b:3f:93:3f:fd:66:a4:3a:4a:17:8d:b3:a6:
         3e:bb:c3:96:71:35:27:dc:1b:96:a1:e9:a6:fe:96:c6:d6:d4:
         46:7b:37:cd:9b:86:b2:21:8a:71:b4:70:9d:35:70:c0:db:4e:
         bd:39:71:c5:d7:a7:e3:60:49:f9:5c:11:84:c7:0a:e0:2e:bb:
         34:3e:00:11:58:92:8e:fa:98:67:13:eb:a0:de:2c:a9:cf:a0:
         05:10:7d:34:a2:bb:cb:90:ab:56:59:a0:d2:e1:e4:f5:91:37:
         92:d5:71:69:73:1b:79:b2:da:87:e4:f0:59:a6:8a:2c:3a:3d:
         cd:dd:60:81:bc:f2:b2:b0:22:4f:8a:ea:dc:6f:02:53:8d:42:
         50:8a:94:96:4b:f1:13:5d:64:43:ad:c6:8f:7a:04:40:fa:36:
         0c:8b:83:b0:5d:58:18:7f:0c:40:de:74:9e:a4:c1:62:df:6f:
         ce:91:40:b8:33:5d:56:0d:13:cb:43:5e:c7:e8:79:c4:61:4a:
         22:f8:0b:fd:db:04:e7:ab:61:c6:9a:0f:99:d7:e0:6c:e6:80:
         6f:8e:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:12 2024 by rpki-client on console-fra.rpki-client.org