Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File:                     koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier:          0yZxBNQItkIFR9bDeNfQcWcVKFBvtwV/jhc178vsqt8=
Subject key identifier:   EE:70:7C:80:C6:A1:2F:81:59:18:82:40:41:74:F0:50:6D:2E:98:F9
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer:       /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial:       019352ADB685370DBE089072D1768D3AC72D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number:          079D
Signing time:             Fri 22 Nov 2024 07:02:16 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:16 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:16 +0000
Files and hashes:         1: 0diCL6YnGvC8QcytYu8N8Ny3qJM.roa (hash: sXVu/6kKr/7x0fFblSoyHceUQ8zM1i7ggAWV0CWrfm4=)
                          2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: 8Q3XRAe9LkGm13V+uaJSQHY+UmZtgJQ2yn0KLI70JLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:b6:85:37:0d:be:08:90:72:d1:76:8d:3a:c7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
        Validity
            Not Before: Nov 22 07:02:16 2024 GMT
            Not After : Nov 23 07:02:16 2024 GMT
        Subject: CN=ee707c80c6a12f81591882404174f0506d2e98f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:96:e3:cd:57:db:2c:69:9c:0a:19:19:33:
                    83:ea:15:60:7e:21:38:50:35:93:3a:82:4e:16:08:
                    2e:c3:85:96:9a:62:9f:4a:79:1f:69:de:f2:69:06:
                    3e:98:ec:90:cc:2b:e2:83:7d:d8:bd:ba:81:a7:4d:
                    20:ad:22:03:97:3b:69:f7:b0:6f:cc:3d:c2:24:ba:
                    38:40:81:7e:50:c6:76:13:2f:92:29:b6:a6:5a:3a:
                    94:8a:db:96:d8:b9:5f:90:77:4d:43:f2:de:6a:d5:
                    bf:dd:66:56:33:e9:85:fd:73:0c:7d:26:ce:62:54:
                    a5:03:7a:53:de:fe:91:0c:b3:2f:1e:dd:5d:54:a0:
                    9d:95:c0:59:a5:d2:4f:26:98:f0:40:27:06:90:3e:
                    10:7b:27:0e:8c:e2:9d:30:3c:33:b0:9c:4b:25:cb:
                    d3:14:46:c1:55:a8:78:d6:74:44:90:be:88:3c:59:
                    51:8b:60:0a:3d:aa:96:e5:b1:50:a5:06:9a:ad:3d:
                    f7:96:bc:bf:11:c2:c4:6b:dd:22:c1:15:7e:73:95:
                    e4:c0:26:c7:d6:df:9c:3b:b6:9c:3e:52:95:1e:9e:
                    de:04:ad:24:62:d3:c2:05:2b:20:b2:6d:4e:1c:23:
                    80:17:5b:b2:3e:63:d7:3c:b2:47:c5:0c:70:ca:b2:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:70:7C:80:C6:A1:2F:81:59:18:82:40:41:74:F0:50:6D:2E:98:F9
            X509v3 Authority Key Identifier:
                keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:6e:8d:86:9e:9b:cb:39:0a:34:c5:8c:c7:75:ff:ca:67:
         29:1f:54:99:10:22:a3:ee:ee:c7:3a:eb:69:eb:7a:63:6a:44:
         d3:70:3f:56:b0:f2:88:10:bb:02:63:a7:31:29:2e:44:aa:e2:
         63:78:76:81:2c:98:13:0a:cc:1c:a4:31:bf:95:99:38:d3:8e:
         56:a9:ea:61:54:ae:a0:da:c0:63:81:98:9e:7a:94:c2:16:55:
         b8:9a:7c:ae:eb:c6:f3:4e:32:1f:91:28:cd:99:e7:45:dc:44:
         f1:b6:e6:fb:50:dc:59:9b:c0:25:16:80:7c:d2:b5:79:45:04:
         4f:8d:f0:ca:bf:bf:b2:a9:d0:be:10:76:fd:a4:6e:a8:ee:12:
         f6:74:f4:a4:4b:36:6f:1f:9d:0c:7c:ef:79:49:4b:e6:8b:80:
         07:d7:9b:38:5c:1a:ca:a7:4b:2d:13:87:55:45:70:0d:99:38:
         0f:9e:60:c0:09:3d:01:98:14:9a:cf:eb:4c:70:ab:62:59:3d:
         18:78:79:4c:7d:25:48:d5:73:3d:55:d4:a4:33:34:0d:06:44:
         ed:79:5c:67:77:4a:42:1b:e6:96:6a:b9:f4:05:e8:1f:4f:dd:
         a3:e5:51:0e:09:7a:8f:69:0a:c6:09:49:34:ef:08:e1:1f:99:
         4a:1a:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:37:51 2024 by rpki-client on console-ams.rpki-client.org