Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          vrrkhbGGObZ+0W+IlDLwQroeZ6sXRyhJooRqxQHLphU=
Subject key identifier:   89:43:49:F9:6E:D2:61:68:24:DA:98:82:CC:DD:42:77:EA:6A:64:30
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       01935463437EF8F4F6E98BDE94EE7C2A5C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 15:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 15:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 15:00:11 +0000
Files and hashes:         1: Jsd1PBVXghRoMq4SybKusKw4c4M.roa (hash: Sj7l5Tf3TFI4DnuyKhbtYkbaR4etcH0GexAV/DLMLvo=)
                          2: McFWJNiVWMPNzW1GXCqc84Qk5YQ.roa (hash: H3rDFU7SLyW2/UJ8CLmBSp7sR6m+AaAAl5Dc+lanoVM=)
                          3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: mSrA/bjKuE2bDw9+yzzlPvhUM/o92wC+sbD1jkan/vI=)
                          4: gRhVoQUL2lG0ur91-25EnZnvPrc.roa (hash: mEhD5MB3rtovLG98MVUqDRSyGdJurMsUEkV+Nx7qDzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:63:43:7e:f8:f4:f6:e9:8b:de:94:ee:7c:2a:5c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Nov 22 15:00:11 2024 GMT
            Not After : Nov 23 15:00:11 2024 GMT
        Subject: CN=894349f96ed2616824da9882ccdd4277ea6a6430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:f3:ea:28:67:73:c0:3c:b7:f2:18:f0:79:
                    7b:8d:d5:e6:c8:11:34:1e:8b:c9:a7:73:60:a4:07:
                    98:e4:00:53:36:d4:48:cb:4f:13:70:84:8f:d9:0c:
                    8a:e1:4f:8f:08:7e:f0:47:57:eb:ef:21:40:80:e1:
                    56:c0:9b:b7:7a:a1:23:43:ee:96:41:5d:bb:19:0f:
                    bf:d0:d3:36:8d:53:e2:b2:ca:a3:7b:a3:23:a0:a3:
                    f2:e3:85:a2:59:dd:0c:52:0f:85:57:01:87:b0:da:
                    5c:ad:81:87:98:06:00:63:68:2e:d1:9a:0f:5e:ab:
                    f2:04:6b:3d:97:7d:31:cf:72:9d:84:d8:37:09:34:
                    b9:12:28:38:0b:96:57:0c:78:4b:85:92:fc:e9:6e:
                    b0:1b:6e:9a:a9:d7:3b:bb:a0:91:2b:c8:0a:f4:0c:
                    49:5a:0a:27:78:63:df:3e:ad:71:e1:8f:7c:40:79:
                    4b:ea:c1:53:63:c5:d0:3c:ea:a3:93:23:5c:ad:a7:
                    71:f7:81:a0:f7:05:dd:21:df:dc:4c:0c:45:30:bc:
                    35:24:59:27:ac:e6:eb:84:b8:20:a7:22:fa:bb:16:
                    38:8f:ce:c3:96:47:80:bd:a9:05:f0:c2:ac:e6:f8:
                    9d:fc:50:04:73:5f:91:a1:fc:45:59:bf:2d:3c:b0:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:49:F9:6E:D2:61:68:24:DA:98:82:CC:DD:42:77:EA:6A:64:30
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:28:48:12:2c:b5:df:05:f0:1e:9b:3d:48:25:19:f7:67:
         d5:95:f0:78:9f:25:98:2a:5c:d6:61:d4:e7:6c:e8:95:05:fc:
         f3:75:d4:cf:98:f5:42:93:49:9a:41:57:5a:d0:0e:46:20:a7:
         4a:c4:7d:61:ce:89:5c:13:7c:ec:63:dd:96:06:dc:bb:f5:0d:
         1e:1f:e9:71:85:f4:cf:c5:bb:ee:b9:55:35:a4:80:83:70:fe:
         ce:fd:aa:77:76:c7:5a:fa:db:cb:b9:c0:7c:9a:89:a2:4b:ac:
         39:30:34:9b:98:97:9a:90:6d:43:b3:ed:36:4a:72:8a:52:3b:
         a0:c4:cb:bb:04:a0:58:e1:e6:78:58:8d:4c:2a:56:76:ca:bb:
         06:c1:6b:6b:2c:c6:f3:7d:b9:b1:3a:dd:78:56:cb:52:f3:a3:
         75:b0:58:be:0d:46:ee:5c:33:a1:2d:3f:d1:8f:70:37:52:3e:
         ff:8d:c2:fd:d0:e3:1a:b1:d8:81:b2:0d:56:14:88:c4:49:de:
         05:cd:c3:2e:ba:b5:0a:2c:92:cf:1a:79:15:b6:8b:bb:85:81:
         9d:b5:d2:89:cc:ae:a9:22:7a:b5:98:0c:38:a8:3a:cd:32:fe:
         f5:de:3d:e5:85:c0:2f:11:75:ce:73:da:bf:1f:79:5a:b6:a7:
         b0:9b:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:58:29 2024 by rpki-client on console-ams.rpki-client.org