Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
File:                     cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json)
Hash identifier:          EzPHKmE5lOW68y9vkzV32ADyDwTBK3uw2i5FtMtqQPI=
Subject key identifier:   76:69:FA:A5:A8:59:17:9E:37:AD:71:39:28:74:DB:F8:3B:F2:15:CA
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Certificate issuer:       /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial:       01935162A8FAB006C7B3C1E037A645931685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
Manifest number:          0D53
Signing time:             Fri 22 Nov 2024 01:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:40 +0000
Files and hashes:         1: 3vnhoTpvnNPhH7SUJNL840DslTQ.roa (hash: NpltN5fckqHnKodcDnpYjvwgycdsA6h8fT0pD2nmXZA=)
                          2: 88wO49Y78qOfTgNWS-x1axS1x9w.roa (hash: D18sUf/rpIJpE0O+sLXW2OGDO1EWyOpWUZnRfwZcPFI=)
                          3: 8nA7X48cCVV25XzK6M2nEYJouK4.roa (hash: gzwDV0JYnvKFgbY4jVTTKsQd7B5k7mSXzcXMCf7CL/M=)
                          4: 9pWt6XOgszXs8UyFILGtTs-fxPg.roa (hash: C9QHOJgzaAj8y5pox6Lbhprs1U9AYmR0w8Y9AxsTZNo=)
                          5: RKa--eZy19HSrkrC05R1g8DOZVM.roa (hash: YFXiGbrLMd5bndumvcrP9gXzPaxNmg6IMovI631LLa0=)
                          6: RSlmB-vni1CP9m9Oug4SaM-9nLI.roa (hash: i2KgXhko5ZsRNqgxR0DRQ+VRfeQNlF2WPSQ6wfwZyeU=)
                          7: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: 0o4v+JwbGOBqjbZdXeoqUNCogftATAjIBp8lOHVL+zg=)
                          8: d85kE3b0MrkxApHZgvgjJNksXAU.roa (hash: meUuTyV+HklHIWap070pV2fmphtyo1+GuAaJzZRCDBE=)
                          9: mkoBZZlfGbs9OmXjIQeLixYtTKE.roa (hash: NLXhXFLtyI6J9X6Vwd4AMjZ6Bn96mOZtMuSnzC6t8ao=)
                          10: sJaKPRz78lEVo_29WYlLJNsixaY.roa (hash: 0bOlOxUZfBvnxg+gI9xl32TvMSkTTsFqWMZE9XUH/es=)
                          11: w5-JOeK1ArDhsKyJqQCM2FDNOPQ.roa (hash: FkxhtBI1vKgYKhAUa6LGHF+6F0JW2xT3alfl8hrfy64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:a8:fa:b0:06:c7:b3:c1:e0:37:a6:45:93:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
        Validity
            Not Before: Nov 22 01:00:40 2024 GMT
            Not After : Nov 23 01:00:40 2024 GMT
        Subject: CN=7669faa5a859179e37ad71392874dbf83bf215ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:79:db:c5:0e:bc:e9:d9:57:d0:b5:bc:9d:
                    92:d0:09:90:9e:9b:6c:1e:e0:7b:ce:77:57:4b:80:
                    75:fd:c8:0a:fd:73:56:e6:3b:2f:7a:04:ec:ee:e1:
                    ce:ff:87:97:ce:0e:0b:b3:8c:e7:27:d0:00:65:67:
                    24:a8:d0:7f:e9:40:e8:cc:aa:c7:d7:89:b8:2a:c4:
                    ac:18:16:ec:48:9c:96:02:f7:e4:08:ba:be:7e:52:
                    91:32:d6:35:5e:07:2b:f9:7b:33:a9:ee:fd:7c:5f:
                    88:bd:37:8a:93:6b:bc:66:fa:c4:54:dd:e9:71:85:
                    dd:0b:e3:ca:fd:68:3e:f7:bd:a2:2f:eb:23:41:32:
                    0c:b6:5e:12:92:5e:52:18:95:c6:b4:96:e0:85:c6:
                    de:81:02:76:54:92:19:db:4e:7a:99:4e:04:f0:3c:
                    88:75:3b:8c:57:61:68:fd:06:ee:e3:06:0a:69:17:
                    90:a8:ab:5e:a3:41:5d:27:2f:d2:03:b6:33:68:f4:
                    ad:c9:ad:af:d8:84:16:e4:af:c5:54:3b:47:5e:21:
                    81:6e:67:b8:78:23:b3:7e:9a:42:88:fc:e2:6c:00:
                    cd:b4:d3:0b:c0:a8:8a:3c:95:18:d1:bb:30:1b:98:
                    55:bb:14:35:ed:ef:47:fc:9c:15:e1:9c:eb:f2:f3:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:69:FA:A5:A8:59:17:9E:37:AD:71:39:28:74:DB:F8:3B:F2:15:CA
            X509v3 Authority Key Identifier:
                keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:89:10:3d:b3:ad:87:9f:60:bb:f0:78:84:2e:56:d7:4f:15:
         4d:2d:e2:64:c2:5b:aa:b9:3b:2e:59:6d:dd:ba:26:96:ec:55:
         0d:ab:c6:41:91:32:fd:ac:72:2b:7c:09:84:ca:9f:cb:7f:76:
         01:25:0e:41:9e:f5:7a:54:b2:1c:01:ad:da:ea:00:54:44:0f:
         b7:e1:86:7b:b4:12:72:27:a1:17:32:d6:85:c3:67:42:70:e9:
         58:5e:d2:a2:b2:f3:db:cb:8a:bd:f0:b8:73:d6:16:06:66:1e:
         64:91:c8:8f:cf:84:4d:24:20:7a:21:71:9f:54:44:57:33:72:
         c7:77:96:dd:9c:d3:e8:53:b4:3a:5a:a0:cf:3c:08:0a:b7:a4:
         2f:a9:8d:10:c8:51:a4:dc:3d:97:b7:3d:d2:60:2a:c5:5b:e4:
         0b:e1:19:bf:a0:f8:e9:6d:01:9d:99:a3:56:2f:d4:39:bb:b0:
         99:b7:ce:1d:74:29:58:e4:d7:60:65:03:dc:17:b4:71:30:1a:
         70:98:2c:2c:c4:40:83:71:3d:8e:e0:e6:f9:4f:15:5e:86:e0:
         6e:01:9e:df:a2:78:d5:b4:80:4b:a7:a2:80:ad:59:42:3f:1c:
         16:e0:bb:db:35:d0:31:58:5f:9a:e3:d2:f4:0a:2a:2b:f1:be:
         be:a8:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:00 2024 by rpki-client on console-ams.rpki-client.org