Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File:                     iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier:          WP95rQHR4racOHGOEeonuCDUic5QXWUO1d7xlSz/UKI=
Subject key identifier:   C7:DB:EA:BA:53:9C:EB:F4:3B:A9:2B:FF:F2:25:53:77:46:A5:AB:A3
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer:       /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial:       019355AD6F7AE0A2D49855763D7E5ED898D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number:          0368
Signing time:             Fri 22 Nov 2024 21:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:49 +0000
Files and hashes:         1: D-6C32qSCvE0wASc7t4LsO7rU6w.roa (hash: lc1Be0mEo59qmmX2e8pygNzhpF/xtwOVq0a+wifpowE=)
                          2: MBqW2T-MvGKz4F_kZsrevZQLr50.roa (hash: tZdpnyFjyMOJ5baZcn5m3jLr0kZHjrBxMoxZq5P9mso=)
                          3: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: fuQTcuKhKavIU6hccC25n/SYcm7DOZNTh2kS/zBfYlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6f:7a:e0:a2:d4:98:55:76:3d:7e:5e:d8:98:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
        Validity
            Not Before: Nov 22 21:00:49 2024 GMT
            Not After : Nov 23 21:00:49 2024 GMT
        Subject: CN=c7dbeaba539cebf43ba92bfff225537746a5aba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:ee:17:1f:40:47:1d:ef:c1:76:fd:d8:1b:
                    bc:0a:5c:e7:71:e7:bb:0c:80:0e:ae:99:40:0a:94:
                    9b:6c:2a:da:b7:38:64:8c:d5:2a:59:9d:ac:83:c5:
                    e0:a9:61:74:da:75:ab:f6:db:57:2a:50:5a:94:04:
                    1c:81:ca:f9:8f:47:6c:61:3c:69:ea:1b:e8:ed:68:
                    21:1e:a5:89:67:d4:9d:8b:74:24:43:bd:cb:f5:83:
                    95:c1:4e:e6:18:ec:e8:16:fa:18:8e:cb:f8:80:9c:
                    d8:92:16:fc:5a:20:37:f0:fc:b4:f9:e4:13:c0:fb:
                    73:04:66:d5:fb:be:e9:3f:3b:5f:ef:eb:d4:d6:c0:
                    79:b4:06:85:46:d8:9c:32:d3:2a:39:e7:06:4e:f7:
                    50:72:1e:2e:25:31:5e:aa:1a:3d:79:27:a6:45:ab:
                    49:3e:be:89:62:71:e6:3f:90:ce:b1:b3:22:50:22:
                    31:5c:b3:96:84:fa:25:a1:0d:94:ec:4f:40:09:ea:
                    89:bd:26:9d:0e:8a:7d:98:69:b9:43:9f:e3:db:93:
                    f4:8e:cc:59:91:43:87:3c:72:a5:23:5f:af:05:40:
                    7f:c3:93:59:05:f7:02:25:fb:14:58:9f:4d:c1:0e:
                    2b:e9:07:68:8e:1b:fd:b2:3d:bd:e2:0e:01:fb:8f:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:EA:BA:53:9C:EB:F4:3B:A9:2B:FF:F2:25:53:77:46:A5:AB:A3
            X509v3 Authority Key Identifier:
                keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:ee:6c:6e:d0:b5:47:e4:79:e1:ca:d9:04:7a:77:ac:94:
         b2:cc:9b:76:31:9d:53:28:91:c7:ae:52:2c:06:01:33:d8:b0:
         5b:b2:05:a7:d3:07:a5:b5:10:fb:73:8d:29:0f:46:54:e5:78:
         9e:6e:f6:b6:a4:0e:5a:20:a9:ca:bd:31:94:39:3a:e7:34:65:
         0b:e1:12:57:a5:62:f6:5b:00:ae:bb:7b:ac:87:84:42:4c:43:
         a7:40:9a:25:7c:1f:da:cf:f9:e4:5f:fa:9c:86:26:cc:26:b1:
         39:42:ea:fd:33:73:b3:a1:2b:e2:c5:a9:22:ff:57:4d:0e:ea:
         b2:ea:4a:04:ed:dc:15:79:46:91:1f:ae:6d:44:3d:0f:06:7a:
         ce:b6:bf:82:b0:39:f7:d7:5c:c2:0b:34:15:2a:58:c6:67:92:
         a0:69:2a:61:8d:4e:8c:31:55:88:fc:63:ad:37:fd:c7:8f:dc:
         6d:ba:3e:7f:aa:d2:fd:00:ff:3d:4d:5a:d3:bd:fe:36:6d:43:
         cd:3a:a7:ab:18:98:e6:bd:b2:42:bf:89:ee:c7:58:c2:b9:dc:
         6f:7d:e2:48:75:59:e5:dc:f7:af:cd:fe:d8:45:35:1f:b8:cb:
         71:5f:10:2c:41:dd:a6:75:bf:e9:5e:40:66:df:97:47:7a:29:
         bc:84:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:00 2024 by rpki-client on console-ams.rpki-client.org