Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File:                     aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier:          //qXtGOYEwJ/34yh8IUrNfTiLyfSzXFxdlDP/kg/1mQ=
Subject key identifier:   E9:41:7A:E8:BB:2E:98:83:3D:DB:3B:55:AC:11:24:03:47:ED:E9:F6
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer:       /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial:       01936745A7EAB8F1F36BEAD49C7D4876D60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 07:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 07:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 07:00:38 +0000
Files and hashes:         1: Bd_b6fzTAuU26a43knucH0iD3SQ.roa (hash: 1Re1OnU6xuN92nLJNDmybHEMJ9HGZeyIg0N+Y8kggDc=)
                          2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: lJMxZRXpiW3De+vwIcT12ua3Ogxs/YNBzPZHC5+WuRI=)
                          3: mCyNSgBEcbQmKwjiKRc7QpO9Jak.roa (hash: FoBUzYK+0XU/QS7JhPXxw1rJVOG+XUEC02jPuBFD8aA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:45:a7:ea:b8:f1:f3:6b:ea:d4:9c:7d:48:76:d6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6954e90899ff25644520724cde8c211613600bef
        Validity
            Not Before: Nov 26 07:00:38 2024 GMT
            Not After : Nov 27 07:00:38 2024 GMT
        Subject: CN=e9417ae8bb2e98833ddb3b55ac11240347ede9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:ce:2d:19:ba:34:75:8c:86:6c:af:42:3b:
                    98:88:32:df:69:5f:75:c1:eb:16:79:f5:16:df:8d:
                    c7:1f:5a:cb:42:da:86:14:67:84:51:96:bc:35:13:
                    11:d0:74:36:bb:55:99:f2:2f:1e:67:b9:54:ce:f2:
                    83:23:e4:0c:75:06:4f:39:6d:b0:f2:4b:9f:c5:79:
                    cb:49:55:c9:63:18:26:bb:9a:ee:3a:4b:9e:d5:1f:
                    b4:b4:bb:cb:0f:5c:ab:b4:6b:a8:df:f5:c1:de:b5:
                    08:e9:8f:92:09:40:ea:9c:a2:f0:e7:e3:38:e8:2e:
                    e2:f0:8a:de:3c:15:b7:3b:9d:0e:8b:f2:43:ed:69:
                    b7:a5:b0:97:63:08:5c:6c:a6:d6:af:ca:39:41:b4:
                    a5:2d:a9:af:e7:03:e5:0d:06:b1:4d:61:36:68:4e:
                    25:78:8d:ee:58:87:e3:59:73:53:ce:fb:0e:ca:6a:
                    c0:3d:9c:da:81:d6:d7:54:f0:03:97:60:59:2d:6c:
                    22:ec:ef:38:1e:ba:94:d6:c8:bd:8e:c6:84:61:65:
                    72:da:f2:95:0b:ee:83:60:0a:e8:11:ba:c1:fc:f1:
                    e6:be:72:f4:ba:94:41:38:81:7c:5a:7b:4e:0b:66:
                    6e:c7:85:04:69:41:fd:08:a2:3a:b5:d4:ef:7e:8e:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:41:7A:E8:BB:2E:98:83:3D:DB:3B:55:AC:11:24:03:47:ED:E9:F6
            X509v3 Authority Key Identifier:
                keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:fd:04:aa:93:f1:74:a1:56:bb:c3:cf:7f:46:d6:88:0c:
         c8:9f:c9:3c:e6:e5:66:ff:d3:3c:f6:1a:60:39:88:ad:e0:86:
         71:23:5a:b6:c5:c2:76:81:07:23:54:c2:fa:cd:e4:e6:0b:ae:
         c5:fd:a2:76:c1:cb:2a:8d:39:86:25:68:cf:79:f6:50:e8:64:
         d4:79:a9:33:27:2e:fe:d7:4f:27:7f:41:d7:f3:ee:44:ee:b2:
         1d:81:cc:ea:1e:2f:01:df:ce:ad:4a:93:50:35:ef:64:b5:1e:
         13:d1:86:22:21:2d:97:24:36:e0:92:48:1e:3e:35:b9:f9:fa:
         0a:d0:d2:15:9a:00:c2:3c:94:c8:df:c3:f3:46:88:ab:75:ed:
         4f:a2:78:50:64:a7:c1:f1:11:fb:91:57:6f:3d:67:f6:e5:77:
         ec:36:9a:24:c4:33:c4:5d:72:25:74:98:c6:2f:f6:21:02:df:
         71:a5:5e:98:1d:f0:44:9a:a5:9a:7f:bc:ca:9d:d4:45:9f:f1:
         a7:09:38:28:5e:ed:36:d6:da:51:e0:70:f1:44:92:b1:a4:0e:
         51:47:00:02:be:4f:d2:5b:b2:01:6f:41:51:8f:75:98:aa:72:
         b4:64:29:cc:ae:76:3c:fe:3f:1d:91:16:62:c8:b9:85:f0:f0:
         9d:be:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:19:37 2024 by rpki-client on console-fra.rpki-client.org