Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File:                     Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier:          8etdU5fnGu0fCObt9h3+H5d86FOBCdYqaWl3UwK8C6o=
Subject key identifier:   9D:0B:1D:29:3F:3C:8F:72:21:60:79:A1:F6:8E:A6:1B:89:1B:A7:D3
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer:       /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial:       019369D9B43D69D4A415132CD5758D3D9435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number:          3E
Signing time:             Tue 26 Nov 2024 19:01:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:35 +0000
Files and hashes:         1: P2pVqvO7NPKKr0nNTi_QcVr8t_M.roa (hash: 7K1LsEPKvXOISs1aG1GnGFKuwY85PCX1Q0NOcs5+HKw=)
                          2: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: SWgZGBJWO6OZyx5Bil70DsmgOABMdj4UJwsHAAWdS1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b4:3d:69:d4:a4:15:13:2c:d5:75:8d:3d:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
        Validity
            Not Before: Nov 26 19:01:35 2024 GMT
            Not After : Nov 27 19:01:35 2024 GMT
        Subject: CN=9d0b1d293f3c8f72216079a1f68ea61b891ba7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:d9:8b:d2:c1:d6:91:84:6c:ed:51:d0:66:
                    82:cd:b8:c6:bd:86:24:66:31:84:f1:1d:ba:dc:a1:
                    c4:73:7b:d2:a6:d9:a5:12:45:86:21:a7:b6:8b:a4:
                    00:ca:a2:a5:53:69:9d:ba:c5:3c:1a:0e:8a:4c:58:
                    67:aa:7e:25:59:d0:7f:48:9c:09:78:80:29:41:58:
                    db:89:1c:e2:2c:bb:e4:87:f2:ec:5c:f0:0d:ae:60:
                    8a:49:a3:ce:1b:b3:32:f0:6b:60:9d:2b:2f:8e:65:
                    ca:04:3e:94:8a:ac:94:57:a6:5e:57:47:64:97:a4:
                    5c:4d:53:31:5e:68:0c:e5:b7:d0:83:db:3a:0c:b6:
                    59:14:20:d9:97:09:a9:67:d4:9c:dc:77:4f:61:d5:
                    1e:6c:d5:bf:1d:b2:11:0a:e9:a1:79:2f:a0:92:bd:
                    93:7c:e2:5e:f7:59:8d:e9:5b:29:24:9a:7d:69:08:
                    55:64:a3:ad:c2:77:5a:92:5c:60:91:83:15:91:aa:
                    75:97:ac:38:9d:67:bd:03:eb:c8:50:68:2c:40:54:
                    60:e4:28:04:17:a4:8f:13:fc:c5:d5:f9:60:4f:e7:
                    9e:ca:33:1f:2f:de:e8:ea:5a:04:63:28:7c:bc:1e:
                    58:19:a2:38:2f:a5:9d:f9:e9:09:f0:83:33:98:92:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0B:1D:29:3F:3C:8F:72:21:60:79:A1:F6:8E:A6:1B:89:1B:A7:D3
            X509v3 Authority Key Identifier:
                keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:fc:3c:ee:8f:19:a9:96:be:75:85:f0:c6:b4:16:6a:25:
         1b:1b:97:21:c7:3e:fe:b1:f1:14:d1:47:36:1f:59:9f:d2:f2:
         6c:e9:f6:9c:9e:27:d4:fd:6c:12:d2:44:e0:8e:7f:71:23:45:
         77:0e:98:f6:68:d9:ff:df:3c:4d:0f:63:97:76:d9:4d:b1:c6:
         54:06:95:04:4f:84:3b:9e:cd:90:e1:f3:82:b0:15:66:7c:1b:
         0f:fe:1c:2e:e0:f0:e1:be:bf:c4:f9:74:5a:69:71:dd:0b:92:
         58:bd:b3:3a:80:42:ce:35:af:a6:3d:a6:01:04:99:b8:6c:44:
         37:b5:3d:dc:99:08:21:a1:59:16:50:92:55:b7:d3:48:62:9e:
         15:f7:6f:df:2b:af:61:1f:40:00:c4:54:44:11:4e:34:97:5e:
         53:8d:8c:98:6a:1d:31:ea:16:11:74:73:44:df:df:55:55:d7:
         5d:4e:f0:d4:00:32:b5:2d:e4:42:58:e7:85:d8:f0:a1:83:1a:
         57:cd:1a:78:fa:72:4f:3e:61:0e:90:12:47:38:1a:be:57:04:
         54:98:3a:85:3b:fa:4f:28:96:fe:25:a4:aa:9c:01:fb:f6:0b:
         8f:d7:f3:e8:68:9f:bf:1f:15:99:64:9d:8c:d1:40:e0:44:ef:
         b5:c2:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:11 2024 by rpki-client on console-fra.rpki-client.org