Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File:                     e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier:          cqlRB7up6Gd7k6i52HKh1mDffL5dTQb8yDmf49/1d7Y=
Subject key identifier:   77:61:21:89:5D:82:8D:CD:BD:4A:27:97:07:E3:E5:D5:F4:C6:F7:84
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer:       /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial:       01935840620F7FEF617E74A072896C15BAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number:          016A
Signing time:             Sat 23 Nov 2024 09:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:34 +0000
Files and hashes:         1: TgFChv2sWo4Xlka5RDIMjlGS1pg.roa (hash: 2Xe2CAaF11M0lD51HahSW/4+UL1/lpijT0frM1HGm1k=)
                          2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: 1x2PRMnTvGMLDJ/ZNXP3DFum37PcXKXBIqKVuD8/9JQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:62:0f:7f:ef:61:7e:74:a0:72:89:6c:15:ba:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
        Validity
            Not Before: Nov 23 09:00:34 2024 GMT
            Not After : Nov 24 09:00:34 2024 GMT
        Subject: CN=776121895d828dcdbd4a279707e3e5d5f4c6f784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:39:3d:f9:8d:6a:f9:94:40:59:58:5c:65:
                    b4:fd:06:6d:15:6b:f4:2a:9f:05:c1:7a:f1:7e:02:
                    7e:79:43:0a:71:f0:84:e2:8a:d0:5d:24:1d:37:96:
                    85:b2:73:b2:dc:f6:68:f6:90:45:6a:f4:c3:22:fe:
                    6b:68:7c:9a:48:d7:08:09:ef:a2:6e:4f:ae:61:6b:
                    cf:36:a2:fa:ae:bf:9e:40:5c:5c:9f:12:56:2f:dd:
                    d6:86:fe:53:19:35:c3:5d:ec:f4:6b:ee:ba:ac:6a:
                    f7:12:21:94:89:ae:42:c3:c0:fa:ed:8a:e1:50:3f:
                    5d:13:68:da:d6:0e:4f:7f:42:59:ab:af:ff:75:37:
                    8e:33:f9:34:88:2d:87:ef:20:74:b0:f3:dd:4a:2b:
                    bc:77:29:93:82:aa:a5:fb:1b:61:96:48:46:94:f9:
                    ed:3d:a9:7e:f2:19:ff:3c:13:d5:71:3c:2e:3a:83:
                    2c:6a:f4:f7:3a:3e:ef:9e:f7:0a:13:3e:9d:89:76:
                    5b:da:c0:db:f0:4a:d6:26:5a:ce:68:01:8a:bc:d5:
                    16:e1:4a:a6:e4:70:05:bb:1f:81:b7:15:0e:bd:d7:
                    5f:db:36:aa:cf:48:af:72:d1:90:b4:3b:ff:33:f9:
                    b1:14:35:db:cb:c7:1e:3d:a6:b2:09:7e:d8:ce:39:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:61:21:89:5D:82:8D:CD:BD:4A:27:97:07:E3:E5:D5:F4:C6:F7:84
            X509v3 Authority Key Identifier:
                keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:05:5c:90:5c:8d:35:bc:69:9a:c6:f2:4d:e6:c4:6a:91:
         eb:6a:ae:01:6e:7d:94:6f:40:6d:b0:fd:48:85:2c:8e:34:82:
         d8:99:fd:b3:be:2c:1c:39:52:7a:aa:b3:56:dc:d6:63:fd:cc:
         f3:ee:98:b7:f9:6e:c5:de:62:cd:79:bc:dc:1e:e5:a8:61:a5:
         2f:a4:e4:40:7f:fe:08:a4:46:55:db:2f:2b:9c:69:61:b2:35:
         64:d0:44:35:e4:a2:72:2e:bc:19:c3:ac:b4:1c:2f:f0:eb:5f:
         67:f9:a0:0f:7f:6d:dc:db:6a:c7:46:ef:bc:11:16:98:74:69:
         0c:d8:84:21:41:bd:f4:7c:03:3e:05:8a:d4:68:97:0e:2b:90:
         80:67:39:3b:bd:db:55:0b:63:dc:78:bf:8b:3e:f0:89:0d:f4:
         c7:51:c1:70:a7:f8:ec:5d:68:e4:46:7e:e9:1b:3b:22:9f:b9:
         ab:f0:52:24:54:e4:ad:dd:63:08:08:17:11:13:56:89:aa:c1:
         51:ee:5e:b0:7c:95:a4:64:8e:fa:4b:de:af:a9:c5:81:32:8b:
         5e:0f:72:e1:f4:44:14:de:f3:a3:49:2e:e6:44:9e:ad:0d:be:
         5c:11:ec:30:6b:8d:c4:2f:5d:88:f5:ce:19:5b:86:dd:04:3d:
         f4:c0:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:39 2024 by rpki-client on console-ams.rpki-client.org