Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File:                     hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier:          YvftXBWxwTYKwMdQxyFMhmBTkegeJqAlHkZ3PmrmjxM=
Subject key identifier:   43:E5:3B:36:BF:A2:1F:DF:23:E1:40:F5:13:08:C0:88:57:0D:3B:6B
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer:       /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial:       01936934377523895A7570E60DD753138555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number:          0A5D
Signing time:             Tue 26 Nov 2024 16:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:49 +0000
Files and hashes:         1: R4Xbg7rOXS2nboKZ_-XrLiv2M6M.roa (hash: 4kF1ZGcyi9zTSZICrKNGKejPkQ9nhdXwUiu9dqrs4TU=)
                          2: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: RpLKLZqoWL4JOjnDgH+Ut4XEEYGQ7bNQRqq42BOfyrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:37:75:23:89:5a:75:70:e6:0d:d7:53:13:85:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
        Validity
            Not Before: Nov 26 16:00:49 2024 GMT
            Not After : Nov 27 16:00:49 2024 GMT
        Subject: CN=43e53b36bfa21fdf23e140f51308c088570d3b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:5a:ca:ef:82:d0:ef:86:1d:22:75:a8:8d:
                    fe:44:5b:33:88:c7:be:cd:a0:5f:77:fd:a7:cf:8d:
                    15:23:65:3c:1f:2a:e2:e3:4c:85:8f:34:bb:b5:e8:
                    f6:14:d2:d0:2c:37:34:d7:4b:84:c6:59:46:ee:b8:
                    91:88:63:aa:8e:64:a9:96:e9:ae:04:55:d2:e1:3e:
                    5d:16:84:8a:c8:81:51:12:7a:30:8b:b4:48:81:20:
                    35:31:55:ef:f5:dd:6f:3a:f1:21:d4:23:7f:df:12:
                    64:7c:a6:fe:af:c0:0e:b6:d7:7d:7e:b0:e1:82:ce:
                    bf:da:7e:ae:aa:58:7f:ae:7e:89:ac:f4:73:4d:0e:
                    0a:f1:c9:89:75:52:95:5c:42:57:54:73:15:1a:2e:
                    d0:63:7d:15:0b:3d:71:bb:4b:4f:c0:9a:84:a6:c7:
                    59:75:81:eb:72:b5:cb:06:c4:87:36:99:06:e3:73:
                    55:f5:ae:09:0d:be:d7:a8:f7:d4:90:7b:32:96:09:
                    80:db:03:a7:93:d7:e1:4e:ae:5e:f1:71:a0:5b:ea:
                    67:6c:74:ea:3e:14:4a:59:05:24:6c:cf:8c:9b:98:
                    64:24:61:5d:0e:87:bc:c4:25:ae:2b:e7:d6:d7:18:
                    c0:64:4b:e9:1f:f5:08:15:9c:d4:af:fa:bd:10:a4:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E5:3B:36:BF:A2:1F:DF:23:E1:40:F5:13:08:C0:88:57:0D:3B:6B
            X509v3 Authority Key Identifier:
                keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:db:0e:73:4f:2a:7d:b9:07:b2:f5:03:79:b4:6c:35:65:
         34:4f:a1:57:fe:00:10:f6:50:56:2b:7e:f1:ed:cf:77:af:1e:
         5c:f7:e9:f7:be:ae:34:6d:7c:13:5c:fe:b5:e6:53:9a:a9:d8:
         01:84:20:0f:fa:64:84:77:13:88:da:41:eb:82:c1:8a:f4:3d:
         12:64:23:b9:92:fa:d0:5a:a1:6f:8b:67:ed:5a:5f:a4:37:12:
         39:c2:fa:5d:3c:ab:dd:5c:64:3f:ff:9c:39:cb:72:ff:37:74:
         1e:e4:7a:7e:84:e4:09:d8:71:a4:ed:25:3c:e8:21:d4:0f:ba:
         ae:55:e0:d8:ce:b2:f9:a0:3e:8e:4e:71:96:bd:f5:07:52:55:
         7d:fd:9b:ad:31:9b:56:cf:74:f7:0a:28:a4:b3:79:fd:67:d2:
         90:a1:a6:8c:11:33:12:c6:70:e4:95:75:5d:da:e8:fb:09:46:
         96:43:aa:d7:80:ea:7b:15:5d:5a:5f:ee:5f:59:d6:cd:9b:83:
         9e:3b:31:c9:f0:1d:cc:79:00:8d:ec:fd:56:df:83:79:e8:37:
         df:e9:04:43:b6:08:bf:20:31:3f:de:f9:7b:0d:23:09:da:3a:
         67:86:72:81:ae:14:9f:f2:64:8a:2a:e9:47:65:0c:66:70:c9:
         a2:19:f9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:38 2024 by rpki-client on console-ams.rpki-client.org