Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File:                     cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier:          pUm0ykUGYQY+1daGhWoxgbYzO4t8jXp1N+QFOFM6tXg=
Subject key identifier:   27:0B:D8:20:34:14:E2:DF:43:6D:AA:F9:F6:33:1C:53:CB:71:87:B7
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer:       /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial:       0193591C7C2487ACFE97BE163E06D36F6AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number:          0146
Signing time:             Sat 23 Nov 2024 13:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:59 +0000
Files and hashes:         1: IOCyNRAqqupowxQG8VQGpGieXJo.roa (hash: zeA9uyGPk54yciAVsVC3j4gEvUaz9YTpFEjijtLmO1I=)
                          2: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: CrH6PhVDGc16J14W79GSFJGWsqyYw7xQUL7qJtM/77E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:7c:24:87:ac:fe:97:be:16:3e:06:d3:6f:6a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
        Validity
            Not Before: Nov 23 13:00:59 2024 GMT
            Not After : Nov 24 13:00:59 2024 GMT
        Subject: CN=270bd8203414e2df436daaf9f6331c53cb7187b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:e0:0c:3d:ff:f2:7d:d3:b4:8d:87:3c:27:
                    41:f1:c1:97:08:9a:de:ee:8e:14:cc:b2:6b:fd:15:
                    69:32:ad:75:fb:d5:51:47:80:39:b8:08:9c:55:8d:
                    4a:43:a1:12:67:be:86:ea:54:b4:f9:bf:0b:6b:3c:
                    0c:d2:e1:f7:68:32:90:85:5b:93:8e:d5:3d:93:2a:
                    b6:2d:c5:ed:c5:67:e1:b1:af:e9:18:5c:92:f8:ed:
                    7f:4b:ee:d1:8f:5d:b1:cb:68:95:46:51:c7:7a:25:
                    cf:3b:6d:6a:9d:0c:8a:ab:44:fd:8e:f1:71:4a:5b:
                    00:31:42:27:03:3f:fd:e5:54:50:6a:8e:41:29:da:
                    2d:a9:68:e0:22:52:b1:fa:9f:79:27:1d:20:3e:67:
                    5a:f5:23:8d:5e:e5:82:47:95:e4:37:d8:80:41:e2:
                    92:1f:dc:12:5e:b2:c6:5f:0a:30:da:88:20:fe:cf:
                    94:ff:b1:cf:89:85:13:87:76:52:23:cb:1d:bf:4b:
                    41:65:25:c6:fc:72:6a:28:f8:a9:42:7e:bc:a1:48:
                    7a:0e:bf:81:f9:7c:fc:3b:fd:4f:c8:30:90:d5:f6:
                    ce:19:c4:de:1e:4d:20:79:c4:a9:01:74:d0:ca:05:
                    8c:ab:53:b9:3d:c1:de:20:f7:df:1c:1f:60:f0:30:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0B:D8:20:34:14:E2:DF:43:6D:AA:F9:F6:33:1C:53:CB:71:87:B7
            X509v3 Authority Key Identifier:
                keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:70:f3:9b:10:b2:b2:c9:fd:67:62:44:91:a3:3d:c4:73:62:
         9d:3b:a3:61:ff:16:45:81:49:24:c2:33:23:13:5c:2c:35:47:
         3e:77:c0:c0:ad:70:d3:ed:f9:65:f1:0a:08:21:08:14:52:fc:
         be:17:72:d6:8d:39:65:5e:81:1c:4e:a1:00:54:a4:14:12:f9:
         c4:4c:34:94:fe:2e:4d:e2:f7:03:3b:f9:b1:45:d4:27:6d:00:
         8f:86:a1:a0:14:f2:60:28:92:94:c2:05:5f:3c:ac:1d:9c:52:
         e2:c3:6b:f4:7a:5e:6a:ff:e7:7e:50:94:f1:c7:ce:57:82:86:
         e4:ca:93:c6:1d:30:70:d7:a0:8c:78:a9:a3:6e:3f:cd:02:69:
         d3:76:20:29:e3:e5:c0:3e:ae:ec:eb:c2:11:3c:f5:c5:ba:65:
         4d:9e:2b:df:50:79:28:fe:40:d7:df:0a:d2:a1:a7:ac:1e:fd:
         65:89:c2:3a:07:97:c9:d1:7e:6b:45:08:90:dc:8b:22:12:d7:
         d3:22:d0:53:b2:7b:6b:d4:5c:a1:c7:60:a3:1c:f4:3a:87:23:
         75:fc:f7:e5:75:3e:ce:5f:2b:18:1f:f6:f5:cb:2d:b5:25:1f:
         85:6a:f2:a1:7b:e3:bc:21:4f:0c:27:68:4b:ed:22:10:75:76:
         31:ae:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:28:14 2024 by rpki-client on console-fra.rpki-client.org