Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File:                     U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier:          m//yteMl60qNVk7AV6QTDv6gkzeJuEge9v1yHrZTSSE=
Subject key identifier:   A8:34:3E:E8:69:20:56:C2:50:42:25:DD:C1:A4:BF:49:59:D3:00:F6
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer:       /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial:       0193568AF6B18A63E5146B1E004107788BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number:          54
Signing time:             Sat 23 Nov 2024 01:02:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:47 +0000
Files and hashes:         1: D7uXfXz7EVpW4BdUsBcxuYgqhII.roa (hash: raTiW1uzEloVpm3YClKi2QAj3r8tzqSMuNqWBzqja7w=)
                          2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: 20EpCa01KBauiRdez/YbllclP58PoY7N1iGm3HJz/fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:f6:b1:8a:63:e5:14:6b:1e:00:41:07:78:8b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
        Validity
            Not Before: Nov 23 01:02:47 2024 GMT
            Not After : Nov 24 01:02:47 2024 GMT
        Subject: CN=a8343ee8692056c2504225ddc1a4bf4959d300f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:05:de:ab:7e:e0:d0:b6:ab:4c:13:0d:3d:
                    be:2f:39:94:bf:cb:85:13:77:22:1a:0c:2e:85:ae:
                    94:82:ff:ba:94:42:a2:35:e7:be:1e:5d:4a:27:ee:
                    33:db:28:f9:20:a5:f2:d6:c4:6d:40:63:3c:63:83:
                    62:a5:5b:55:ce:2c:4b:7f:75:3f:9f:32:df:48:d7:
                    f6:66:9c:6a:e5:8b:05:7a:2f:ba:4b:10:37:2b:33:
                    c1:3e:dd:fd:c2:29:d5:da:3a:a0:02:b7:71:e0:76:
                    2c:87:e5:a5:4a:02:54:d3:ee:40:79:2d:3d:9a:85:
                    10:70:0b:16:62:ee:3b:80:0b:67:c3:06:64:a9:f8:
                    1e:75:b0:2d:72:a8:69:4f:2a:bb:05:08:7e:5c:b4:
                    4b:6c:87:4a:bc:21:d7:d5:f9:1d:5f:86:51:ba:59:
                    ca:9f:00:6e:4e:75:3d:f1:da:0d:98:84:3d:d5:2b:
                    2b:fd:ea:b6:5b:f6:c8:67:35:79:da:79:96:cc:45:
                    c6:f6:e5:e5:26:18:85:5d:09:fc:4c:93:a1:3d:a9:
                    29:fd:77:49:03:cf:89:fd:bb:56:35:41:64:82:89:
                    c7:28:58:5b:dc:a8:de:52:be:a7:5d:63:02:f7:cb:
                    34:8e:df:f2:d2:49:f9:26:f3:ce:fd:f8:2b:f7:29:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:34:3E:E8:69:20:56:C2:50:42:25:DD:C1:A4:BF:49:59:D3:00:F6
            X509v3 Authority Key Identifier:
                keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:14:8f:90:4e:57:68:b4:97:61:2f:3d:4a:76:a6:5c:9f:03:
         5f:dc:89:48:75:47:96:bf:fc:47:b0:be:3d:55:7f:52:5b:67:
         ce:b9:2e:de:1a:2f:4f:97:da:0b:ac:89:b6:4f:17:66:62:61:
         43:3a:3d:dd:99:2e:52:b5:4f:77:77:b9:33:45:ac:cc:ee:6d:
         a8:d1:bd:a8:23:28:b5:e0:1f:9e:f3:07:60:72:44:53:cd:3a:
         50:3d:97:89:47:ff:00:a4:b2:05:40:3f:8d:d8:5d:2b:7a:43:
         a2:b5:e1:2d:b5:55:39:da:45:d9:3c:f6:4b:60:c5:05:21:07:
         7f:32:44:52:d2:69:70:bc:e3:e8:5c:17:a8:e9:28:b4:5d:99:
         37:1c:82:c1:0d:94:31:87:6d:0c:72:c4:99:24:0a:88:3f:47:
         62:c8:4a:58:17:8c:c6:7b:73:87:d1:69:1c:b9:62:9f:be:ee:
         55:81:99:92:7c:72:fd:ba:2a:90:d3:7e:1a:c4:f9:4c:12:8c:
         48:1a:36:1d:31:99:fb:2b:d7:f4:16:6d:36:e1:24:32:e3:da:
         4a:32:bd:60:58:bd:b3:0e:98:38:d3:d2:9e:08:d5:a0:38:c0:
         27:1c:fc:48:91:23:fe:ab:ce:39:2b:66:49:70:05:96:56:9c:
         d9:12:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:13 2024 by rpki-client on console-fra.rpki-client.org