Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          /lURmHWZspWRaF5WDji68Z1OQNR1KjQgaAqoX7t+gKM=
Subject key identifier:   56:48:38:79:BD:C9:37:1E:6E:21:43:5E:1D:82:20:0E:ED:93:4A:98
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       019369A19BBD487F1C509EBC0C93FAD08F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          05BD
Signing time:             Tue 26 Nov 2024 18:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:19 +0000
Files and hashes:         1: dG7AlYOCYSTVTXBJ1Yko328mYCY.roa (hash: M9lfBW7mnPIXM4CdeE2K+EHbOwvZO4hBcqDbhUla1QU=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: v4dZ3R3muZ6buS5wvXFkHvXTGEv1Of6/yhcloHt4b3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:9b:bd:48:7f:1c:50:9e:bc:0c:93:fa:d0:8f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Nov 26 18:00:19 2024 GMT
            Not After : Nov 27 18:00:19 2024 GMT
        Subject: CN=56483879bdc9371e6e21435e1d82200eed934a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:4d:26:cd:ca:cc:25:b9:5d:9a:69:14:4c:
                    df:ac:3d:27:de:06:74:4a:ac:70:52:7b:86:86:29:
                    f0:b5:98:b2:14:09:c0:a6:ca:51:b1:ce:95:24:1d:
                    3e:3a:0d:2f:8c:7a:e3:79:3c:15:fa:ca:d7:27:41:
                    ed:38:fb:e8:cc:5a:82:d8:9d:a8:2a:a4:e6:a5:49:
                    51:36:c7:83:e5:0d:d3:d4:88:b8:73:19:45:42:ee:
                    ad:70:f1:4e:34:e3:55:53:21:18:76:ae:3c:c3:27:
                    04:c5:51:6d:a7:92:5f:35:42:27:03:85:f9:1f:64:
                    da:e4:6e:b5:f8:a5:93:de:9c:eb:1f:41:b3:e9:69:
                    03:30:de:b0:a6:a4:c6:79:7e:ba:57:a5:5d:4c:ff:
                    09:86:1d:6e:a9:5c:f2:06:a4:99:b5:e6:89:ac:e9:
                    42:45:ca:cf:bd:b5:ab:8f:21:a5:51:90:86:94:8a:
                    56:ca:c5:38:ec:16:cb:ca:31:0a:49:94:88:38:20:
                    0d:e5:f8:c2:34:3b:18:f7:85:2c:b1:53:ea:e8:1b:
                    4e:73:5a:2b:3c:d8:38:a2:39:ef:b5:86:5a:91:d4:
                    1b:2e:d2:ff:01:35:3f:61:e4:d1:21:fb:72:26:16:
                    b7:ff:dd:18:f4:fa:2a:25:1f:9b:a2:0a:9d:be:68:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:38:79:BD:C9:37:1E:6E:21:43:5E:1D:82:20:0E:ED:93:4A:98
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:60:e4:2d:39:a0:7a:69:b6:cb:7e:db:65:64:a7:73:0e:
         e3:5e:eb:e2:a8:d3:b8:d8:e6:d0:52:19:85:51:16:07:5d:e5:
         3d:ca:90:b8:6f:e2:a8:7a:32:07:98:40:4d:87:eb:e1:91:fb:
         de:20:8b:69:d2:8d:62:71:20:cd:aa:99:b0:a0:1b:5d:3a:f4:
         9d:fa:11:e4:ad:db:09:3c:95:8a:0c:cf:1d:16:a7:dd:81:08:
         8d:f2:c2:70:19:7b:1e:07:6c:c0:80:12:c7:8f:4f:00:96:08:
         9a:1f:11:08:15:36:a9:82:5b:03:85:a2:f9:4d:e9:57:db:f7:
         5c:05:40:0a:16:f3:f6:73:ca:bf:44:ab:b3:24:95:82:57:df:
         11:86:e8:34:0f:27:f4:3e:a8:dc:5b:c4:43:da:08:9e:84:dd:
         15:a5:e5:9e:2e:17:80:1a:e5:1f:4d:8c:2a:3b:b8:e0:ff:ad:
         6a:5d:16:37:4e:a1:16:4f:d5:7c:96:fc:7f:6d:ba:20:45:d6:
         dc:17:7c:e7:90:bd:bc:b8:c3:88:0f:98:7c:0b:b1:d4:03:46:
         0e:af:93:26:c3:58:50:6c:fc:59:e9:3d:7a:ce:6d:d8:05:0d:
         7a:87:a5:ca:59:4e:cd:c2:e7:49:82:37:1d:21:09:65:df:84:
         88:cf:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:26 2024 by rpki-client on console-ams.rpki-client.org