Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File:                     U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier:          /ZHlXCbvHRXocxOsDKY7Y+/WPkPkHhtdFHJo3di3pEQ=
Subject key identifier:   F3:5B:45:4D:F3:1A:06:1F:E4:FB:D2:9B:14:56:D2:13:22:94:20:05
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer:       /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial:       01936933D2D152739C259F452DF7C031B583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number:          0D77
Signing time:             Tue 26 Nov 2024 16:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:24 +0000
Files and hashes:         1: 0SIf3B-zFTHjBffA4Q3K4XlSBSM.roa (hash: k9iJJW7bn5b063RiVhVpwGW174qDh7kRY+YejaIUhOo=)
                          2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: aTVYRMHU4azgo324DT2+AZ5vWQHUpubWi8opcWb1JIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:d2:d1:52:73:9c:25:9f:45:2d:f7:c0:31:b5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
        Validity
            Not Before: Nov 26 16:00:24 2024 GMT
            Not After : Nov 27 16:00:24 2024 GMT
        Subject: CN=f35b454df31a061fe4fbd29b1456d21322942005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:fb:b4:38:88:57:c3:77:b4:c3:8a:82:41:
                    c0:54:4d:55:c7:79:fb:fb:8c:9a:c6:1d:96:be:35:
                    39:04:a0:b1:ad:b4:0a:74:44:c0:db:e5:be:a7:66:
                    d4:b2:aa:67:cf:02:d4:1b:8a:c3:89:46:07:ed:13:
                    ef:6c:87:60:0b:2c:d1:0d:24:22:eb:94:e9:1a:39:
                    64:dd:98:4f:03:5b:98:fd:84:6a:a4:c3:19:ea:fe:
                    55:ac:e6:37:4a:24:94:4c:d1:c5:0d:bc:b4:44:c6:
                    c8:f4:03:cf:fc:d2:40:84:49:cd:49:6a:5f:05:2c:
                    45:9a:5d:00:59:11:04:bb:2e:84:6f:83:d4:1a:f9:
                    ae:59:ac:56:53:a9:17:95:d7:72:99:ab:a7:34:a8:
                    a9:32:6d:83:ae:d6:81:e3:2c:f1:8f:87:99:22:73:
                    d7:93:cc:77:be:af:c4:36:11:3b:26:8d:48:5d:aa:
                    6b:f0:29:33:ca:95:6e:d7:07:b6:a7:66:77:ab:05:
                    87:ed:70:23:00:b0:a3:1a:88:af:c0:e5:a0:a3:87:
                    2b:55:08:2a:71:9e:c0:f3:22:3a:dc:d4:e3:9b:6f:
                    c3:56:42:33:a6:e9:c4:d4:99:1f:b6:db:e3:55:ef:
                    6c:69:74:5c:8e:42:85:c9:86:02:f0:b6:f4:9e:a6:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:45:4D:F3:1A:06:1F:E4:FB:D2:9B:14:56:D2:13:22:94:20:05
            X509v3 Authority Key Identifier:
                keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:47:e2:70:96:68:78:3e:ba:64:2e:44:9b:9a:b4:71:30:50:
         91:79:49:5f:8e:6b:03:64:13:30:25:4f:18:85:c8:92:e8:8a:
         7a:43:77:6d:2f:ea:ac:f6:fb:97:32:4d:ab:7e:77:64:0c:c8:
         0d:a8:e2:b3:01:dc:b4:a4:48:a3:a1:e1:f0:60:12:a0:8f:2a:
         d0:41:67:1f:65:92:ea:82:40:86:e4:a9:8c:2e:ab:2a:13:7d:
         51:47:78:85:10:8c:54:43:c8:86:f6:21:84:12:c0:e3:aa:89:
         20:01:5b:13:f8:89:58:76:59:71:22:02:d1:be:d1:57:d9:ad:
         c7:b1:ef:52:5a:65:62:6a:5e:07:f9:9d:1a:f4:15:94:01:91:
         e2:79:9e:5c:88:c9:11:05:d6:e3:e4:45:ad:37:a7:6a:68:59:
         d8:1f:86:9e:d0:15:1d:2a:67:8a:4f:f6:8b:eb:92:0c:17:95:
         76:8b:f4:73:c5:d5:66:82:84:4c:0c:09:7f:5d:4b:0c:d8:7a:
         b0:5c:f2:b9:f2:2d:84:56:56:59:88:35:97:ba:ab:d8:06:3e:
         83:72:70:da:7a:2e:93:6e:e2:fe:f5:f4:b1:16:ca:bf:4b:82:
         98:c1:88:29:72:82:37:d2:32:77:46:4c:66:40:ce:d6:d6:e8:
         3b:39:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:32 2024 by rpki-client on console-fra.rpki-client.org