Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File:                     E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier:          w3GIoCYKpd1Z0VeJxVCFATVXp3kHhbRp/wq2M9L0P6c=
Subject key identifier:   AF:15:40:31:66:DA:ED:5F:08:85:72:6C:8A:E7:56:59:40:BC:23:45
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       019352AD44BF9DBB46BF04F4DFA85A47117D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 07:01:47 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:47 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:47 +0000
Files and hashes:         1: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: ZI2fib32V+tMTJs/H4mszPMqDJQFPovNRxZ1sI+NTOY=)
                          2: V_ojMuo48vWmsgYROIQ9e8zOEZg.roa (hash: 1p2moC7jaynmoAKYYSQwGGo/N8kN4DxSCkBYZHFM6rM=)
                          3: _gbgVcIsHmh25TNQbRO3ROY8GWM.roa (hash: DivawMRPt81D0x8oT4o/9NjK17dDIBLxtAP3BQSbOEI=)
                          4: dRX-loL7VbWKqMzz33Vq7mMaHyM.roa (hash: oa+EwmwFnuenQ44EnYx9FV+4s2v3CVS5qBe4TdcxOTk=)
                          5: nJmt27KvQvfu4Gydty5cWIWQBWw.roa (hash: T98OmS/DWnSD+StiFBrEjq77ZI+vvd316m3wGsUj2RY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:44:bf:9d:bb:46:bf:04:f4:df:a8:5a:47:11:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Nov 22 07:01:47 2024 GMT
            Not After : Nov 23 07:01:47 2024 GMT
        Subject: CN=af15403166daed5f0885726c8ae7565940bc2345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:6e:ad:ca:43:a7:40:af:fc:f1:1c:1f:8c:
                    38:e1:fa:ee:41:8d:46:2f:f8:7a:23:aa:da:2e:cd:
                    5f:ad:c6:9d:ee:d0:8a:e6:f4:3d:30:c5:31:58:4c:
                    3b:51:e3:57:72:de:70:d5:b3:fe:5b:ef:d4:10:d5:
                    97:97:32:f8:bc:08:bc:f9:aa:3c:f1:0a:7d:71:1d:
                    89:a2:24:49:79:19:33:cd:e6:96:89:8d:19:0c:69:
                    5a:08:dd:71:ae:fc:35:49:25:90:01:42:bd:d8:28:
                    90:e3:7f:c2:b5:e1:72:e9:d6:6c:1d:55:a8:d3:43:
                    64:83:70:a1:8e:f8:15:31:2b:dd:71:94:7b:c7:47:
                    2a:32:cc:4d:22:29:d9:93:38:e3:ce:93:fd:c4:6d:
                    be:bc:fa:10:cc:93:ac:95:18:34:e5:a6:f0:b5:a7:
                    1f:b2:8e:d8:21:4f:2c:40:46:b6:b7:56:99:bb:4b:
                    e2:dd:79:7e:17:7c:7c:f2:57:a2:e9:97:9f:87:5c:
                    9d:b5:f0:03:a3:ba:37:66:bc:7f:0b:48:d5:e4:fc:
                    8f:7e:bf:df:0e:8e:c0:2e:0c:77:ab:6c:97:d7:fd:
                    80:68:83:8e:ff:24:5a:77:e4:22:90:f2:e3:1d:12:
                    36:28:9f:6a:26:f7:dc:9c:91:e0:5d:b4:58:23:88:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:15:40:31:66:DA:ED:5F:08:85:72:6C:8A:E7:56:59:40:BC:23:45
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:18:23:75:4b:cc:6e:08:64:09:4e:c6:48:08:0e:cb:af:cb:
         09:9f:60:43:30:26:ee:7a:68:af:56:66:26:d8:65:58:6f:4b:
         4e:d1:6d:41:02:57:8f:80:3a:84:0e:05:fa:d0:c8:90:83:9b:
         6a:f8:a5:c6:43:a0:2f:51:54:49:33:8b:6a:9c:8d:17:8d:c8:
         14:c0:a9:81:ea:c2:b2:06:c9:4b:a0:31:c6:12:13:07:87:2f:
         dd:3f:04:84:f4:06:90:83:cb:7f:24:55:ff:32:ac:5f:c5:60:
         7f:1a:33:af:f9:bf:e3:e0:75:4c:63:ff:68:bc:dc:51:10:8f:
         36:9e:c2:97:31:19:5e:cb:29:b8:82:dc:cd:19:55:13:c8:76:
         17:af:2b:05:87:f5:19:1d:3b:1b:09:89:12:a3:ee:4a:78:fa:
         2e:5c:4d:13:b7:7d:ba:fd:d6:93:8e:b8:de:4a:fc:6d:a2:bc:
         b7:57:48:55:12:73:3e:e9:b2:bb:2b:5f:c4:50:ac:1e:97:ab:
         55:fb:69:b7:0d:77:bc:af:fc:6d:b6:db:28:e9:98:70:02:df:
         81:c4:3d:41:30:a3:a2:6f:7b:ef:d7:da:ab:b3:ba:2d:e4:0d:
         07:09:c4:e9:54:28:f9:d4:1d:7b:a7:a1:4b:ea:96:07:92:27:
         55:83:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:08:14 2024 by rpki-client on console-ams.rpki-client.org