Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File:                     jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier:          IxYr9t5LAe3ta0zWPVfC+dB3RNuXUOuNrwi1TScIwp0=
Subject key identifier:   BF:8E:F8:39:79:2F:D0:D2:6A:6B:74:6C:DD:94:7D:1C:73:FC:7C:1E
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer:       /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial:       0193579BBE10018DE41F6499B93E7DB66AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number:          10DE
Signing time:             Sat 23 Nov 2024 06:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:44 +0000
Files and hashes:         1: 3-36QfNumz87WGmjBK8xmVLenUA.roa (hash: HuripX5JaanLD1DdOuo9ZBkOuUA4Sel/8Ly/9L5e8z8=)
                          2: hZDJcEGRIt-rGImHq0iZbpupt0Y.roa (hash: p4QzMFtS7xdVuUE1djgyOHJwDpTtnL7eCD7a+RBdDPg=)
                          3: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: n3WMJOSsX25oDQK96D94yYnATN8dYJZH1Cdl3rKy2YU=)
                          4: u6pZ4cdG4Zwgu2mkcQxxR9LTzRQ.roa (hash: 5wHTbQRjcb/mbbnpSpANPHICF5wiJQZ5d4VpHBFOWsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:be:10:01:8d:e4:1f:64:99:b9:3e:7d:b6:6a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
        Validity
            Not Before: Nov 23 06:00:44 2024 GMT
            Not After : Nov 24 06:00:44 2024 GMT
        Subject: CN=bf8ef839792fd0d26a6b746cdd947d1c73fc7c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:c9:41:a9:cd:76:00:1e:6a:bd:aa:4d:c3:
                    6b:62:b2:bf:d2:28:7d:6a:2d:d9:81:23:a6:4f:ab:
                    e7:8b:8a:24:d3:12:3a:b8:d0:48:28:3d:71:fd:83:
                    98:c4:d8:b5:4f:17:2a:c2:74:9e:3a:cd:d8:6d:0b:
                    cd:ee:6e:73:01:6d:78:fe:f9:da:fe:54:85:96:7a:
                    91:b3:0a:3c:df:70:b8:35:cf:5f:26:42:05:28:d9:
                    1d:08:72:f3:58:e5:bf:8b:42:3b:15:a1:b9:bd:3f:
                    48:8a:b2:5c:14:80:b8:e7:78:0b:86:56:20:79:fa:
                    ac:fa:d7:76:e7:b3:09:8e:26:ff:16:83:d9:6a:5e:
                    16:4d:31:48:6d:a7:19:40:64:da:57:04:82:db:5b:
                    c8:d5:8f:c8:a7:ef:92:22:bf:81:6b:16:80:44:ae:
                    48:00:2e:b7:18:83:c9:f4:ae:ff:8f:49:b2:c8:12:
                    31:ac:51:71:a4:f3:3f:92:3b:6a:c4:3a:82:76:5c:
                    63:16:e6:42:13:73:d9:93:22:42:57:13:b5:56:58:
                    61:60:9a:de:8d:3c:51:50:1b:07:27:66:a8:b2:79:
                    0e:35:c9:f9:a5:4c:36:20:60:f8:0e:27:72:c0:7f:
                    bb:a2:54:20:6c:42:8b:45:14:db:8c:6f:63:f1:0c:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8E:F8:39:79:2F:D0:D2:6A:6B:74:6C:DD:94:7D:1C:73:FC:7C:1E
            X509v3 Authority Key Identifier:
                keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7b:a8:01:28:13:7e:1d:b1:4a:b4:ed:50:c6:48:c4:b6:e2:
         35:74:20:07:5b:d9:df:8c:81:a1:15:45:92:a8:13:7d:db:05:
         26:22:b6:d2:4f:25:f6:59:1d:8c:9d:1f:dd:96:3f:95:bc:06:
         19:49:97:e3:48:ad:bb:8b:fb:77:d5:ef:db:9e:7f:53:4d:c7:
         b5:06:73:ce:f2:a8:c0:62:90:3b:f9:c6:99:44:2d:78:87:f6:
         7c:a3:62:5a:54:c1:1e:1e:31:f4:71:1d:57:e1:d0:d2:0a:7d:
         a7:9d:fe:08:9b:96:65:98:e9:ae:38:92:9d:77:dd:0c:f7:05:
         eb:ad:b7:50:a6:57:e8:67:b0:90:09:2e:c2:e6:4c:ea:ff:ed:
         55:13:be:df:47:13:77:0e:2d:cb:49:7a:c9:a9:0e:0b:07:ca:
         2c:c6:c4:b1:1f:37:08:6e:9f:9e:f8:48:ab:6f:79:a3:2f:8a:
         32:b4:a8:2d:9f:e4:68:0f:7b:5d:0e:3b:cb:d4:97:64:ed:87:
         d2:a0:dc:dc:e5:53:87:07:37:4d:f0:48:8b:e4:cd:75:a2:e5:
         67:86:11:53:2f:33:3d:2d:ca:67:e1:af:51:fb:26:51:2b:de:
         54:db:8f:63:aa:ca:97:be:52:6d:69:ae:4f:05:37:6c:47:db:
         cb:fe:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:34:55 2024 by rpki-client on console-fra.rpki-client.org