Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          g7MsPrt/OOLAN+De9897Puv7p4oz4Ws80t+09Mv723E=
Subject key identifier:   72:EE:00:80:E5:14:76:26:17:BA:96:B7:6D:8F:2A:F6:C4:4F:0B:AB
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019350BE85A775FEA527DB0CA156D8D145F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          09C3
Signing time:             Thu 21 Nov 2024 22:01:23 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:23 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:23 +0000
Files and hashes:         1: 0D0dEgIaaXJldOEWQxxD4x13_J0.roa (hash: 0b+SRYZW1rI00LOFdwtzI4QP0HRNpZjbkeWehSi0vZg=)
                          2: 0fnKdl9KG2CSwBHOxuQ0ceCimOY.roa (hash: 6c7j9c7iGklR7qqEleE/IBes1mjwZ8ruDR6sBZSXvM4=)
                          3: 2lvxFCIY-aWvsZyMbSOtMTMsLm0.roa (hash: DRlbdxC7m2pTMPMFhdPk+uQO3gcMSwd8EgxYP2Cmcnk=)
                          4: 4xsANrB845H5-QnZY8m7nGgeJAU.roa (hash: pqZ8x6wkdabvCkvVLJ3HzLh6a6uD0269EmjRIskjTbU=)
                          5: 6ELMTZ_82I0xaPkQ8LgQXqP3Ovg.roa (hash: phse0eb84DmbsI2Ap5hipPWWlR7yVxxwjE4JrdxgQU4=)
                          6: 7ugs9d68fxPf7WwMRPc5_ZPrCuc.roa (hash: gi0YkYn3aV7Jp8P+H/hm612+QitrvU/yY0FpXE3bwtI=)
                          7: EvFueZgXc4TFksyBhstkgpn5DI4.roa (hash: 7pW3Vnq/RuyVRk5XWdAe0hTo9WL9y9XnDaZh0iF6FpQ=)
                          8: G1S6I66bgBI9F0rALxnHJq17z2Y.roa (hash: t3nVF3Or2RuFuraUSLn+ji+lpTORr4QnAwGOij+SwGQ=)
                          9: G9MzY6du8c3nNX1tLasK3pYd0hA.roa (hash: sZsKQWt9B17j3mU6QSBN5AD/yQif+SyHMwaVPrgijU4=)
                          10: H9wk5Crjzg5PnXeh__C0JeWgRx4.roa (hash: m+sTUl7QJ/QUJWpKpO652y7oN7P2qdny6phwGmPaO58=)
                          11: S_vBoRiU2kf9MSgsQQROU64MHys.roa (hash: st0mpxivd0tBELz8Udm+PA8h4HjM5p+OCPf4ulBN8HM=)
                          12: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: x7znQ+jkICKFe+HSPDseB1xf3beGUj33iKnntSliC04=)
                          13: a0Ye_X9mxKJuR6eNMFVJAs1X7P0.roa (hash: umVknx3uqKbrbkHCEFa3xjN1W9hMhp2RuBKJjY+8xS4=)
                          14: g2J0SvQir4U3h2n2vB5NgybfJug.roa (hash: rBJ8+s8d8GMrDsH9DnXTSM5QCAsJIqZrjtchwgQeKgY=)
                          15: mZ_sK7JAQAYgLERBb2Eu_ff4kpw.roa (hash: sOdy2hsxe/JvDsZH9k/pPJCQ3QM96+4cb8VPs/i4DE0=)
                          16: rstQt4hilznyOGL7r1vxerMOA7Y.roa (hash: x5IV+UTql27+Prx22zFEig7tOPN77spZxpeLC2yjEqQ=)
                          17: tBxBjV_mkV_JBOOQ-SUq6_HXMc0.roa (hash: at+yBa90AD7FIXRB5xqif20LXtl2Y5N9WcU7TiVWzI4=)
