Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File:                     u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier:          wrhnYb66B0Lcg7evJwIviddKCshjMYsT8MGCGW+1gXQ=
Subject key identifier:   5F:2E:00:DC:A5:A9:5A:2E:92:00:CF:98:9B:2B:ED:AA:1D:92:D0:2B
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer:       /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial:       019355085D090F21C98F368F260122FF9280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 18:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:31 +0000
Files and hashes:         1: 9V0lsxeU_eil2rjL71E-4EwMKxA.roa (hash: WBP5QPYVhIF212YldLPr7iDGAtB+8jkwcWb8uHYDhSg=)
                          2: nAfxBRTMzDdwHNdEu8M1Qbkre7k.roa (hash: qTWsKsyywvTTcu/hf4T0NXZNm0FvofP2g8D7I+sx+GE=)
                          3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: LOV395qVqiQVuzppaeRq9l2Tfn+VJIwCG8pxTSKYh/M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:5d:09:0f:21:c9:8f:36:8f:26:01:22:ff:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
        Validity
            Not Before: Nov 22 18:00:31 2024 GMT
            Not After : Nov 23 18:00:31 2024 GMT
        Subject: CN=5f2e00dca5a95a2e9200cf989b2bedaa1d92d02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:9e:61:8a:ad:45:0c:e6:65:ae:02:f1:6b:
                    7a:b8:d5:92:8d:4f:36:08:f5:45:17:6b:79:7e:8c:
                    0f:ac:75:33:2b:fe:70:92:71:91:b1:a2:62:85:26:
                    8a:ea:b2:f6:68:24:29:f4:32:0e:0d:7d:a6:e3:99:
                    ed:2b:96:5a:f3:82:86:50:d0:c8:51:10:41:91:47:
                    d3:b2:7c:91:9d:c0:41:e0:96:48:b4:8a:6c:84:5b:
                    81:04:91:c0:98:ff:63:8a:36:43:9b:a6:fb:09:50:
                    13:af:3d:93:03:b5:08:db:a2:e2:92:1b:85:98:23:
                    98:58:3c:ba:02:1c:4f:0a:56:67:62:75:87:b9:1f:
                    b7:f6:25:61:64:27:ca:07:f4:5d:d7:da:81:d1:37:
                    30:6b:65:e4:14:72:94:3e:75:a2:db:57:7e:e7:00:
                    51:6d:94:d7:55:d0:4e:21:3b:57:c2:23:88:a8:92:
                    49:9d:cd:1f:37:3a:b7:78:d2:30:65:15:98:fb:6d:
                    f1:84:6f:6a:82:57:8c:19:25:20:cf:30:7f:41:61:
                    c4:46:de:dc:f0:1a:e7:d9:9e:ee:c1:81:5f:6f:91:
                    4a:2c:f5:ff:92:c8:2a:b2:cb:a9:af:05:8b:a4:40:
                    6d:cd:c0:f8:ad:05:e7:d9:38:7b:c4:34:93:88:25:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:00:DC:A5:A9:5A:2E:92:00:CF:98:9B:2B:ED:AA:1D:92:D0:2B
            X509v3 Authority Key Identifier:
                keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:a5:09:97:dc:7b:a5:68:9b:1a:da:81:8a:0e:47:a7:ea:
         31:cc:04:86:41:af:f3:37:a7:1f:8b:fe:e1:e8:76:b3:1d:87:
         20:8f:55:a6:9a:bb:42:62:42:60:00:87:c8:c3:3f:c5:bd:9c:
         6b:05:98:19:97:77:05:6f:44:0c:ef:a4:71:04:ea:6c:09:a9:
         ad:f2:34:f4:44:56:23:43:d9:a1:1e:ff:13:ee:12:76:43:70:
         7a:f8:cc:70:f0:e3:9a:03:42:a8:99:ad:35:b6:b3:13:fa:fa:
         e7:ba:fb:30:6f:1a:07:0e:f1:d5:81:c5:c9:f6:2e:36:a9:f7:
         7e:1a:8a:ba:90:dd:33:96:c5:e7:27:c6:7f:d7:7d:aa:70:f1:
         be:7c:1a:d3:6e:79:83:49:f3:b8:fe:3f:17:4c:ab:a5:71:46:
         d1:06:9e:ca:d3:b2:20:34:79:38:f4:5d:e9:e2:03:f8:4b:cb:
         3c:d6:0c:4b:13:ca:96:61:42:07:bf:d0:26:d0:95:0c:d9:f4:
         00:35:0a:b8:b5:33:76:83:63:3d:57:eb:e2:ae:f8:f0:02:26:
         51:85:91:b2:ff:de:f4:45:b0:3e:9d:a0:ec:04:92:49:e2:70:
         7c:a1:cf:de:cc:72:e7:7b:49:51:1c:0c:e3:8b:46:f9:e6:69:
         03:eb:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:55:20 2024 by rpki-client on console-ams.rpki-client.org