Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File:                     5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier:          B035oHoKxTsmDqmX36d7fVS7lpBKf/a/f01ypwwFW8M=
Subject key identifier:   D1:2E:68:9F:07:D6:8A:03:56:8D:11:89:C6:18:56:51:0B:14:84:0D
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer:       /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial:       0192399474F8B0B502CDC3439A469D300516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number:          12DB
Signing time:             Sat 28 Sep 2024 17:01:23 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:23 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:23 +0000
Files and hashes:         1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: byhSzOT7vFmuqOLhink93u1drA+JhOb2+/JbttaM0IM=)
                          2: 7z5B_ELSFinIM_qNyjOfusKUKsc.roa (hash: LSBBtUpQObAHm/r12XT71RruCBXCyCkTAPvE8zL+7fY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:74:f8:b0:b5:02:cd:c3:43:9a:46:9d:30:05:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
        Validity
            Not Before: Sep 28 17:01:23 2024 GMT
            Not After : Sep 29 17:01:23 2024 GMT
        Subject: CN=d12e689f07d68a03568d1189c61856510b14840d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:4f:46:21:76:1d:63:33:32:48:0a:fe:5f:
                    2d:66:fc:0a:9a:1b:9b:f5:34:5e:45:82:17:e0:75:
                    c8:b5:b0:e1:b0:d3:33:a7:0a:9f:8e:cf:6d:f9:af:
                    25:24:cc:87:50:77:6b:3b:88:94:8a:fc:66:cd:ba:
                    38:23:f4:6c:21:7e:15:c4:38:8c:c9:f5:c5:c1:8c:
                    cd:b7:e3:09:1f:40:17:f0:62:9b:e2:ce:b1:24:e4:
                    e2:0a:ef:b7:83:dd:db:6b:06:78:fb:ba:6b:09:26:
                    12:c3:df:d3:07:de:0a:b9:5a:db:a5:b9:3e:1a:74:
                    04:cd:24:51:a8:2b:f9:e6:c6:22:24:b5:eb:d3:21:
                    32:e8:39:2e:be:be:c3:f5:47:da:1a:ea:b5:5f:95:
                    7b:a9:2c:a3:a1:00:7e:f7:a0:9c:c4:aa:e9:81:37:
                    9f:19:0b:fb:79:e6:12:fd:26:53:86:79:ee:0a:d0:
                    3f:44:9a:56:ba:bd:ec:fe:ee:c4:01:c8:2d:73:d6:
                    e2:12:74:a1:4f:a5:95:98:ea:3c:fe:11:59:b0:6b:
                    e3:b2:bc:20:92:82:43:4e:e8:be:ba:b1:bb:73:04:
                    f7:28:0d:0b:b5:73:1b:73:e0:e4:c5:e8:24:06:e1:
                    39:df:35:21:5f:99:a2:f3:a7:91:f4:ba:3c:01:4e:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:68:9F:07:D6:8A:03:56:8D:11:89:C6:18:56:51:0B:14:84:0D
            X509v3 Authority Key Identifier:
                keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:80:7c:d4:46:f4:ec:61:be:52:1c:92:8e:16:b0:09:a0:64:
         5d:1e:35:a4:42:09:7e:21:8b:7c:05:a8:50:54:7b:bf:50:6a:
         54:65:50:d8:2b:b1:d7:91:53:49:78:e3:7a:04:72:8c:f2:d0:
         3e:16:80:d7:97:7a:b4:d0:7a:b1:db:69:29:79:c5:6e:a2:e1:
         18:cf:1f:7c:df:b4:bb:16:6b:6f:ba:cf:4c:97:a5:49:93:0c:
         5c:0a:d1:d6:3c:2a:7f:67:fa:e1:19:8f:bc:1d:ce:fb:32:30:
         b8:6c:b6:f9:e1:f4:fb:b4:49:3f:bd:fb:06:5a:13:6d:0c:49:
         1e:5a:a8:0a:be:c9:d3:f9:73:ee:44:78:da:37:5f:12:33:dd:
         69:18:00:49:b0:41:96:da:37:75:0d:da:5b:9f:8a:61:45:1f:
         8d:3a:9e:cf:ef:33:db:94:95:14:f6:03:02:89:1a:65:6a:50:
         d9:4d:59:99:36:95:56:3f:03:6f:a9:47:f5:32:ec:b1:8e:cf:
         ae:10:40:09:8c:2d:d3:8c:d7:b0:2c:c6:76:bc:33:a1:6b:bf:
         32:20:83:ef:ba:41:fb:e0:6d:ab:7a:1b:ca:01:cb:f0:70:97:
         c2:fd:c1:64:34:80:64:4f:8c:ef:13:7b:66:4d:eb:81:f7:b0:
         7c:0d:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:04:07 2024 by rpki-client on console-ams.rpki-client.org