Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.mft
File:                     EuRSx3xd4QkKFhC6wqY-g6pysNM.mft (raw, json)
Hash identifier:          PStjposW3xnG7ZCy3t7aMw6kFbrfRzP2OPKh7FdRKJM=
Subject key identifier:   AA:C1:40:38:C0:5E:FD:8E:3F:FD:9E:15:A6:07:EE:22:F8:03:AC:A2
Authority key identifier: 12:E4:52:C7:7C:5D:E1:09:0A:16:10:BA:C2:A6:3E:83:AA:72:B0:D3
Certificate issuer:       /CN=12e452c77c5de1090a1610bac2a63e83aa72b0d3
Certificate serial:       01936331FF47848EF01D2421D10CD231635F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuRSx3xd4QkKFhC6wqY-g6pysNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.mft
Manifest number:          0DEC
Signing time:             Mon 25 Nov 2024 12:00:41 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:41 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:41 +0000
Files and hashes:         1: EuRSx3xd4QkKFhC6wqY-g6pysNM.crl (hash: E/ua+he4KB9GXQm3K7vFoFc0QDlcy1DqY3061xrxSSY=)
                          2: QF3YlVwTFYi4slyveqt6GzkYHhU.roa (hash: QjWXviRnPMJmUn6LJcwNAaUIWnUOSmnsmpWgXSvcrT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuRSx3xd4QkKFhC6wqY-g6pysNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:31:ff:47:84:8e:f0:1d:24:21:d1:0c:d2:31:63:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e452c77c5de1090a1610bac2a63e83aa72b0d3
        Validity
            Not Before: Nov 25 12:00:41 2024 GMT
            Not After : Nov 26 12:00:41 2024 GMT
        Subject: CN=aac14038c05efd8e3ffd9e15a607ee22f803aca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:a2:6c:8b:8a:b9:48:01:46:75:67:ca:d7:
                    90:cf:1f:59:34:c2:90:0d:83:3e:6e:5b:0f:b7:fd:
                    40:f6:a0:1a:1a:b9:e6:96:ea:c3:0a:59:d0:ee:54:
                    dc:db:b3:e8:36:8e:88:34:8f:19:5b:ff:f0:ab:17:
                    d9:53:51:d0:88:07:27:d7:6b:e4:83:f9:f7:48:ba:
                    e6:e8:03:77:5d:cf:ec:29:c6:e7:e4:08:e2:71:0e:
                    47:ef:e8:c5:35:95:1c:00:17:53:be:53:1f:7a:7f:
                    ff:08:b4:7d:64:87:e1:e0:ca:6c:b2:cb:92:a2:d7:
                    d8:6f:b6:98:fa:14:eb:be:c7:c5:76:5d:3e:95:80:
                    cf:fa:39:5e:5c:de:0c:5d:49:14:85:13:a2:5a:44:
                    63:f5:e1:91:51:de:c5:89:b1:18:2e:f5:3c:a3:2c:
                    85:84:c3:ce:b2:8a:5e:ea:40:29:62:70:0a:f2:52:
                    22:f5:4d:1f:6c:40:63:98:21:4f:71:82:fc:27:29:
                    05:09:ca:00:87:6f:49:fa:a6:e3:77:fe:b0:99:b6:
                    98:35:26:16:d3:01:52:14:1e:10:cc:30:2f:d4:6e:
                    2c:9e:e3:7e:2a:99:7d:cb:90:ef:0a:a7:13:9c:ca:
                    da:ee:11:c8:d7:14:7d:3e:75:64:93:55:97:45:06:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C1:40:38:C0:5E:FD:8E:3F:FD:9E:15:A6:07:EE:22:F8:03:AC:A2
            X509v3 Authority Key Identifier:
                keyid:12:E4:52:C7:7C:5D:E1:09:0A:16:10:BA:C2:A6:3E:83:AA:72:B0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuRSx3xd4QkKFhC6wqY-g6pysNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:02:88:8d:0d:f3:3e:8c:2d:cc:05:04:d4:2a:22:25:65:
         54:fa:18:b7:84:ee:fc:62:23:36:a6:63:7f:10:91:61:37:4a:
         bf:aa:4c:67:bd:56:73:e6:a1:2c:a9:e2:72:75:4c:24:4f:df:
         bd:c8:74:4c:5e:50:e9:2c:54:9b:1e:f8:d1:f0:d2:e3:a3:70:
         68:ca:49:c5:92:9a:85:0b:81:07:4b:73:39:fd:05:0d:e8:54:
         de:81:02:11:4f:5a:0c:03:8b:60:3f:41:91:0b:31:4c:1e:46:
         a4:2f:13:69:e3:0b:6d:35:cb:86:65:53:e6:2a:9a:1a:49:64:
         08:67:a1:4b:51:91:be:91:ac:77:17:50:bb:e3:2a:99:d7:63:
         96:00:51:cc:82:cd:da:34:5e:7e:c7:c1:aa:df:84:ba:9f:8f:
         83:df:82:16:d6:ae:e1:67:0e:a8:48:d7:d6:d5:71:89:48:6a:
         b2:30:36:b1:8a:1b:2a:8d:e8:51:6a:c7:21:25:0c:b9:cf:21:
         0e:38:56:6c:ca:3c:2f:9e:7f:4b:66:41:55:71:de:8a:7f:1a:
         f4:07:11:ab:4d:0d:8a:13:b7:66:56:fa:d6:dc:07:c8:30:e5:
         a1:9b:8e:c4:c2:18:61:fb:22:5a:fa:de:09:fe:7d:f4:2a:04:
         3e:9c:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:18:41 2024 by rpki-client on console-ams.rpki-client.org