Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File:                     d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier:          qSKbDhOGftdm4wU6fQOS1V2IHgqZEaYA57pNxDD6Eqg=
Subject key identifier:   B0:9E:87:D1:82:82:52:C9:2C:1D:B9:D0:D8:A4:11:AB:B4:D6:43:8D
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer:       /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial:       01936A467173138B4DC620817DDA87F6609E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number:          129E
Signing time:             Tue 26 Nov 2024 21:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:21 +0000
Files and hashes:         1: DmN8sz0-6CYV7SHoWXRo_-IPKRs.roa (hash: 1GzOoYREWAnrhHQx533h6Nf6/VFpdkqNVD87sR3nnqg=)
                          2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: qHRE/FAMsPe+IFmwjs0kytnZMjwG+E1ZIWXOJoyvlKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:71:73:13:8b:4d:c6:20:81:7d:da:87:f6:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
        Validity
            Not Before: Nov 26 21:00:21 2024 GMT
            Not After : Nov 27 21:00:21 2024 GMT
        Subject: CN=b09e87d1828252c92c1db9d0d8a411abb4d6438d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:58:dd:a6:bb:e9:20:dc:9b:8c:fa:02:a5:
                    2d:0d:c2:a3:37:8d:e1:45:7a:4c:83:c9:8f:fa:e8:
                    98:b4:b6:4c:ba:1c:8f:e0:b2:6f:1b:c4:08:18:e5:
                    3f:e1:71:3c:ee:52:ef:4e:cb:67:33:22:6e:45:51:
                    ac:e3:87:4e:cc:65:3c:ee:c5:0c:cc:08:b0:b4:b8:
                    58:d9:9b:3f:56:d5:6e:01:86:08:db:37:f8:5f:a6:
                    40:9c:69:4d:cc:1a:13:81:f6:e7:4d:d0:1b:d6:41:
                    a6:cc:44:4c:eb:72:56:8a:e4:6f:d0:32:db:c4:6f:
                    4e:6e:15:93:2a:1f:dd:49:7f:98:2a:ee:9d:d4:37:
                    a6:d8:36:78:49:d5:bf:de:c7:f1:7a:f0:21:df:1d:
                    63:e3:78:13:5d:49:b2:66:cf:9a:cc:1e:a6:82:9c:
                    a4:31:bc:f0:d4:a9:04:fe:54:08:8e:1d:ba:33:f4:
                    6f:7c:dd:2e:df:bd:f3:9a:2f:6e:49:2e:2d:16:ac:
                    d4:b6:8f:fc:51:e4:a2:a3:b5:d1:5a:6f:38:e3:79:
                    f3:b6:e9:93:47:2b:e5:79:d2:09:13:2e:a2:bd:af:
                    b4:30:48:9b:3a:5d:b7:af:f7:bd:80:5c:31:ad:fd:
                    0f:2a:22:8e:d2:82:d6:0f:55:0d:37:bf:ed:f8:d3:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9E:87:D1:82:82:52:C9:2C:1D:B9:D0:D8:A4:11:AB:B4:D6:43:8D
            X509v3 Authority Key Identifier:
                keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:a5:95:5e:79:04:b9:13:3e:e0:f6:f4:76:bc:cd:1e:45:
         43:e4:a8:d0:09:b1:87:f3:81:e8:b9:e1:e3:c5:14:0f:02:9d:
         86:72:8f:d6:5a:d9:6b:aa:1d:55:30:7f:a9:50:eb:e8:14:69:
         1a:2c:79:29:43:00:6b:1b:58:d7:9e:e6:5f:dc:6f:df:43:c2:
         38:c3:7c:b0:89:dc:3e:ff:1a:f0:12:8e:ee:94:6b:34:34:10:
         ee:b4:42:6c:e0:87:dc:45:ae:66:e0:43:38:20:47:0f:d4:af:
         2b:e0:13:8e:c9:cb:a7:95:7c:26:19:23:d1:d5:83:bc:b2:4b:
         93:9a:82:72:a2:f5:77:f6:f9:ac:3d:e7:31:7c:38:1d:82:08:
         f5:d2:39:04:94:39:42:92:27:0a:c5:cf:6d:40:17:29:51:3e:
         40:c8:92:ca:87:5f:90:20:ae:ec:45:c2:0d:d4:7d:c8:18:77:
         8f:6b:2c:48:cd:0e:f7:4c:54:50:1e:00:3c:1f:ee:54:14:81:
         6b:06:fa:7d:da:04:67:6b:f2:1d:f2:09:3e:d6:34:aa:e3:00:
         93:33:5e:85:ae:06:f8:5c:50:a8:a6:e5:95:85:22:58:17:78:
         36:d8:a4:2b:78:cc:f9:20:e3:d0:6e:80:d1:9e:63:d2:c9:7a:
         47:7d:de:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:28 2024 by rpki-client on console-ams.rpki-client.org