                          18: xPK4I6Pz6ciyaktohR-44b-OD1w.roa (hash: AhX83S8xR7JNhtiMn1pifC3nA7Ohv23GCMEZGe9ssgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:85:a7:75:fe:a5:27:db:0c:a1:56:d8:d1:45:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Nov 21 22:01:23 2024 GMT
            Not After : Nov 22 22:01:23 2024 GMT
        Subject: CN=72ee0080e514762617ba96b76d8f2af6c44f0bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:94:9c:07:6b:9f:cf:a4:b7:d2:02:19:73:
                    d9:b7:62:e7:a4:da:0d:a8:a4:fb:76:f8:76:0f:47:
                    c4:fd:4e:23:98:df:47:63:81:a9:37:b1:80:5a:31:
                    8b:d1:34:77:d0:ce:bb:9a:35:9d:33:4b:8d:d8:20:
                    80:ac:9e:d1:9d:8e:38:b0:dd:72:28:b9:75:ad:b5:
                    f0:41:d6:16:b0:16:59:5d:94:0d:6d:bd:ee:02:2a:
                    0e:9e:a7:0f:e4:fc:a9:31:6d:eb:48:f2:bc:00:2e:
                    42:dd:4a:c6:5b:2d:04:d0:49:44:33:02:22:0a:b1:
                    90:d2:6e:2d:28:0c:c4:ba:c7:20:6b:0e:38:67:df:
                    f3:40:b1:5a:59:54:67:b3:f7:44:94:74:da:c9:85:
                    d4:12:3e:5b:07:b7:d1:08:24:49:92:8b:82:58:e1:
                    08:47:87:1c:a6:2e:63:43:05:21:78:dd:06:3e:3d:
                    5d:de:5b:27:b6:1d:c1:26:0b:c6:04:c9:db:10:74:
                    51:a6:17:d6:63:d5:23:65:e3:32:32:90:f7:90:29:
                    81:90:1a:ca:7e:76:00:5e:1f:76:ee:83:df:21:f6:
                    80:d5:73:bd:fc:f3:61:bf:6c:4b:d1:05:88:8e:ad:
                    e8:38:27:13:78:7b:82:5f:60:a7:f8:dd:8f:c6:95:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EE:00:80:E5:14:76:26:17:BA:96:B7:6D:8F:2A:F6:C4:4F:0B:AB
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:b3:ac:e9:a3:a5:df:d6:6f:42:09:1a:6b:0a:84:d6:da:
         cd:f5:fa:2b:0c:e1:ad:c4:0f:29:1d:b6:3b:45:c0:51:25:86:
         5b:19:b3:fb:47:fa:54:32:42:81:37:59:5d:1b:a4:3b:e3:67:
         82:7d:68:74:f8:64:53:86:51:76:00:3a:a7:5e:a7:c1:d6:dc:
         c5:04:3f:9d:dc:3c:f2:52:8e:73:88:fb:4c:d3:53:2e:db:d5:
         78:d0:a3:a2:b5:8c:ed:06:9f:ae:51:5e:f2:0c:77:10:36:21:
         2c:a4:f5:54:15:44:46:01:a3:47:d8:80:a4:39:49:f6:26:ca:
         87:38:3d:ae:e4:83:30:d8:a9:9a:1d:02:1b:40:c0:14:26:21:
         8d:d3:a1:11:e4:f6:e7:f3:b4:28:f5:49:07:e8:25:37:b8:b6:
         07:93:e7:a4:49:21:f4:5f:a6:28:c7:6a:16:f0:8e:51:90:48:
         ab:11:2d:d3:74:b1:99:56:c0:79:27:f0:1a:0d:6b:f0:45:16:
         64:39:9d:96:9b:4f:cc:fb:54:53:0b:35:75:36:bf:47:7c:98:
         91:d4:17:a8:92:67:24:ad:43:ce:95:92:33:de:d7:38:70:b0:
         d6:a9:f3:f8:96:8a:2b:c5:19:0f:44:38:0c:f4:0b:0c:27:8a:
         7c:6e:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:27:14 2024 by rpki-client on console-ams.rpki-client.org