Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File:                     5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier:          LkHdySNd7o1v7umvvX5Ip9XBY42kDAI8ceUgnqwf30A=
Subject key identifier:   0F:A0:17:BF:D5:4C:5F:D6:6D:60:43:BC:B6:DB:2E:CF:8B:1A:C5:64
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       01936331DA656A3C2DE18380CFABE7C172EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number:          12A0
Signing time:             Mon 25 Nov 2024 12:00:31 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:31 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:31 +0000
Files and hashes:         1: 2gPomQy9QTo3bM8bK1fEK1O85ow.roa (hash: BxGBndT8Qkar3eXS4vJkZUwNpVXy/vWb1dp8Q2moo00=)
                          2: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: /+MC8elRs+ewlbmZme9SaC74nvqBTuCB5rUrdLNq2d0=)
                          3: SHWU1ffteYiKNdV8nV8KpMMnwzI.roa (hash: RT+meFDyI2srD7huerKpkocWII21V+n6+ftFY0PChPU=)
                          4: SJns8OQHJ8A5ZA4uV89PYzO1QtQ.roa (hash: 84kouCWklfsqsHwiRsRsmOHC75HCLYNDMJoewtBjB7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:31:da:65:6a:3c:2d:e1:83:80:cf:ab:e7:c1:72:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: Nov 25 12:00:31 2024 GMT
            Not After : Nov 26 12:00:31 2024 GMT
        Subject: CN=0fa017bfd54c5fd66d6043bcb6db2ecf8b1ac564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:8a:98:96:2e:9f:7a:50:bb:aa:92:3d:eb:
                    48:ad:b7:84:d3:47:0e:f2:0d:15:fb:0c:1e:db:ab:
                    c8:ee:f5:c1:5d:3a:ff:05:2f:c0:ce:b1:f4:8a:a6:
                    2e:74:40:e8:e7:26:bc:55:9e:45:5d:b6:dc:84:ed:
                    bf:4c:ea:15:62:13:64:3b:25:93:87:9c:5d:2a:e8:
                    e1:8e:4d:6c:21:27:bb:24:bd:91:9c:71:24:de:c0:
                    9c:1b:56:3b:b2:b7:65:fe:22:8c:fc:13:5d:b7:cd:
                    01:36:9a:7d:bc:69:2e:f7:6b:0a:48:8c:47:2a:65:
                    99:af:e0:d6:5b:d6:76:bd:ce:a8:b2:1a:04:a1:ee:
                    fe:b7:0f:8f:30:00:a7:09:f5:07:3c:39:00:8b:fe:
                    39:2f:9e:6f:2d:cc:e5:d5:78:61:a6:75:40:73:e1:
                    ad:28:88:58:56:00:ad:13:14:f2:c5:60:e0:11:7d:
                    c8:23:89:19:94:cf:ca:ab:7c:09:ed:98:6a:76:1b:
                    05:0c:23:0e:df:7c:ef:c3:a0:5d:5d:e4:a8:3e:61:
                    0a:48:25:2b:bf:42:da:b2:e7:99:64:d1:14:3f:2c:
                    82:44:fa:56:e6:36:e8:55:51:d4:8e:e4:22:f5:99:
                    98:88:0f:27:7d:a3:88:25:15:e0:b0:05:25:04:24:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A0:17:BF:D5:4C:5F:D6:6D:60:43:BC:B6:DB:2E:CF:8B:1A:C5:64
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:80:45:7f:61:ad:c3:b1:b4:bd:4b:20:18:23:02:e4:56:
         b1:26:8d:5d:c1:a7:71:ce:00:42:0e:3f:22:7c:8e:42:13:09:
         c5:69:48:f5:1a:9b:dc:94:e1:ab:73:78:59:b5:5c:c9:04:a8:
         85:8b:2d:c2:f3:a1:a7:da:df:b7:2a:9a:ca:ae:14:bd:4c:92:
         d6:7e:d7:a5:71:2a:21:c5:09:6c:67:b4:6d:f2:f2:39:74:d2:
         3a:e4:8e:5a:c4:f2:9f:fa:9b:1a:ba:ce:00:2b:38:43:8d:2c:
         7e:c0:0a:f2:49:d9:22:7c:a3:2d:20:fb:bc:2b:a2:47:00:f1:
         6c:cc:fb:73:1f:a5:d7:2f:d0:cb:7c:c9:c5:ac:31:b3:2f:60:
         8b:8f:04:27:a2:66:12:39:0e:fc:bd:7c:d2:44:bf:36:03:0a:
         b4:8f:d3:58:c6:c7:51:6c:52:8f:be:d3:19:cc:c6:81:8f:61:
         b0:81:45:99:dd:70:60:5f:f5:af:94:6d:9a:14:b3:51:2d:99:
         1a:b3:75:ed:b6:72:3b:0f:cb:22:68:e4:f8:ee:34:f8:10:d3:
         57:e5:6f:39:85:1b:27:1a:d1:81:74:fb:7d:4d:c3:63:c8:e2:
         46:ee:09:07:1d:88:01:0b:33:cd:37:3c:f1:0f:85:e8:4e:2e:
         21:39:28:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:04:26 2024 by rpki-client on console-ams.rpki-client.org