Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          iokGruCv833xEjpPOg7lEZSAnB3DPJ147/jPQNlUaWw=
Subject key identifier:   3C:3C:BF:73:67:FB:DE:D7:16:13:D6:30:7B:85:4A:5F:FA:19:32:A9
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       019354D14C0BB9A3A7AE6EEE18C75B1E8A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          01A2
Signing time:             Fri 22 Nov 2024 17:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:22 +0000
Files and hashes:         1: 7JdiqCpwMM4RS0slvPhvuSgQ0Zk.roa (hash: ZVqFQJMkDhXrES62OLJNsHEP1s89tgGhmHoViu58+d4=)
                          2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: 7AEW5upM5oOqnq59k6lMAUihyDKdTHKCj/xec++bxMg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:4c:0b:b9:a3:a7:ae:6e:ee:18:c7:5b:1e:8a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Nov 22 17:00:22 2024 GMT
            Not After : Nov 23 17:00:22 2024 GMT
        Subject: CN=3c3cbf7367fbded71613d6307b854a5ffa1932a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d9:04:7d:13:94:4f:86:6f:eb:8b:28:9a:ac:
                    f4:8c:80:ef:e8:4b:b6:11:72:ac:30:ee:41:34:de:
                    df:6d:08:31:bc:6a:ba:c9:f6:6d:09:80:c3:eb:c5:
                    ac:d1:7e:8d:85:34:df:ff:89:c9:0e:2e:15:81:1a:
                    9a:aa:4e:63:a3:03:8e:70:bd:b6:d8:f3:cb:45:43:
                    36:33:9d:46:76:a8:e4:d6:96:6f:a2:08:d8:6f:10:
                    ec:34:4f:24:4d:ff:ea:94:49:c6:bc:d7:d1:83:0a:
                    58:44:63:ba:97:ae:77:92:00:2b:93:97:d0:b1:e8:
                    db:ef:9b:31:7f:be:2b:42:d0:26:c5:54:44:e1:d1:
                    ef:1b:5b:a1:68:e5:34:d6:53:fe:bc:c2:95:8d:63:
                    db:29:c1:36:2d:ed:2c:0c:c7:82:c9:51:78:05:88:
                    ca:ca:b8:60:f4:60:41:dc:2b:f7:27:12:62:b4:af:
                    07:87:fd:2d:44:e2:b3:03:3d:0a:06:33:bf:a9:c7:
                    4d:af:f6:cc:1e:37:c7:0f:66:d0:b6:0c:82:34:b3:
                    ba:4c:7c:73:51:b4:a1:9d:3c:3a:b0:a2:15:f1:62:
                    40:8a:3d:b3:e3:ed:58:7e:20:05:70:78:9c:7d:c2:
                    b1:99:7f:6a:ed:a1:17:f4:e9:a8:ec:f5:b2:02:1d:
                    b3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3C:BF:73:67:FB:DE:D7:16:13:D6:30:7B:85:4A:5F:FA:19:32:A9
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8e:c4:52:38:82:af:06:54:a2:00:92:d7:28:26:eb:65:41:
         d1:7e:23:ed:8d:a2:6d:15:4c:ce:af:78:ef:d3:ef:78:17:9b:
         d9:96:b5:c9:d6:cc:89:86:6e:81:f0:88:ea:d6:8c:86:fb:f1:
         03:17:e0:9e:2f:fb:44:77:95:f8:84:e6:bf:da:c3:b7:d6:ac:
         f3:94:57:87:1e:5e:2a:ff:33:c2:75:a7:6b:d2:9f:f0:6f:43:
         34:24:08:d5:0d:dc:b9:c6:63:fd:33:93:84:5a:63:82:e2:22:
         1e:74:68:f4:ce:bf:93:4e:07:f5:93:1c:57:d7:85:4e:1d:ec:
         fd:13:ed:7a:c9:bd:65:fd:42:0d:bb:ee:9f:20:13:ac:5b:eb:
         19:9d:b1:68:a0:e7:76:58:d1:bc:e1:6a:90:22:02:a3:7b:85:
         21:e2:1d:28:75:70:c8:c9:0d:20:fc:c5:63:5c:e2:b1:62:a9:
         f3:ee:2e:f8:29:9a:b4:bc:27:a6:f8:a1:6b:7e:2c:53:7b:72:
         61:60:1f:4e:eb:31:79:2f:7d:15:00:79:ed:9b:d8:36:79:a8:
         3c:15:bd:62:94:0d:a2:f3:01:25:68:20:0a:7e:43:f9:e1:f1:
         9b:d3:89:31:4c:b0:a6:ef:d9:ce:83:3e:e5:96:67:06:e0:75:
         93:30:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:40 2024 by rpki-client on console-ams.rpki-client.org