Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File:                     glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier:          IrVmfSL0svitSokgPYl9whywIZ9bYp/XIoMnua2JQ4U=
Subject key identifier:   85:4F:68:B8:61:7E:CA:2F:49:96:79:63:3B:CE:7D:5C:13:02:60:57
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       019330FBEB35991A1A64684FAE6427534BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number:          0A3E
Signing time:             Fri 15 Nov 2024 18:00:36 +0000
Manifest this update:     Fri 15 Nov 2024 18:00:36 +0000
Manifest next update:     Sat 16 Nov 2024 18:00:36 +0000
Files and hashes:         1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: PdQfze9iE4M4f9ADnw5nykYJb/uNR+uCs4wfqhYLEjc=)
                          2: s-fiFgRTr8YcphKgjKu66sE7P8E.roa (hash: pWHzEs+2JVRlLQJ0Q1QUO2nT8jqhi3wZ2GIZ22ERSNM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:30:fb:eb:35:99:1a:1a:64:68:4f:ae:64:27:53:4b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: Nov 15 18:00:36 2024 GMT
            Not After : Nov 16 18:00:36 2024 GMT
        Subject: CN=854f68b8617eca2f499679633bce7d5c13026057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:19:83:d3:1b:e5:36:05:27:93:51:f3:18:8d:
                    85:1a:89:88:3e:3d:44:b2:9a:52:c4:3b:7e:40:4f:
                    da:8f:1d:b0:09:a8:69:62:27:e5:15:e7:bb:8b:71:
                    d9:31:00:7a:46:a6:a1:98:94:42:6e:71:59:6b:60:
                    5c:e4:74:65:fc:3c:ac:0d:83:0a:32:e9:c1:7a:cc:
                    17:b8:46:a4:c4:98:aa:ce:18:30:bc:81:b3:1b:92:
                    8c:b2:74:41:46:1b:90:c7:bf:65:5d:39:b5:46:8a:
                    7e:81:cf:08:ff:af:d5:cd:66:8c:e9:c1:ad:7b:9d:
                    c2:bb:96:8e:0e:8a:b5:88:bd:75:09:34:39:69:44:
                    ca:2d:6e:cd:5a:60:1c:39:6c:fe:c6:9d:1f:fa:c2:
                    b9:8d:dd:57:3b:b3:39:ba:fc:5a:10:58:45:e5:fb:
                    b3:04:54:8f:6e:0b:d7:9b:2c:88:29:62:dd:46:45:
                    7e:94:19:35:34:e9:03:55:ac:5b:57:c3:65:b2:5f:
                    16:64:e1:fe:cd:98:4c:af:8a:6c:75:4f:0e:5e:91:
                    3f:5b:a0:a3:d0:05:87:fb:f6:d4:62:27:83:b6:bc:
                    68:a8:21:e3:91:fc:0f:18:ac:bd:4b:df:29:f8:d2:
                    40:0a:fd:56:88:16:76:85:b7:ff:8e:2b:79:b7:71:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4F:68:B8:61:7E:CA:2F:49:96:79:63:3B:CE:7D:5C:13:02:60:57
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:35:16:e6:70:77:f5:70:49:c7:27:ee:90:b2:53:af:e7:
         02:bc:62:69:34:be:f4:04:68:65:bb:0c:44:a0:e8:a5:83:e6:
         f5:c6:ae:68:ed:b6:87:6a:e8:c7:3c:43:32:3c:82:fe:75:d0:
         8f:8c:9f:e8:80:a0:4c:b2:c4:09:50:17:fb:1b:61:33:5b:7a:
         99:bb:c2:cf:96:ff:fa:05:aa:c9:4c:fa:fe:a7:26:59:27:10:
         85:2d:5f:22:8f:25:c4:c5:3b:b2:92:59:5b:fd:2f:94:03:22:
         66:b4:55:5d:a0:7c:ee:6b:57:bb:33:70:82:2b:50:fd:2c:3d:
         34:61:6d:dc:5c:29:0b:98:92:77:19:d8:0d:56:6a:0f:a9:8d:
         e2:11:40:c7:5a:f8:4c:34:28:2d:d0:ee:3e:e6:4f:64:ce:b3:
         7c:3b:b5:1c:3a:23:a6:d9:eb:c6:92:18:de:19:96:ce:58:dc:
         e1:d5:11:12:e7:0b:49:60:d5:5c:44:1b:09:0d:5d:71:51:86:
         12:85:f5:da:a7:7e:f1:4b:6f:a8:16:7d:32:1f:a2:c4:56:32:
         0b:8f:4c:44:32:bc:a0:39:91:f5:25:11:02:6b:39:1e:d6:97:
         fc:ce:b8:bb:24:c8:b9:2f:0d:a6:ae:4e:73:4e:2c:e6:61:63:
         81:80:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 19:43:38 2024 by rpki-client on console-fra.rpki-client.org