Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File:                     IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier:          8UMTM7pW6vepk1Tn/g2G2iPWpHFeG9QQRT+HAH/mmFM=
Subject key identifier:   35:AD:1F:05:D4:27:71:41:75:50:85:AA:43:02:AB:2F:93:C8:B2:8F
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer:       /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial:       019352E2D5F221BF9692E83711AB9CEEC214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number:          1361
Signing time:             Fri 22 Nov 2024 08:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:17 +0000
Files and hashes:         1: 9csm7MBjdoSIKc-xprL6er_FG4g.roa (hash: WNLIEpJCdBPbD0EozK+o6Ye9QchGWm3E053SjolVsrA=)
                          2: DWzo0J81573ZV546bU7C52izDIE.roa (hash: F1v73cvfkDG4vj21v1GTR8XKz1ivgnNwzahkICJomRE=)
                          3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: Zw5Y5zZhnEZCImorz1TjcbkdDumYe3/ZqWfmNXMXiS4=)
                          4: Tpad7-k1vGrCh2L75yreZ6IEdHM.roa (hash: JUlWPLKFCMtqQdg/6e5N8KzEhyJOaWfDZ5aVVGKKAkE=)
                          5: U_5zU548U26mS88-CJEcmKMDH2w.roa (hash: FhA2pvaWQsUxY9S+Yg0LINFnxvOt0M5vKGAndpCuHsg=)
                          6: Vi-ruca-YLe8C9v2dE05efb8JaQ.roa (hash: eZJjhtYEiavq2bBWL7ZHWazML9xOm+6++vNUSu3bjkU=)
                          7: b68MMacZMCk8BGd_dtEfXGC1gjQ.roa (hash: +QdUGp66zSsRlRL+8vu3Z5FQrvxHfNwe3wX+LONTE6U=)
                          8: cptHiSECnmV4CUyPWPu3-nLWXxE.roa (hash: 1mgTdr/hxZE+b6K0tPnzLOqv2Y6deoJuGI83kin3GwI=)
                          9: pKlLqWb2Ec1GyNRt9KcLMlb3Rag.roa (hash: wYG3XUL9wT/eynISQ1e9jVe9GC6n0zL3AkldjWzXobE=)
                          10: rx7DaT8Yqq-7TYU_ef5WbQshLBo.roa (hash: Q2hp7oLB8LdHoFsDSVTiHYtDADtfHS8xDcduIszyOa4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:d5:f2:21:bf:96:92:e8:37:11:ab:9c:ee:c2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
        Validity
            Not Before: Nov 22 08:00:17 2024 GMT
            Not After : Nov 23 08:00:17 2024 GMT
        Subject: CN=35ad1f05d4277141755085aa4302ab2f93c8b28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:58:68:c5:4f:2d:ea:00:6f:bc:5d:f2:76:
                    48:cc:c9:7b:2d:00:5e:bb:c0:c2:45:09:13:94:19:
                    37:8a:19:57:ff:9e:4a:c7:8e:e4:8f:d1:16:da:fe:
                    d3:80:07:29:bb:12:ab:cd:5f:e6:a0:a5:54:6a:25:
                    9e:26:ad:93:4d:8d:64:18:81:87:62:f1:f4:46:37:
                    6c:73:26:ab:2b:c8:bc:15:0e:c7:e1:66:7e:78:3f:
                    78:25:6d:7d:ea:cf:4f:85:83:bf:ca:c2:fc:5d:e6:
                    54:45:c5:a0:99:d2:c5:65:40:30:19:32:1f:53:46:
                    82:39:db:7d:41:47:18:78:4e:33:af:08:4a:d4:bc:
                    a1:a4:08:b7:ee:12:24:f0:6a:da:96:1d:a3:c1:ed:
                    0f:b4:55:b0:fe:9b:ad:50:9b:ea:5f:19:c2:65:b6:
                    c4:d8:47:5f:99:67:71:e2:1d:25:85:e6:c7:be:7f:
                    d8:c9:a5:73:23:0e:eb:05:2a:b1:66:e6:bc:d1:55:
                    87:60:e9:4d:f8:d0:81:d8:a5:9a:22:7c:5f:78:f5:
                    20:93:12:4d:29:3a:7c:7f:04:b9:a9:22:20:2e:bd:
                    e2:b6:3d:3a:01:96:44:d4:13:fa:41:5c:65:9c:90:
                    68:db:4f:61:8d:d3:1f:1d:8a:2b:88:9e:1c:17:8f:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AD:1F:05:D4:27:71:41:75:50:85:AA:43:02:AB:2F:93:C8:B2:8F
            X509v3 Authority Key Identifier:
                keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:9f:2a:e4:98:fc:20:78:b3:d7:90:87:cd:15:55:5b:10:
         a8:38:bb:9b:5b:cd:03:05:12:12:de:c1:e9:01:fd:46:88:58:
         ba:11:7e:81:e1:f2:46:1e:64:d0:f3:ce:0d:84:ac:f1:15:10:
         9b:07:a1:e7:1f:a1:67:a7:ed:cf:df:1c:aa:6a:70:28:f3:c0:
         e3:67:25:3c:a8:8e:63:cf:43:ab:92:55:01:40:5d:2c:f7:51:
         9c:7b:18:b4:f9:a7:35:e3:09:b3:db:c1:c6:fc:d3:84:98:13:
         0f:72:35:f1:ca:a6:7e:d7:54:d8:0a:f2:a2:9d:f3:07:02:ca:
         64:76:48:25:54:fc:f9:42:f4:e1:1a:bc:a1:93:ab:f7:92:60:
         80:ad:23:17:da:d3:e9:eb:54:93:a0:a1:83:09:7d:5a:8e:d8:
         db:fb:14:d4:43:c3:66:22:0f:f0:41:36:56:9c:72:bc:c9:cb:
         d9:9c:97:de:c0:e4:03:ac:bc:f7:f8:fa:23:c5:2c:a0:ee:97:
         d0:cc:04:79:5f:14:fa:1d:87:af:88:8d:43:9b:cf:34:ad:59:
         f9:ad:ad:7f:61:68:71:f9:05:67:6f:9e:3f:76:5a:c1:7d:75:
         01:a9:9f:62:25:00:86:98:dd:55:10:72:c1:a6:d7:b4:ff:99:
         91:46:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:31 2024 by rpki-client on console-fra.rpki-client.org