Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File:                     5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier:          xyQkqC7Xx+sjzsXrR0cxNUelIe02BiTBysBPVuax7+s=
Subject key identifier:   4B:A5:AA:50:29:FA:B7:C5:C3:C0:B8:0E:42:B9:F1:B1:D2:E8:01:32
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer:       /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial:       0193579BE4C8B1EC3359C89A371DB0C41730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number:          0463
Signing time:             Sat 23 Nov 2024 06:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:54 +0000
Files and hashes:         1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: Gc6Cj/3n87RqBuOBv2jTvYiqDmt9AmhVuggB74p69t4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e4:c8:b1:ec:33:59:c8:9a:37:1d:b0:c4:17:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
        Validity
            Not Before: Nov 23 06:00:54 2024 GMT
            Not After : Nov 24 06:00:54 2024 GMT
        Subject: CN=4ba5aa5029fab7c5c3c0b80e42b9f1b1d2e80132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:ee:7c:b6:10:c3:ac:32:a4:6c:7b:c7:14:
                    7b:b0:23:3e:9f:f0:3b:d4:1d:6c:c5:40:b3:9e:8f:
                    26:38:0f:d5:e7:88:c1:f5:0a:c9:cf:8c:51:5d:29:
                    35:dc:9f:c6:8a:e7:10:44:39:e9:6b:5e:d9:9e:70:
                    d8:60:94:53:bc:29:3e:61:74:a2:b4:1d:c9:79:1a:
                    13:09:ee:67:0a:ae:69:1e:1f:de:2e:dc:58:6a:3b:
                    0f:ef:c1:a4:4f:46:3f:fe:56:cc:57:26:a8:a1:f3:
                    77:8d:90:bd:0e:74:24:48:6d:70:02:8a:4b:4e:e9:
                    f9:79:19:32:9c:22:dd:7d:4d:c7:fd:38:49:3d:10:
                    79:0f:11:37:2d:07:b9:38:0c:b7:1b:99:b0:99:f7:
                    92:2d:1f:b1:b5:05:48:16:d0:29:6e:94:f3:c1:0e:
                    70:17:63:fc:fd:c4:64:77:ff:42:f5:21:19:93:e2:
                    bf:ae:e1:d6:f1:58:b8:0a:ec:95:39:18:53:4d:c6:
                    09:cf:25:c5:0b:05:b6:28:77:d5:fd:c9:40:2e:d6:
                    7c:69:ed:e7:78:a4:61:94:a2:2a:52:0e:df:88:6c:
                    5b:1c:b2:2d:6c:96:2f:1d:48:e2:db:30:6e:5c:ad:
                    ff:16:62:e3:98:ce:eb:79:1f:d5:8b:36:90:dc:0e:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A5:AA:50:29:FA:B7:C5:C3:C0:B8:0E:42:B9:F1:B1:D2:E8:01:32
            X509v3 Authority Key Identifier:
                keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:40:a7:14:ea:2b:bb:1c:c0:eb:87:be:2a:3e:b6:0a:db:
         26:26:47:7a:cc:4a:b3:1b:dc:48:4e:3f:a0:2d:52:d6:99:1c:
         e8:36:68:c7:b5:ae:59:f4:18:ee:e9:82:57:a4:ec:aa:83:99:
         16:63:e5:0d:67:fb:71:a6:a8:f7:6f:53:d9:e1:76:1b:14:2f:
         49:2c:00:d0:65:1a:e1:e6:37:ba:5a:0a:2b:ba:73:bc:d9:41:
         ae:45:70:8c:15:14:b8:81:37:58:8d:19:9e:22:57:97:8e:4b:
         15:2c:be:f3:f2:6b:7c:e0:1b:9c:b9:d3:6e:b1:3f:86:2b:fe:
         f5:78:1e:13:fc:07:e2:e5:8b:08:ab:83:86:4a:a7:18:75:d6:
         ba:8e:b9:72:11:2f:08:03:20:e5:5e:68:8f:4f:8a:8d:d7:be:
         da:d3:b1:8c:34:65:36:81:e7:6d:ec:62:2c:b7:08:6e:20:a0:
         33:e1:82:e1:4d:76:e4:ee:23:73:1a:4f:a6:60:73:41:48:f3:
         fe:a6:90:49:81:0c:e7:f0:4a:73:a6:d6:ae:1b:44:aa:de:2a:
         7d:27:e9:01:3a:37:b1:ae:cc:9c:be:8e:e6:1e:3d:95:6a:76:
         5d:42:47:7a:d8:cc:a6:1c:b7:6a:8b:b4:91:cd:2d:53:82:26:
         f2:9d:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:16 2024 by rpki-client on console-ams.rpki-client.org