Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          3m3XbHnL4MReX6O13hWWqGno+NNeqCpCFI0aU7Dku2k=
Subject key identifier:   41:F2:E1:D9:E9:43:E6:3D:14:AF:82:A6:9E:6F:20:8F:71:C3:B7:E4
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       019355E42452E73CD477C62FF4429DE5CB40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 22:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:35 +0000
Files and hashes:         1: 2KdtsH5mYfkke7WWFX1m4Xak9Bs.roa (hash: 4xbO3yLbMZEMAoelGakY38dRQW1kv0N/Xsv5ywIk84g=)
                          2: 6-2gaIuxFztVWGJc2MR5c_5HEJo.roa (hash: DaK7DYl8HpK2AjLNKLk5VK0+Hkml0rn6J5C8+otVopA=)
                          3: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: OnifmI27kbA33G4oeClJmYmS1Dyoqn9xZudJxpAn7Rk=)
                          4: ivdNzlndtMrdYSfd0Di5N9TVpeg.roa (hash: 15AKmGprwaJPEYphVMpGE0LWvQhW3w2t5JNiTFeCLkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:24:52:e7:3c:d4:77:c6:2f:f4:42:9d:e5:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: Nov 22 22:00:35 2024 GMT
            Not After : Nov 23 22:00:35 2024 GMT
        Subject: CN=41f2e1d9e943e63d14af82a69e6f208f71c3b7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:a0:2c:2f:4c:19:f0:ab:62:51:53:62:49:
                    24:1a:3a:f4:ee:1f:1e:5e:61:c0:e4:99:bb:3f:a6:
                    d4:42:ff:c0:a8:50:1d:07:c5:72:57:24:c9:2a:ef:
                    1e:77:1b:39:d6:d5:43:c6:1f:f7:41:e0:c5:82:1a:
                    70:34:36:d3:bc:c8:03:6d:62:95:57:fd:3d:9d:6d:
                    b2:68:31:89:35:19:96:f1:ec:17:1c:4b:ac:3b:7f:
                    fb:3b:3e:43:a5:cf:7a:3c:2e:0e:0c:7a:08:0d:99:
                    ff:2e:58:8d:1a:1a:a1:17:5b:46:6c:7c:96:ed:a6:
                    52:c2:7c:a2:d2:a8:c9:3a:5d:42:8c:67:57:c0:6e:
                    f3:a2:75:73:05:fe:f5:d1:8b:2c:3c:0b:5d:8e:cc:
                    f0:d0:40:a7:44:6d:70:a7:e1:06:01:72:3c:be:5f:
                    d1:7d:d3:11:9d:f8:1c:11:9d:ad:b6:14:1f:12:09:
                    fc:7e:13:a7:2c:38:d5:14:2c:0b:d8:eb:04:4e:44:
                    05:f0:c8:66:9e:02:96:b0:07:ca:f2:a8:03:ce:de:
                    bc:52:0e:44:a5:19:3c:09:d6:3f:79:c8:ca:d9:7f:
                    7f:0f:51:66:4e:a4:84:b7:db:01:cf:74:76:0c:5e:
                    33:e3:e1:b7:c4:cc:15:3d:a3:24:ff:a8:ef:f8:ca:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F2:E1:D9:E9:43:E6:3D:14:AF:82:A6:9E:6F:20:8F:71:C3:B7:E4
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:fe:60:cd:52:e0:08:67:0b:9a:4e:e6:c2:f0:71:c9:0d:
         5b:97:9b:76:f4:98:1b:23:4d:dd:68:19:8b:bc:e2:e1:07:ca:
         2a:20:27:37:18:4d:e5:0b:ae:cd:7f:0e:27:97:da:ae:37:2b:
         78:f6:a6:6b:56:0b:68:ff:3a:b2:03:a5:ba:4f:4f:81:aa:8e:
         fd:be:b9:32:60:d6:b1:25:62:ee:8d:79:f5:08:d8:17:2a:9b:
         a4:a9:98:23:f5:2d:3d:fb:72:f1:2e:58:d3:7c:ac:73:98:87:
         ef:ca:ea:aa:ca:b6:6c:6c:6c:10:69:bd:05:13:37:e1:f8:bc:
         66:1d:b2:13:74:05:cf:4b:72:99:7a:0e:b2:70:f6:b6:78:d0:
         dd:d5:6a:68:36:cb:3b:4a:5f:05:d7:20:9e:f4:ce:91:c4:62:
         23:95:5b:70:25:fe:ec:2c:d4:ac:ad:f4:2c:34:b9:e0:fb:bd:
         7b:e6:8e:78:02:a3:93:9f:39:aa:63:07:a2:5c:a2:20:df:36:
         a9:f4:f4:95:d1:c8:9c:71:75:51:a0:a5:51:bf:7c:2f:cb:09:
         99:f7:5f:25:cf:ac:18:41:7f:02:fd:a9:72:70:4a:17:60:1d:
         39:9c:df:4e:d0:26:2b:85:3c:87:ad:96:54:a3:d2:2b:87:be:
         2f:02:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:40 2024 by rpki-client on console-fra.rpki-client.org