Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          W62Ih38CDctJiU0NXPpxN3ztYDgBdDUqAsurW4JxXZU=
Subject key identifier:   2E:E8:98:44:7E:D9:BC:CB:5C:FD:42:06:1B:6E:09:20:09:D7:8D:73
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       019356BFB163E25661377EB1E2C534AA123C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          13FE
Signing time:             Sat 23 Nov 2024 02:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:23 +0000
Files and hashes:         1: 5NSDRx9yGLfRJ9dAscn5_ziCzkg.roa (hash: flBr0iaNu925XmcI4CP/sMdsbFhnKIL1Gdf9wRkylWI=)
                          2: 6adnApTkS6VzqCwvSR2Lh4fK5Ls.roa (hash: HYRI34lLbGwoMdHvr3yqDKEFXqaMChbrQxPNAIkruXI=)
                          3: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: kMckc73V7r6MGheFNF5+4tDub17spQHdyzkoRXHCVzA=)
                          4: DoSbrY885VrWDKDaFQdXqlguuqc.roa (hash: gKa+PgZRuGT5aGP2dXR++4RMPXjuDa+hjFs4sFt1H7s=)
                          5: hsrQr_d_tk0oLIpPAPMuFwnYU-k.roa (hash: BIt3XBxnsHk5DTr3aBBWB7t6v7a/WhSZ0Tes6W/Wl8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:b1:63:e2:56:61:37:7e:b1:e2:c5:34:aa:12:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Nov 23 02:00:23 2024 GMT
            Not After : Nov 24 02:00:23 2024 GMT
        Subject: CN=2ee898447ed9bccb5cfd42061b6e092009d78d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:8b:ad:e7:c3:ee:0c:19:7b:e3:32:d5:1e:
                    54:ad:c7:ea:6d:80:ad:7e:46:c2:d0:e2:16:0c:6d:
                    01:1a:be:3b:41:4b:3b:db:4d:51:91:2a:d2:e9:59:
                    b0:c2:e5:45:4b:37:7e:53:b3:e6:4f:76:68:b0:4a:
                    c3:e4:0f:88:7d:cf:56:4f:73:f8:b2:95:8d:03:09:
                    41:94:33:ae:43:88:ac:3e:71:73:c5:c5:d4:f7:95:
                    cc:64:5f:74:2f:a2:71:2a:12:c4:cc:fb:62:b8:e8:
                    c2:d2:96:9e:86:ef:92:85:28:12:fc:4c:b7:d4:2f:
                    cd:77:c0:e0:ec:a9:8d:9c:c7:67:c3:cb:36:fe:a5:
                    75:7c:7f:73:16:99:a0:44:8a:50:b1:7d:2a:c4:78:
                    0d:66:df:f3:4f:50:f2:cd:f0:7b:c7:b9:4f:54:2b:
                    34:d7:a7:45:6e:ab:18:0e:91:29:77:f0:f1:9f:e1:
                    b5:02:03:2c:36:5a:0d:27:c5:f8:92:e7:a9:6b:66:
                    4b:f3:5b:51:94:38:e0:d3:0f:32:9b:d2:01:6f:0e:
                    ca:f8:1a:04:fb:7b:be:3f:dd:f1:f4:fc:7f:4a:71:
                    49:2e:6f:9e:5a:f4:7d:01:0e:18:f4:4a:8d:c4:9e:
                    db:72:8a:e2:e4:61:24:7e:d3:a5:38:a7:7b:78:b5:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:98:44:7E:D9:BC:CB:5C:FD:42:06:1B:6E:09:20:09:D7:8D:73
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:72:3e:71:1a:57:08:54:5a:88:85:d1:b7:38:b4:5e:c4:
         bc:9c:0b:d7:d4:8c:0e:c1:1d:e6:9c:fd:d8:e3:c1:3b:2e:78:
         65:d6:41:71:b1:9b:b9:eb:0a:9b:37:fe:35:a0:91:26:ce:6e:
         70:e1:4e:84:6d:d5:28:fc:2f:26:bf:5f:19:72:04:84:bd:08:
         a4:84:3f:b3:d9:18:bb:97:ff:04:5c:aa:99:06:cf:bc:d2:29:
         9b:00:38:68:aa:b1:49:59:09:a7:18:84:0a:b7:9d:5c:35:c7:
         9a:92:df:da:b7:ec:2e:b3:7a:79:99:7f:84:f4:eb:68:dd:13:
         c4:c3:36:32:6b:5f:df:d3:7b:52:dc:fa:f7:f0:06:8f:d3:24:
         f1:98:e7:64:d8:33:fc:fd:29:de:56:87:e4:ed:50:f4:43:9f:
         0e:5f:e5:47:70:45:d4:74:20:69:8d:93:73:29:6f:ab:56:c8:
         ca:b2:2e:9b:9a:cd:1f:15:ef:1e:ba:9d:b0:25:ec:48:10:da:
         d8:42:98:a8:27:d9:87:b2:69:11:30:ff:85:f9:39:86:32:49:
         fb:2c:30:d1:7b:1a:39:3a:19:dc:b4:23:dd:a5:90:9a:29:34:
         9c:63:8d:d3:f2:79:bd:71:70:77:a2:f3:48:48:55:19:a2:23:
         60:98:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:11 2024 by rpki-client on console-fra.rpki-client.org