Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File:                     M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier:          AL310gIzDPA4uOLDy0/pEWjii3RZXm3NUcj9+XtDpbs=
Subject key identifier:   47:CB:E7:2F:91:DD:C2:88:AE:DF:78:CE:01:38:92:91:4F:83:64:67
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer:       /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial:       0193568A4992C2BC86CB7AE11C3CB436D4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number:          0D44
Signing time:             Sat 23 Nov 2024 01:02:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:03 +0000
Files and hashes:         1: Ifui4PQbndse730lSZO3lCfkioY.roa (hash: D7nCViVTcLQTl0eYTC8UiUGnFlIt90jpYP7MJq7/kAA=)
                          2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: BwfgNk2EixzuxZBzh6btD3+HsoFyetMkqehLdeLz2t4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:49:92:c2:bc:86:cb:7a:e1:1c:3c:b4:36:d4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
        Validity
            Not Before: Nov 23 01:02:03 2024 GMT
            Not After : Nov 24 01:02:03 2024 GMT
        Subject: CN=47cbe72f91ddc288aedf78ce013892914f836467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:9b:38:b7:c3:84:93:db:37:4e:fb:a2:97:
                    ad:4c:47:d0:e8:5b:be:8b:f3:b2:3f:b4:70:eb:8b:
                    69:b4:5d:08:c1:79:7c:4c:11:20:6a:c2:2a:6c:e5:
                    20:3f:ca:b5:a8:4a:65:50:43:6d:b7:28:71:8c:1f:
                    db:f4:29:e0:dc:3c:bb:ee:c4:29:13:62:08:45:7f:
                    33:27:03:75:9d:e3:74:a5:1c:31:50:11:16:d4:e5:
                    d2:96:af:90:5d:1e:87:06:18:b3:da:c4:4c:6e:8e:
                    e6:aa:96:38:a3:0d:f2:90:93:d2:c1:6e:44:f1:82:
                    e5:38:97:aa:6a:a6:cb:b2:78:78:e0:64:eb:13:d3:
                    77:35:6e:b8:88:ef:54:a1:80:c4:63:b8:6c:48:4f:
                    5b:4f:d5:15:53:32:c3:e3:f3:c7:8b:81:bd:3f:82:
                    5b:a0:49:29:38:46:f1:3e:a1:7c:82:1d:a5:40:91:
                    97:fa:4d:15:56:fb:5f:88:03:ef:30:54:38:06:f4:
                    48:90:ff:0c:a6:d8:9d:10:be:43:60:5e:f0:a3:72:
                    77:65:2e:af:93:1d:38:e5:28:45:f0:6c:74:4a:ba:
                    04:a5:86:9a:98:2f:29:70:18:02:72:fc:bf:2e:f1:
                    a1:6a:d8:66:dd:0f:ec:ea:ae:35:d2:2b:b1:5b:74:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CB:E7:2F:91:DD:C2:88:AE:DF:78:CE:01:38:92:91:4F:83:64:67
            X509v3 Authority Key Identifier:
                keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:a2:8d:d5:34:71:bb:c6:2b:ae:dc:75:03:1f:bf:79:55:
         0a:4a:80:f4:6c:1b:be:a5:73:7c:7c:42:e0:fb:ff:37:d6:15:
         c4:79:6a:78:e7:5d:0a:01:1d:d3:c5:3e:66:c2:17:1e:ce:16:
         4f:a5:46:e1:41:8d:68:9e:43:07:aa:ec:8c:15:21:1f:5a:41:
         6f:8c:7a:db:62:16:5d:b9:37:7d:98:a0:83:bf:bd:d6:27:7b:
         3e:10:97:e5:17:29:a6:c3:8e:38:8d:cd:ea:d9:83:fc:1d:c7:
         86:f1:4c:ec:11:d8:17:38:08:d7:91:ae:c2:d8:89:9b:27:1c:
         0e:cf:26:26:e9:13:69:e1:04:1c:4a:29:10:d6:03:78:45:17:
         e8:01:9e:43:57:96:0d:72:28:8b:41:1f:4c:46:5c:be:df:57:
         32:10:1f:8d:84:a4:f8:c1:1d:87:41:e6:aa:58:77:4e:dd:45:
         be:39:97:74:cf:a9:e8:bf:f8:d6:2f:c9:da:8d:12:ac:03:1c:
         61:a9:e1:4c:3a:7d:23:2b:b8:ea:ee:88:c2:dd:91:57:20:5b:
         10:f4:40:4b:34:00:26:4b:31:7b:17:d1:48:24:55:1f:21:1b:
         63:ad:89:b3:9c:0a:ea:db:ce:33:4d:92:31:2b:83:cd:f8:eb:
         06:d5:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:49 2024 by rpki-client on console-fra.rpki-client.org