Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File:                     IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier:          k51xRyOfHPH3oYCLb8+jxCLMo5F+HcZ6EsV+UJe0hlQ=
Subject key identifier:   DB:A4:3C:3C:9A:2A:71:EB:01:33:41:EC:25:DE:A4:E3:74:94:FC:8C
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer:       /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial:       0193670EDA0D7A95EA48D45FE95843C1A8A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number:          0ECC
Signing time:             Tue 26 Nov 2024 06:00:46 +0000
Manifest this update:     Tue 26 Nov 2024 06:00:46 +0000
Manifest next update:     Wed 27 Nov 2024 06:00:46 +0000
Files and hashes:         1: 3GjCQVWzGhZ9clnIHVfAC4ZIBOE.roa (hash: KddN6Fiv6XXI/LXB7saLFxICYbtQ5ela92BIg1jwFaE=)
                          2: 7_wG1qywB41busNPNyk58KBjTn0.roa (hash: CmAestMIVAI/htSVKCV+fMLI0A+sTiBwEXeUtUi2pSs=)
                          3: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: 3hwbtmWsyIWZOkrIGLaz2iQ3wLnNx+zieyUG/nBEI+k=)
                          4: LAhYdxfaM6Zs-HoXI1a3UbPX4xE.roa (hash: pwTodIZuuYqTvbBnaCVRMWAvMtiWCyRaBs4RZ/skCs0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:0e:da:0d:7a:95:ea:48:d4:5f:e9:58:43:c1:a8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
        Validity
            Not Before: Nov 26 06:00:46 2024 GMT
            Not After : Nov 27 06:00:46 2024 GMT
        Subject: CN=dba43c3c9a2a71eb013341ec25dea4e37494fc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:19:a3:24:51:36:23:c6:f9:be:e0:97:01:
                    9a:07:08:5a:24:4f:d5:7a:06:95:e2:cc:fc:06:53:
                    aa:5e:67:62:ee:69:2e:73:54:aa:2d:16:10:18:1c:
                    0d:66:d4:ad:2b:d8:e6:03:6b:c3:11:5a:79:6e:8e:
                    1c:22:9b:6e:fd:6f:b2:62:77:3e:35:7f:09:e5:b5:
                    07:ac:3d:11:af:12:17:0c:f0:2c:9c:5f:39:4d:c4:
                    b1:b1:50:45:a0:f4:30:88:7d:95:5b:d5:12:32:2c:
                    bb:42:3b:9c:41:76:ad:36:a5:52:63:74:7d:4c:27:
                    4f:0c:c7:51:64:d7:14:fb:a7:32:bb:c6:ca:a3:e0:
                    43:c0:05:33:15:c2:4c:98:e9:94:64:23:82:da:48:
                    6c:03:90:a0:b8:d7:1e:86:ea:c6:c1:85:fe:23:48:
                    3e:a1:d8:de:37:d3:b1:ac:86:d4:60:76:b9:df:8b:
                    4e:ec:b5:56:7c:fa:43:b8:97:87:06:d2:66:0d:33:
                    bd:d3:2e:00:16:ff:7e:39:cb:1b:b6:34:a5:af:a1:
                    42:8a:78:9a:c7:e4:0b:49:93:c7:33:5f:64:be:14:
                    31:e3:5a:40:6a:34:cc:ba:26:12:d5:79:f0:1d:4e:
                    0e:8a:f2:ad:ab:e7:22:d9:ce:28:ee:76:cc:9b:ad:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:3C:3C:9A:2A:71:EB:01:33:41:EC:25:DE:A4:E3:74:94:FC:8C
            X509v3 Authority Key Identifier:
                keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:75:8a:16:b2:38:c1:ac:74:bb:5b:7d:76:95:0e:c3:f1:21:
         fc:29:3d:89:2c:9c:7b:64:b0:ab:7c:c9:8d:14:af:d9:50:33:
         a6:17:a2:01:58:40:69:e3:d3:92:ab:cb:fa:9e:28:a8:cc:16:
         df:d6:3e:89:30:d5:5f:ff:9d:29:c1:60:78:ec:40:12:f2:a0:
         2b:17:a4:e7:59:e4:51:64:8b:b9:29:a2:0d:ef:95:e3:60:22:
         f9:7a:72:5c:e6:26:bb:0d:06:38:59:58:3b:64:d3:cc:72:cf:
         61:1e:ab:4c:fc:e7:6d:c8:4e:c0:ff:a0:0b:4d:b2:64:8b:ae:
         57:e8:58:61:aa:ee:1a:d8:8a:f2:4f:27:3b:7d:43:69:de:e1:
         4a:58:6a:ca:a8:3f:60:a0:cf:be:88:d9:ef:50:8b:ed:b2:33:
         19:ea:38:a7:53:df:82:57:5c:aa:19:a2:ee:30:70:45:e7:4d:
         af:2e:b9:b1:36:bd:84:51:9b:7d:04:e2:68:ca:0a:2e:3d:7a:
         54:c2:94:33:c7:15:24:99:2e:57:11:8a:42:1f:51:6d:26:c9:
         de:cf:72:cc:80:61:8f:cf:af:85:94:44:39:10:d4:d9:e3:61:
         75:02:26:2c:80:a7:34:37:ec:ff:da:a4:bc:0c:e0:fd:14:d7:
         ed:21:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:08:53 2024 by rpki-client on console-ams.rpki-client.org