Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
File:                     0E45j3kEn2u7gzOBCoFhyXiWKiY.mft (raw, json)
Hash identifier:          hYXge6BGGvNnUCK7tbTCd2naDWRIgYLtclSD61vgq5A=
Subject key identifier:   0B:AB:99:3D:38:7A:CA:D8:F1:C7:7C:39:1E:C5:87:18:20:BD:33:E2
Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
Certificate issuer:       /CN=d04e398f79049f6bbb8333810a8161c978962a26
Certificate serial:       0193572D8E111168A9936CBB0643E5EB07C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
Manifest number:          0C6D
Signing time:             Sat 23 Nov 2024 04:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:23 +0000
Files and hashes:         1: 0E45j3kEn2u7gzOBCoFhyXiWKiY.crl (hash: G2OVo4nvWk4fxHxp+NLj4iPtEYV0vssSoTtSBu9D2os=)
                          2: 0KGRnFMZStJzkieyN2qvHMdC1Oc.roa (hash: PijVz6PZvBIWOHUvQN+pU6Nb0Lw18/2EXLk9/POSbqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:8e:11:11:68:a9:93:6c:bb:06:43:e5:eb:07:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26
        Validity
            Not Before: Nov 23 04:00:23 2024 GMT
            Not After : Nov 24 04:00:23 2024 GMT
        Subject: CN=0bab993d387acad8f1c77c391ec5871820bd33e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:05:b2:ee:84:4a:ad:58:0c:33:e2:fe:2b:
                    12:9f:06:e1:a0:ca:2b:53:6e:c6:4c:17:9a:26:20:
                    75:a3:f7:ae:df:2b:0f:53:78:80:e6:ed:e7:bf:93:
                    26:2a:ec:12:7f:20:af:9c:54:cf:51:07:45:ef:57:
                    19:36:70:33:bb:3f:26:4b:93:24:50:17:2f:07:c1:
                    6e:d5:47:b1:8c:36:2f:b7:52:6b:45:50:25:1c:21:
                    88:95:b6:dd:2a:ab:0e:e5:f9:3a:21:ea:aa:9d:c8:
                    61:eb:0c:5f:7a:f8:a4:7f:5c:cb:fd:56:37:34:94:
                    d0:57:bf:74:36:9f:e8:72:06:d2:cb:15:f6:18:03:
                    8e:c2:b1:4a:79:91:89:b7:7d:3c:1f:61:67:97:a0:
                    2d:4a:e8:1b:3b:29:31:c8:21:74:30:76:e8:c5:66:
                    8a:6d:b4:68:b4:b7:66:14:c2:65:a8:35:27:60:24:
                    e7:3d:c0:61:82:f5:f7:4c:50:af:bc:8d:aa:b1:90:
                    dd:6b:cd:fc:80:e1:af:fb:5c:a9:b9:7e:81:ea:be:
                    7b:94:36:cb:c7:0e:3f:2e:fe:bd:1a:3e:5b:f2:af:
                    ac:bd:86:bf:c6:ae:51:30:cc:1d:f3:0f:b7:70:b3:
                    01:0c:90:68:a3:db:dd:56:37:64:37:f7:3d:0e:2a:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AB:99:3D:38:7A:CA:D8:F1:C7:7C:39:1E:C5:87:18:20:BD:33:E2
            X509v3 Authority Key Identifier:
                keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3b:d2:f6:c3:b5:4a:7b:09:6b:b7:13:b6:85:cf:61:0a:2b:
         3b:3c:9c:69:9f:77:3e:8b:69:d8:f9:94:2f:3b:77:c9:07:11:
         95:e0:e8:e1:7e:25:d1:93:39:93:fc:8a:97:08:e0:6c:06:91:
         0b:9c:e0:07:29:6d:78:49:4f:6b:ae:fd:8c:c9:9b:3d:e4:96:
         53:a1:8d:e2:81:59:ef:f6:a3:70:98:de:68:54:19:dd:d7:09:
         f5:c7:6f:c1:ca:98:dc:d0:bc:18:80:07:31:b3:d7:2f:9d:07:
         65:dc:e1:e8:b3:30:ec:56:10:00:41:53:7a:25:ba:9d:c4:3d:
         0e:73:08:0a:e9:a9:ee:e9:cb:bc:71:a2:95:a4:48:00:cf:dd:
         e0:3f:f1:fe:4c:30:a0:2f:5c:d9:94:5b:3e:82:88:75:d5:48:
         53:c3:77:de:41:07:44:54:70:9d:d8:db:51:e1:dd:9e:e0:81:
         4b:04:5b:a6:c9:ca:58:64:75:2a:6f:de:0d:2e:2f:57:dd:90:
         fc:c3:1a:a5:0c:65:49:27:17:b1:5a:68:d1:bc:2d:cf:5f:dd:
         c5:c3:67:ec:25:89:1b:c9:9d:ca:d3:ec:e6:9b:b1:c8:81:31:
         7e:c0:fe:e2:83:98:07:16:d4:f7:14:a5:13:f8:11:36:de:07:
         13:ac:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:49 2024 by rpki-client on console-ams.rpki-client.org