Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File:                     Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier:          fYv5le++9ZnyiHiBEXBKyt1GMi8Sq2E/hKqnHLt3UQ0=
Subject key identifier:   4B:E2:18:FB:15:1A:B9:FA:6C:E1:45:DE:9A:7C:77:34:CE:36:88:7C
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       01935575F82DCCB741A748F67570FAF873E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number:          0794
Signing time:             Fri 22 Nov 2024 20:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:14 +0000
Files and hashes:         1: JR_VjmMBk6bgF40nWrFnSxJQ78E.roa (hash: 72g/uuYNSdYDBILJJT1LFte3eoGHaJdDYkpXMQCeZCQ=)
                          2: X5x6LQoiVJsm2942CuElvUzv26E.roa (hash: NXT43IUCIzCmvlKwmabHnV6t60O90VNmmt7Ottho9nc=)
                          3: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: qoll6KtLws9vZYHKlYcDXMXxc66c3IoDxCzk+HSiADQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:75:f8:2d:cc:b7:41:a7:48:f6:75:70:fa:f8:73:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Nov 22 20:00:14 2024 GMT
            Not After : Nov 23 20:00:14 2024 GMT
        Subject: CN=4be218fb151ab9fa6ce145de9a7c7734ce36887c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:0e:96:cb:88:40:0e:63:6b:f8:5a:df:1c:
                    a4:ea:f3:65:14:1b:d8:b4:b8:44:ac:75:ae:58:b0:
                    1c:1c:4d:15:7a:4b:58:0d:16:d8:29:a0:0b:6f:be:
                    91:e2:57:ac:2a:93:df:0a:22:fe:7e:31:7e:21:71:
                    a4:da:58:14:08:4f:57:6a:d0:09:97:2e:9b:fd:9e:
                    d2:5a:9a:f5:5d:ef:32:9e:bb:a2:cf:e1:18:e6:28:
                    0c:61:1b:9e:fa:fd:0f:48:2e:f6:8f:70:e5:66:f8:
                    61:63:f6:81:fe:a2:ca:ca:ad:e3:f4:c2:b9:c7:ba:
                    0e:68:93:1d:28:cb:c1:0b:1c:9f:4a:5b:64:e9:e9:
                    76:88:20:3f:29:d9:18:70:b4:0e:72:b3:74:22:bd:
                    5f:a9:b5:d1:6e:bc:43:70:d1:7f:b7:e8:94:2c:85:
                    ec:85:51:79:25:58:48:4f:dc:1a:18:8f:1d:32:38:
                    f2:8c:2a:8f:a2:77:10:ef:38:f6:21:7d:a1:08:83:
                    d9:79:2f:df:43:bb:03:c6:28:24:0f:ee:3f:84:9e:
                    4e:f9:b0:b2:66:cf:f3:02:5d:2f:8d:e6:12:0a:bb:
                    b4:ee:41:35:07:eb:f4:65:0c:48:14:34:cd:ac:cf:
                    4a:f4:45:ec:c4:18:6a:ad:5d:41:63:fe:d8:13:ce:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E2:18:FB:15:1A:B9:FA:6C:E1:45:DE:9A:7C:77:34:CE:36:88:7C
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:33:ad:0b:38:f2:54:7c:f7:36:4b:3b:4e:59:d5:3d:5b:b1:
         6f:62:82:7c:a4:36:76:6e:fb:e8:fc:1a:cd:cd:5d:4d:e4:0f:
         96:cb:6e:4c:21:bf:f4:de:d7:a1:95:01:c9:7f:a6:84:0c:0e:
         83:d3:b5:f5:ee:9d:42:f6:a9:ce:d5:11:bb:3a:87:95:8f:0c:
         91:07:5e:4c:82:32:d2:26:61:89:ef:64:dd:3f:5b:0c:9e:14:
         b6:fb:df:68:e9:f3:48:21:0d:00:46:ad:a9:37:7a:9b:be:97:
         db:20:bc:30:3f:47:a8:85:07:08:da:33:6c:96:bc:a4:d8:52:
         e7:c0:91:36:f6:ea:5e:7a:e8:37:8a:ec:0b:99:1b:59:54:92:
         de:f0:0b:0f:a4:b8:c3:5f:3c:ac:4c:bb:cd:19:40:61:3a:e4:
         bd:c2:cb:aa:06:ae:c7:23:b2:52:14:f3:df:36:13:ca:d2:d6:
         4c:63:09:62:22:a6:ec:3e:b6:a7:3a:70:57:a4:8a:ae:ad:56:
         a1:2a:b4:88:90:bf:b9:9b:3e:53:12:71:7f:3e:62:19:15:88:
         4d:61:8b:e8:e4:6c:b7:4d:23:94:d6:1b:6e:a1:1a:d6:1e:af:
         25:98:ff:9d:ed:6c:50:07:b1:d6:da:5a:5f:6e:d5:33:73:ac:
         bb:a8:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:57:18 2024 by rpki-client on console-ams.rpki-client.org