Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
File:                     SEQEnTlhdqG16ziFSNm-PrPn1lE.mft (raw, json)
Hash identifier:          xqpS3e2WBpquHE+F9SwWU3BlfGqHC8pW0AEbq5EO2Dw=
Subject key identifier:   EE:FC:AC:EE:99:52:98:D8:22:27:E2:35:6A:38:5C:62:35:46:0C:79
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Certificate issuer:       /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial:       019369D93948CB344965E19B7E1D6E0E8E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
Manifest number:          0947
Signing time:             Tue 26 Nov 2024 19:01:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:03 +0000
Files and hashes:         1: JuyHFQYb0JfbbaPuJt8fWyuI164.roa (hash: H5nQrEI1WNfYMuAh/IWyiq2O4TnEV89jGpqA4D7HqMs=)
                          2: SEQEnTlhdqG16ziFSNm-PrPn1lE.crl (hash: hXVmDmXFfNTE0Dv9tg0h1PbjeIlgauBXpVcfz5G++jQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:39:48:cb:34:49:65:e1:9b:7e:1d:6e:0e:8e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
        Validity
            Not Before: Nov 26 19:01:03 2024 GMT
            Not After : Nov 27 19:01:03 2024 GMT
        Subject: CN=eefcacee995298d82227e2356a385c6235460c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:65:76:7e:7c:38:b1:9b:34:92:3d:ee:b9:
                    1f:01:6c:3b:ba:ec:99:70:c9:21:fd:9a:7e:4f:49:
                    79:77:8b:9d:1e:5d:dc:fc:00:36:a7:98:a3:7a:78:
                    16:08:99:9e:f1:f5:a7:8a:c7:f0:21:da:aa:f3:94:
                    6e:ff:e7:c5:a2:43:35:e5:cc:4e:4b:e5:de:8e:f7:
                    54:82:a1:7a:ab:76:64:f3:78:1b:c0:82:8e:7c:8c:
                    a2:59:6f:34:fd:4f:18:4d:0b:57:f7:da:47:c6:af:
                    a0:6e:dc:b0:9c:30:af:85:ad:32:f4:4a:9a:fb:69:
                    d0:b4:f9:7b:74:3b:28:64:ec:e3:a1:c8:91:4a:b1:
                    ae:40:92:65:76:ca:22:24:c1:e1:ee:c1:42:d4:7d:
                    3e:48:07:b3:c8:6a:d1:0a:4e:6f:a4:14:16:ac:b0:
                    14:21:9c:18:1a:6e:5d:55:73:c8:fe:43:77:da:40:
                    e1:45:8f:74:d2:10:a5:7e:08:7e:11:f5:db:41:78:
                    06:2d:1c:75:f6:9f:8d:21:14:56:4a:31:7d:2a:93:
                    49:6e:68:a3:0e:aa:b6:12:bd:4b:41:1d:db:f8:d4:
                    1d:a6:93:bf:59:d4:b6:b6:86:77:4a:51:70:8d:73:
                    93:36:70:3a:40:c4:84:5a:c4:88:9f:cb:0a:d7:d2:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FC:AC:EE:99:52:98:D8:22:27:E2:35:6A:38:5C:62:35:46:0C:79
            X509v3 Authority Key Identifier:
                keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:da:76:2d:ab:93:e4:9f:d0:2c:d2:21:38:a1:ed:00:f5:9c:
         57:d3:4d:fd:30:77:bd:6b:41:57:94:f2:a5:94:b7:6e:78:22:
         44:db:c8:01:a2:f7:6d:10:6c:11:41:f9:be:41:38:26:2a:32:
         d0:4e:7e:03:f1:a7:34:80:73:b7:2a:71:8a:bd:c9:bc:1c:92:
         8d:ce:d3:2e:d8:07:d2:07:b2:4a:ed:94:af:ec:3e:48:dc:de:
         70:f0:90:a6:a8:87:b3:7a:e2:59:3f:9a:e6:89:cb:61:7f:e8:
         fb:91:01:ba:90:63:b5:af:f3:d6:e8:6a:ae:b9:58:56:61:bd:
         1b:09:d8:b4:2f:9f:c3:4e:96:8a:f5:d5:a1:c4:18:4c:90:c4:
         b6:83:15:ca:4a:6a:f0:b4:6e:f5:ef:1c:64:12:72:fd:2a:72:
         4e:57:f0:5c:11:5a:ed:dd:aa:41:b1:34:aa:d9:53:bc:e2:9b:
         6a:e8:25:08:43:ee:b7:dd:42:66:eb:f3:a1:7b:90:8a:62:cb:
         6d:75:b0:6c:6b:15:66:68:f3:38:28:81:56:c4:04:e0:d2:b1:
         a0:1d:ff:12:8e:db:b2:58:3b:11:2d:b8:3e:9d:41:4f:55:56:
         4e:1a:0b:bf:3d:31:47:4f:14:d4:31:48:00:eb:35:b6:6a:bf:
         3a:93:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:19 2024 by rpki-client on console-ams.rpki-client.org