Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File:                     p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier:          qKNxlIgYxZ5+4/dlxyVUcQZo5TJrTVWjKp4ltc8lB6k=
Subject key identifier:   17:E3:98:47:0B:54:2D:03:E1:76:C0:2B:D7:0E:86:76:73:56:E7:41
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer:       /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial:       01935199269B44677C9F1DF35AD51F63A179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number:          0455
Signing time:             Fri 22 Nov 2024 02:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:11 +0000
Files and hashes:         1: C2A8U2yRFN-JtgiSjUZeHvM3Hf8.roa (hash: 0oGOvpZolEybNW0yN7k5bBsIn4NQoFGyjMQsJvxqg4I=)
                          2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: P5lfkqoPTgzmeXw8imTwQi9Fy3lC2PbwwNft23KPfeY=)
                          3: sciWcFMWeZN9PYrPOHrYfr1SZVU.roa (hash: YQ1Diokuawl749Y9DDF42OvOjKwqthXyxVSjkJAKuig=)
                          4: xQG52uNkuRpKHvoFHnhA90xXWTk.roa (hash: /R0mjr3iQSCsoV5Dwf+B1KoNAwCtxONSBcFxuSz95mI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:26:9b:44:67:7c:9f:1d:f3:5a:d5:1f:63:a1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
        Validity
            Not Before: Nov 22 02:00:11 2024 GMT
            Not After : Nov 23 02:00:11 2024 GMT
        Subject: CN=17e398470b542d03e176c02bd70e86767356e741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:0e:42:f2:a3:38:2c:30:55:58:a3:e8:e4:
                    0d:25:fa:d5:39:b8:14:a3:6a:be:a1:9f:df:fe:3a:
                    13:f8:d4:76:0b:2d:61:a1:7a:1d:0e:3d:1c:bc:83:
                    73:c9:28:db:16:29:44:ea:27:16:b8:1a:d1:b2:b1:
                    48:1b:69:11:e9:6a:32:85:04:61:2d:f7:e7:ed:4e:
                    b7:52:17:98:1b:ac:d3:00:32:1b:5f:1d:9f:ce:b7:
                    70:92:0d:e2:36:2e:92:79:66:a0:e9:09:d3:e4:90:
                    b8:8a:34:65:d5:72:a9:d5:13:de:0f:ab:54:ea:6b:
                    23:4f:0f:f2:d6:78:03:22:69:2d:c5:66:b3:25:de:
                    d3:fe:a7:98:55:c0:40:88:05:ee:45:12:4e:2b:e2:
                    56:66:f9:20:9d:4e:e8:f4:cc:68:6e:b5:2e:aa:90:
                    bb:0d:82:44:e8:78:e2:e6:b0:a0:6c:da:4b:77:6c:
                    ad:f5:12:14:24:8a:e1:e8:1f:d0:1a:c6:ee:dd:c1:
                    05:38:2a:0e:f5:0c:c7:29:6a:d8:ee:29:30:e3:b4:
                    f1:8f:ff:06:be:12:e3:51:6f:b4:fe:1d:59:d5:3b:
                    f3:04:09:37:21:7a:37:94:20:eb:f4:54:8b:52:5e:
                    75:09:32:e5:2a:53:c5:a1:88:2a:82:68:26:99:fb:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:98:47:0B:54:2D:03:E1:76:C0:2B:D7:0E:86:76:73:56:E7:41
            X509v3 Authority Key Identifier:
                keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:4f:f7:14:68:17:67:55:d4:45:83:a3:f8:f1:74:a4:74:
         c4:ee:47:f7:44:35:c9:90:c8:98:37:e9:f4:64:99:e4:9b:67:
         c0:ca:28:ad:ca:b8:c6:46:4a:73:8c:37:59:65:cb:1f:a6:d8:
         44:1c:fd:2d:6b:64:df:49:d0:e1:54:5a:01:f2:0a:f7:02:79:
         06:c6:13:dc:c3:be:ba:cc:70:d5:f1:0c:57:b1:86:f2:7c:31:
         ca:86:89:1c:6d:ad:9d:4e:4e:65:a6:8a:54:74:df:91:f8:7e:
         41:a4:fa:2f:25:6b:11:43:c6:0c:fb:15:8d:cd:a1:a8:38:50:
         ec:78:50:fe:fe:57:81:62:96:44:55:c0:9a:83:d9:9f:b6:9a:
         ba:58:cc:92:01:78:72:f3:10:fe:a4:a4:6a:3a:d4:8f:fd:66:
         cb:a8:44:80:8c:d5:71:65:bb:5e:4a:69:36:86:62:f8:50:0f:
         fa:b6:77:0c:09:d3:84:3c:90:4e:c3:0f:b6:36:f8:c8:36:e5:
         eb:2e:f2:ee:71:27:92:4e:4b:32:4e:29:a3:30:c1:69:28:71:
         c9:50:1e:37:54:b9:10:68:da:f4:22:fd:50:5b:d7:71:fb:06:
         8c:7b:3d:57:2b:81:07:05:f5:c5:87:74:64:88:71:42:33:c2:
         7c:99:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:22 2024 by rpki-client on console-fra.rpki-client.org