Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File:                     5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier:          Tpv1WAlxU40opKBBfrSd7tHh2pT71gJAnqgmoYSzvpg=
Subject key identifier:   A7:68:71:B5:26:1E:CA:51:EB:48:77:28:7F:9B:95:73:19:8F:3C:4D
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer:       /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial:       0194064725AB0646096BCFBAEF7BE114439B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number:          0F1C
Signing time:             Fri 27 Dec 2024 04:01:53 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:53 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:53 +0000
Files and hashes:         1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: gM+U/5rgjU0P+j2dCYbPNh37uXMLp0PLA3bpMrulw50=)
                          2: JtDJk75Xn5v4cr3SS9eWr0pC1Ns.roa (hash: XTArYEkh6zQthwv8NUzk6PaWqGFkr6QZn5H1lrrZNFE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:25:ab:06:46:09:6b:cf:ba:ef:7b:e1:14:43:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
        Validity
            Not Before: Dec 27 04:01:53 2024 GMT
            Not After : Dec 28 04:01:53 2024 GMT
        Subject: CN=a76871b5261eca51eb4877287f9b9573198f3c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:37:6d:78:68:76:44:31:c2:8f:6e:ee:0b:
                    d3:86:33:00:d2:3a:9a:7c:d6:80:6a:04:04:19:e6:
                    93:d6:50:22:63:f1:af:f8:bf:77:39:72:4c:d8:c0:
                    c9:50:05:01:0a:ff:68:4d:4c:c0:3a:96:ed:d7:90:
                    56:43:14:a7:7e:0d:06:ed:e8:a4:cb:f0:ab:3a:33:
                    1f:24:f6:a9:01:36:63:c4:5a:2b:8a:dd:93:e3:60:
                    0f:58:dc:54:b1:a1:27:7c:c8:0a:ad:2e:19:11:ec:
                    57:16:bb:ee:f2:4b:28:ba:9d:3f:d7:c3:fa:0a:f2:
                    58:92:97:74:7e:43:62:00:af:89:87:45:f4:d5:a6:
                    eb:7a:45:b1:61:48:0b:a4:28:c0:19:de:29:64:00:
                    9b:a1:0e:ef:95:ff:42:68:0e:95:4b:12:b3:51:57:
                    e5:36:21:0c:f8:79:01:39:3b:6b:a2:5d:4a:08:5c:
                    94:7b:3d:ca:89:46:f2:f8:96:33:56:9a:52:90:67:
                    32:00:5c:fa:29:fe:cd:82:bc:e9:da:8a:a2:f2:8d:
                    d6:0b:dc:63:8c:25:de:ba:ab:0d:71:39:a4:87:ab:
                    0c:42:41:10:d9:ac:51:a2:b2:e0:f3:1f:56:f6:19:
                    32:bc:a6:73:9c:5a:3f:8a:73:b4:79:83:c3:0d:8a:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:68:71:B5:26:1E:CA:51:EB:48:77:28:7F:9B:95:73:19:8F:3C:4D
            X509v3 Authority Key Identifier:
                keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:47:af:72:9f:8b:4f:4d:94:7c:8c:8c:fd:89:89:0f:2b:18:
         6c:a2:5b:7f:d3:f6:08:44:7a:26:74:5d:6c:1b:e4:e3:60:c7:
         3d:45:13:bf:ef:7b:dc:2f:d1:ad:60:ec:2b:7d:5e:e3:1a:33:
         e4:1e:82:8c:70:0e:b3:d5:a6:64:f1:eb:14:85:a7:19:aa:a6:
         40:09:c7:6c:9a:16:ca:6e:0c:e9:fe:7c:44:65:b6:f7:5f:2e:
         41:4b:fb:e5:9f:34:f8:ea:37:8a:0f:9c:e4:f0:cd:a7:15:5d:
         69:74:06:e9:ee:39:ca:af:fe:0a:d6:47:17:ab:3c:d9:1d:91:
         34:e2:91:f9:e3:b0:57:08:f7:92:ac:48:81:7e:57:12:39:fb:
         dd:0b:26:aa:84:c8:69:30:72:a2:49:3d:e1:e4:55:1b:3b:87:
         5e:d1:45:72:e4:69:df:7e:36:5a:97:03:c0:bd:d1:ca:ad:22:
         27:64:65:67:b7:e5:34:65:aa:40:cb:75:b6:67:20:10:04:22:
         06:60:56:5b:5d:98:32:36:12:9e:ce:cf:73:ae:92:9b:06:99:
         06:d8:48:8d:0c:f9:b1:f2:3e:cd:cc:58:d8:37:90:b0:c5:eb:
         da:ed:f0:41:6c:95:4f:22:f6:b1:69:80:a7:be:3c:d3:4d:a7:
         ac:33:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:02:43 2024 by rpki-client on console-ams.rpki-client.org