Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File:                     Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier:          xC3Fk1MfVVjfcJ++OVLDN6643KQC/qfTc4s7uKzHcDE=
Subject key identifier:   D0:C2:92:C2:F9:73:F5:E4:E4:E8:C8:B9:41:73:17:0B:E2:2D:98:88
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer:       /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial:       019354D119F4AF4F2D456292F1230D30A0B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number:          0286
Signing time:             Fri 22 Nov 2024 17:00:09 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:09 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:09 +0000
Files and hashes:         1: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: tC6jXPf4JBzB02ELQvsvhfGSH4m0gcRTG6RyJaEaJdc=)
                          2: trnxx5O3TtgnQYLKEQuoPyhR5gg.roa (hash: 3ejfqMowRQ3qZQKTlYey+bvlxd/1qVvWnMEzunlz0xk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:19:f4:af:4f:2d:45:62:92:f1:23:0d:30:a0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Validity
            Not Before: Nov 22 17:00:09 2024 GMT
            Not After : Nov 23 17:00:09 2024 GMT
        Subject: CN=d0c292c2f973f5e4e4e8c8b94173170be22d9888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:ab:72:05:f5:77:f3:a0:3a:57:40:44:40:
                    f5:c8:44:5d:9b:91:c8:51:4c:8d:a4:db:03:87:fc:
                    8b:bb:dd:58:9e:24:c8:f6:6a:a0:72:ad:0c:f2:78:
                    86:f3:70:c5:21:50:54:b0:e3:ab:b7:1d:8e:3c:bb:
                    93:a4:b2:66:da:c7:cf:df:1e:4f:93:1b:34:8d:5d:
                    fa:e3:62:13:2f:ba:1f:27:24:f0:08:f8:73:fb:32:
                    b7:3f:05:a1:a1:e5:2b:6d:da:ab:16:34:5c:6e:ef:
                    09:41:c4:0e:7e:51:c7:64:f8:6f:f9:3a:16:8e:14:
                    2c:98:03:a9:c6:d0:d8:4f:84:1d:0c:19:d3:ec:b3:
                    90:84:40:a5:b3:5c:be:2f:17:a4:d0:e1:f6:6c:9d:
                    67:14:8e:74:f4:26:de:37:f6:7a:2a:56:5c:3e:df:
                    19:74:81:48:4f:88:04:5f:00:9c:51:e5:0f:fb:e2:
                    5b:56:fb:fb:17:ad:4f:e0:c0:b4:f7:27:33:db:13:
                    5e:04:9f:8f:8a:77:24:aa:75:48:6a:d4:52:3c:3a:
                    84:51:22:9a:b6:7f:f5:51:a8:5d:38:e1:d5:a7:79:
                    0f:1d:f3:c4:1f:93:b6:f6:3b:f0:11:4d:01:32:74:
                    f1:a0:94:f5:00:c6:b2:1c:8a:b6:4d:3a:04:3f:55:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C2:92:C2:F9:73:F5:E4:E4:E8:C8:B9:41:73:17:0B:E2:2D:98:88
            X509v3 Authority Key Identifier:
                keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:7f:be:f8:42:04:fd:24:a0:cd:0a:74:bd:99:ca:ab:48:
         5f:97:f6:d7:da:29:6a:cf:05:bd:df:e0:7d:f5:82:ab:fe:f7:
         f4:6f:05:29:f5:c4:36:af:c0:94:46:86:4c:d2:39:ac:ea:3b:
         2f:5b:12:ab:af:02:19:2b:d0:00:d0:e2:ed:6c:d0:2b:a5:3a:
         64:3f:7b:af:87:67:e2:6e:2d:ae:9f:a0:fe:a4:ef:1a:ee:27:
         96:ad:49:32:58:aa:94:09:d0:bf:3b:47:b0:47:14:0e:73:ed:
         95:20:0a:de:26:3f:6d:50:0f:e5:7a:e9:67:80:6e:a0:90:3c:
         ce:36:7e:22:dc:3e:33:60:cc:d6:ff:68:1a:df:ed:32:29:16:
         82:40:a6:d9:a9:f2:50:11:8e:e9:36:b4:77:e9:76:6d:07:38:
         57:22:e0:73:36:e7:6c:41:ef:a6:bb:05:6f:b8:ba:d8:f8:fa:
         a9:23:e6:c0:54:79:82:40:c9:ea:db:7f:8d:58:77:24:69:50:
         ff:9a:f8:1e:8e:64:e9:07:8e:07:4c:9f:40:0c:af:ee:64:de:
         56:74:d5:a2:4b:b8:e6:37:d9:ac:0e:25:fc:bd:75:66:06:f9:
         39:7b:74:4b:86:55:b9:a7:6d:8a:66:14:38:11:6b:48:6f:a7:
         dd:7b:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:03 2024 by rpki-client on console-fra.rpki-client.org