Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File:                     MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier:          oI7v3t9cF43erwD5BupfuGuHgcmmYswCLd3PKJ02m8M=
Subject key identifier:   C0:19:45:8D:0A:01:9E:0F:14:AD:A3:81:16:32:9C:1D:B2:38:74:EC
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer:       /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial:       0193553F9C63ECC199C26AFD5242132EE249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number:          110E
Signing time:             Fri 22 Nov 2024 19:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:52 +0000
Files and hashes:         1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: PNL1Ej9YzMzt6IP5U8axNRIgcCPgKmNnQAzV0jqbcfU=)
                          2: UP-6C9f1n_BSP-y09n5NQ92I8j0.roa (hash: ChSL2htqBy0bgif+t2mMM36AWR9llGl9kdf0brQVO0o=)
                          3: rBhV0Z-GkpC6xS53SMdxCLOKdVQ.roa (hash: pTwRiqX9Vp5ggkX3reQ5YrfMOLNQ15SBKbS4xxbf01Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:9c:63:ec:c1:99:c2:6a:fd:52:42:13:2e:e2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
        Validity
            Not Before: Nov 22 19:00:52 2024 GMT
            Not After : Nov 23 19:00:52 2024 GMT
        Subject: CN=c019458d0a019e0f14ada38116329c1db23874ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:22:40:52:6a:69:e1:aa:72:6d:05:e1:02:
                    b9:24:c0:de:4a:20:8e:92:32:c7:e2:0e:3d:b3:36:
                    7f:ca:a2:7a:fd:a0:bf:75:ec:ec:46:44:70:53:79:
                    f9:fa:c1:95:ee:aa:78:85:81:54:a3:d7:07:49:cf:
                    de:10:50:f1:75:35:90:06:da:94:5c:67:d7:a0:0c:
                    54:89:b7:65:32:9c:f8:f1:04:e5:fd:9d:b4:e4:08:
                    2a:22:1d:05:08:df:bf:c6:a2:82:51:83:57:94:2d:
                    5d:82:b0:18:87:8e:aa:5e:d3:0e:55:4f:80:99:6c:
                    39:d6:50:bf:b3:71:18:28:c4:53:8a:ec:7c:53:da:
                    22:f4:16:70:ac:fe:47:88:2d:49:4e:b0:9c:a4:b1:
                    a9:b5:b9:9e:63:7a:79:1f:97:f0:d9:15:1d:be:a8:
                    8f:59:8c:7d:ac:00:cb:df:7f:9c:6b:de:4f:23:81:
                    e6:55:90:3e:72:2f:85:93:46:dd:6f:72:26:d5:f3:
                    29:b9:54:e4:6e:21:db:44:2d:4e:bf:a4:df:ac:da:
                    01:62:20:63:59:36:20:ca:03:3f:56:14:e6:97:7a:
                    10:64:c8:56:84:6b:90:dc:4b:c7:33:7d:23:3d:f2:
                    a1:b9:04:8f:35:7b:dd:de:7b:a3:aa:48:a6:f4:d1:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:19:45:8D:0A:01:9E:0F:14:AD:A3:81:16:32:9C:1D:B2:38:74:EC
            X509v3 Authority Key Identifier:
                keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:21:bb:3b:9c:ab:f5:93:6e:e2:f8:f1:4d:75:7d:88:09:
         08:82:08:fe:b1:ed:3d:31:f5:81:0d:14:d3:22:47:84:07:25:
         71:4f:43:ee:9c:ac:85:52:45:44:5b:eb:4f:ea:1e:80:91:bc:
         40:26:b1:3b:81:25:65:80:89:5c:21:3c:28:8e:e8:c5:69:6c:
         08:1d:58:90:ff:5d:71:ba:1e:63:9f:7e:d5:cc:48:53:67:51:
         64:84:04:29:a2:e5:c4:1d:a9:ed:77:b6:2b:94:8d:d7:00:96:
         ea:8f:12:79:b7:6d:14:5c:c3:1d:14:36:18:df:8b:72:83:a2:
         e4:a4:70:df:d5:94:9e:f2:78:f1:68:5a:28:99:51:b0:12:a8:
         ac:32:ef:e2:4e:dd:d9:84:55:c4:62:59:12:76:5a:2b:99:63:
         2e:99:7b:af:b3:28:5c:35:41:b6:87:27:af:44:a3:6d:86:79:
         c4:5d:80:61:e9:58:9f:dc:b3:f2:4f:0c:91:db:83:0b:5b:2b:
         1e:fa:3d:60:f9:17:da:20:ac:5d:4e:f3:e9:aa:7f:52:98:26:
         19:0c:00:44:5d:ff:d4:8c:fb:30:dc:a0:68:5d:e1:1c:99:4a:
         4e:2e:71:01:86:ab:3b:27:2a:f6:e1:cf:bf:52:6a:f9:35:02:
         3d:b5:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:22 2024 by rpki-client on console-ams.rpki-client.org