Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File:                     52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier:          YlGlLfOZ43Q24JZwF424fbVJm53kNYzYIYEulsL9FG8=
Subject key identifier:   23:DA:7A:16:B3:BC:B7:85:B7:53:E4:03:5D:49:7C:F0:23:66:F5:15
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer:       /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial:       0193685854132E38F4F9F9EF0A369F2867ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number:          0820
Signing time:             Tue 26 Nov 2024 12:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 12:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 12:00:39 +0000
Files and hashes:         1: 21hYhFiZ0_n-69vO5VtzPYZADHE.roa (hash: N6CLe/NmN3KcQ2z2H5dt1DQb3mz1MSCXv3zQtPg/j8Y=)
                          2: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: hcekTgsLvmJU4YOIm/V76vuFcKqXLN4zwwRW03Rqa38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:58:54:13:2e:38:f4:f9:f9:ef:0a:36:9f:28:67:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
        Validity
            Not Before: Nov 26 12:00:39 2024 GMT
            Not After : Nov 27 12:00:39 2024 GMT
        Subject: CN=23da7a16b3bcb785b753e4035d497cf02366f515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:2f:01:4c:66:58:96:1f:e2:07:3e:54:38:
                    ce:e4:bb:c4:aa:7d:e3:a6:6e:4d:ca:a4:49:7c:b7:
                    20:da:10:4d:5b:d6:42:c5:b7:b6:e2:fa:a2:a5:54:
                    26:5a:fd:5d:57:d0:a7:7b:22:e4:75:ba:87:e0:70:
                    27:f1:6e:59:1a:40:f8:54:f4:db:83:d4:83:1a:8e:
                    80:61:3f:2e:88:38:a7:a0:73:c2:28:eb:41:f6:9d:
                    89:6b:26:33:d3:e6:34:47:b1:13:8b:35:83:d6:60:
                    15:fa:47:f5:6b:9f:0b:3f:b4:a9:73:5a:2a:ff:c2:
                    d1:71:b1:0c:a6:9c:9a:e6:10:d4:31:7c:84:f3:83:
                    b2:54:7e:a4:be:a4:21:ee:8f:e8:c3:3a:cf:91:ec:
                    69:4a:49:09:ce:52:c2:dd:aa:b5:d1:21:4a:52:f9:
                    a5:9e:26:7d:fa:41:63:de:38:e5:fc:33:c7:98:07:
                    7f:3e:18:47:da:74:d1:b9:61:13:c4:91:ce:d4:b2:
                    c5:c9:24:cb:79:cf:20:42:e3:7f:92:6f:d9:2b:d0:
                    71:47:85:e5:19:5e:f1:15:6b:7d:88:39:0c:e7:e6:
                    9f:9c:24:cb:b7:51:fc:d0:73:37:37:a3:c6:bf:5e:
                    11:0b:d6:c9:08:db:62:b0:ec:32:1a:b3:40:6b:0e:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DA:7A:16:B3:BC:B7:85:B7:53:E4:03:5D:49:7C:F0:23:66:F5:15
            X509v3 Authority Key Identifier:
                keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e6:23:94:4d:68:80:12:90:19:8b:21:f9:93:85:bc:ce:be:
         6d:19:56:4c:05:5b:1f:d6:85:b2:0b:56:a9:b6:52:94:14:ff:
         1d:6c:cc:e3:5b:37:70:c6:a1:f4:ea:81:f4:f7:cf:f0:51:0b:
         b6:53:e9:bc:6e:4c:1e:7b:b5:8f:3a:f3:a5:72:c9:f8:54:2b:
         5f:db:3f:28:75:d6:6d:e9:69:c8:24:1f:25:75:52:04:b5:bc:
         0e:ed:69:c2:ed:ce:9a:c4:97:d4:09:9e:de:9c:e8:08:8e:ac:
         30:35:9d:f9:33:8d:fe:4f:e6:56:81:69:6f:29:e4:a7:6e:cc:
         72:fc:f7:19:16:c8:74:6e:b8:52:08:6d:8d:c9:2d:fc:ff:36:
         3c:9c:5a:95:cb:fc:a7:a8:b5:fd:e6:17:07:cf:65:62:0c:b8:
         df:74:9f:16:6d:8c:fd:6d:b6:86:30:e1:0f:ac:f6:e7:dc:a2:
         b8:75:aa:18:d0:35:77:c1:81:0e:df:7c:4d:b3:cd:1f:5d:0b:
         25:a8:a3:00:9d:43:8d:ec:56:89:78:8f:ae:ca:95:0b:6d:d2:
         64:38:63:0a:e2:3d:f6:4a:41:f2:79:ab:0a:8c:1b:d9:3e:2f:
         21:79:dc:c4:01:a8:6a:ac:84:5d:28:7a:63:a7:84:8d:0b:dd:
         94:4f:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:34 2024 by rpki-client on console-fra.rpki-client.org