Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File:                     28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier:          qO7TSIaKvx5wdMKA2sxBRmlYHuAuNEG8miQ6gweOVg8=
Subject key identifier:   38:12:54:70:B2:1C:66:47:05:93:FF:0E:C0:C3:0E:55:06:C2:64:D3
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer:       /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial:       01936032BFCA25C8E0D88ABC313043D6B876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number:          1360
Signing time:             Sun 24 Nov 2024 22:02:38 +0000
Manifest this update:     Sun 24 Nov 2024 22:02:38 +0000
Manifest next update:     Mon 25 Nov 2024 22:02:38 +0000
Files and hashes:         1: 1DUDxiN76LkQ2OUlXg9t_DFqg6g.roa (hash: 9uztc5ckgtCrBXKcOkt/HNgGCAlgjU4Skl0Qr1Ed2xU=)
                          2: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: UolpYP+0Uz4uYHcwV5KdiMx5TgZutpBhhoUsoNdk9cE=)
                          3: RAIwJlLMmbi52uiNLBXpJx9fLmQ.roa (hash: EJekfAHCd3zvMtM0pKY1yD8kGniJzrVRKhuNilqk3iQ=)
                          4: yAp9Pdl_fhqg2grNpTEtVW5fOf8.roa (hash: O09Yg2shXLM/algKeAdXqS541W34LEbivhzmvySfLFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:32:bf:ca:25:c8:e0:d8:8a:bc:31:30:43:d6:b8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
        Validity
            Not Before: Nov 24 22:02:38 2024 GMT
            Not After : Nov 25 22:02:38 2024 GMT
        Subject: CN=38125470b21c66470593ff0ec0c30e5506c264d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:ed:0d:31:eb:61:2d:53:0f:d7:0d:55:8f:
                    7c:9f:c4:c8:97:0e:17:6e:02:ff:a9:50:6e:72:b6:
                    5a:67:fd:bd:a9:b7:39:4c:db:69:9b:d2:44:24:06:
                    4d:be:7d:7b:d1:43:93:7c:8b:10:a3:09:8d:a7:7e:
                    0d:fb:b0:a0:d8:3c:b5:2f:3b:76:e7:94:72:df:3a:
                    6a:5a:65:fa:e6:88:12:6e:99:db:69:cf:b8:6e:92:
                    b3:55:79:18:45:58:cf:ea:0b:92:3a:c3:fa:1d:d0:
                    01:c8:1f:a1:c6:88:89:42:d9:32:18:fa:57:6c:a3:
                    ac:8f:4c:eb:83:96:66:6e:47:7f:fe:3f:cb:a0:1b:
                    b4:2a:d1:92:ae:fc:90:71:7d:da:15:d1:4a:1a:4e:
                    15:93:5d:2e:2b:43:cd:41:33:a4:b8:8c:06:82:63:
                    13:63:d3:2c:b2:e6:0a:fa:f1:af:15:e1:db:d7:bf:
                    3f:78:3f:a7:a5:79:29:a6:b5:6e:d5:68:47:2b:41:
                    a3:05:e9:b2:06:36:c4:59:b7:7f:48:36:fd:00:c0:
                    2d:e1:85:8a:78:b3:e9:f5:d2:58:1f:cf:2f:43:0b:
                    31:9a:be:a9:e7:3a:63:05:b7:d8:86:73:d9:73:24:
                    34:32:5c:63:a7:21:e2:9d:55:5d:34:56:da:b0:58:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:12:54:70:B2:1C:66:47:05:93:FF:0E:C0:C3:0E:55:06:C2:64:D3
            X509v3 Authority Key Identifier:
                keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:79:bd:d0:91:1a:66:db:32:25:d6:27:91:a6:34:11:0d:11:
         8c:23:ae:d3:1b:b1:31:86:0f:79:98:d4:01:4f:16:77:d7:76:
         58:c0:6b:4e:94:03:89:3b:b9:62:09:c3:bf:2c:99:75:c8:e2:
         95:c7:a9:e8:e7:a9:38:7b:62:15:da:aa:96:b6:18:29:f2:9e:
         6d:24:9f:b6:a9:ac:74:6a:21:76:23:a1:a8:a8:c3:c3:01:37:
         e8:cf:a4:f0:6e:38:97:10:45:47:d1:0c:9d:ed:9d:c8:c8:56:
         bf:9a:eb:2e:4c:1b:db:d3:f3:fd:18:d1:87:e5:0f:97:1f:80:
         bb:6f:9b:71:13:08:81:3d:64:18:21:c5:c5:47:48:5e:fc:80:
         61:46:0f:7f:ab:e5:50:88:38:60:e1:3b:30:a0:f0:1c:40:bb:
         de:f5:8a:0b:6b:53:57:7d:8b:a1:1f:1f:fa:ef:e5:62:38:87:
         f4:62:4d:16:b5:1b:e3:c8:2d:df:65:55:8f:02:48:31:95:37:
         b9:b5:e7:21:99:a4:95:d5:9b:9e:18:c5:c1:88:ad:ed:bb:a4:
         c8:57:51:03:09:86:24:49:ea:e0:7d:58:d0:c4:f3:65:69:5a:
         17:26:32:5a:1a:b1:2e:f4:41:a9:6c:64:fa:d4:96:8e:54:aa:
         de:59:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:03:29 2024 by rpki-client on console-fra.rpki-client.org