Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File:                     AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier:          8RQLDYO+0qS+6ticlw+AD5KsVHk/O8sJL/604TyEJAc=
Subject key identifier:   CB:D4:88:D8:43:08:13:38:98:BE:B1:9F:64:44:A0:85:3B:B4:DC:42
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer:       /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial:       01935688FE9988FC31B299BA78E926707F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number:          08DC
Signing time:             Sat 23 Nov 2024 01:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:38 +0000
Files and hashes:         1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: yv2pF+sJXwBax65YnYHoK/gp1CqfbTRaxLAn+ZKU+ec=)
                          2: eX3uwQ2TPk0pcGf-IlqLjdsRFbg.roa (hash: DTM4fXfQJ4S/hnTLfiNjQOA9uGDWyuqyJOlMo5qDrQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:fe:99:88:fc:31:b2:99:ba:78:e9:26:70:7f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
        Validity
            Not Before: Nov 23 01:00:38 2024 GMT
            Not After : Nov 24 01:00:38 2024 GMT
        Subject: CN=cbd488d84308133898beb19f6444a0853bb4dc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:a4:1a:eb:b1:64:1d:bf:60:c4:e9:bd:b3:
                    02:bc:3f:75:26:be:60:22:06:16:33:7a:be:44:4c:
                    2a:d1:7a:e6:26:86:bc:96:36:75:ac:19:b3:fb:3b:
                    4b:c0:3b:dc:34:4f:a1:5c:2f:5c:50:f0:4a:fb:6c:
                    20:c8:b4:7e:ed:80:00:ea:52:ab:1d:a9:4b:73:23:
                    96:09:13:3d:86:23:d1:f0:3a:84:e9:d0:9d:16:fa:
                    1e:41:6c:86:33:d9:a6:e1:dc:a7:a3:19:8c:a5:fd:
                    c0:0c:6d:9d:d1:cd:ee:50:63:f6:b8:be:f3:b8:55:
                    af:9c:99:b1:2e:0e:88:1b:16:0b:c8:8f:43:f1:ca:
                    92:6a:22:93:da:2a:0e:10:cd:ec:e1:9a:f6:98:13:
                    68:5f:35:f1:bb:b9:f4:2d:3f:8f:6c:6d:93:67:32:
                    cd:86:b2:53:23:9d:39:5f:8a:01:aa:33:30:52:1f:
                    74:a9:9b:fe:b9:3c:80:cc:1f:cb:ed:ef:9e:ad:03:
                    20:bd:2d:56:ec:cf:25:63:53:52:09:e1:bc:a6:de:
                    0b:32:01:c6:9c:92:f5:e6:3f:b1:4c:63:d8:da:88:
                    5a:09:39:63:0d:be:d2:e6:33:be:53:9d:f2:fb:c3:
                    13:84:45:56:ef:d6:31:0a:26:8f:c7:64:f6:f5:6e:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D4:88:D8:43:08:13:38:98:BE:B1:9F:64:44:A0:85:3B:B4:DC:42
            X509v3 Authority Key Identifier:
                keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:6d:fe:b1:c1:ae:1b:f1:ea:d7:ae:d0:ca:aa:90:79:c7:
         93:af:c2:ec:11:82:ef:46:19:b7:54:af:16:57:65:e4:c9:40:
         92:19:70:d5:58:f5:85:dd:c5:16:93:bc:8f:50:ab:40:20:24:
         85:e3:a1:ec:b6:19:b2:5f:80:83:47:a0:ef:50:7d:6c:d6:82:
         ce:3a:47:40:c7:18:cb:8b:c7:30:5c:9a:5b:8d:bf:39:4b:c4:
         24:8b:d9:4d:f3:4a:46:71:e8:c4:68:b6:21:31:c4:bf:46:d1:
         53:8a:bf:c9:be:4e:d4:c9:ef:a1:a6:f7:1c:cf:ee:62:b3:d1:
         69:82:64:76:2e:5c:25:7e:5e:60:ba:f4:4f:f7:6a:6e:7e:da:
         3c:76:36:1d:35:51:20:34:1b:5a:d9:93:4d:a2:1f:26:d0:8b:
         42:ae:52:ce:6c:5a:4c:7b:1c:c8:63:7e:96:46:61:38:06:32:
         0b:3e:5d:30:4e:03:16:5c:c3:de:c0:51:87:50:c9:49:8a:7f:
         ab:65:20:cb:34:e9:46:d7:87:a6:90:99:2a:f0:84:93:8c:e1:
         f6:89:98:8a:19:c6:d1:de:a1:f6:a2:5c:c2:78:f7:a3:53:38:
         db:c3:fe:be:27:5d:cc:eb:10:85:e8:12:69:59:94:e3:81:65:
         cc:5a:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:17 2024 by rpki-client on console-ams.rpki-client.org