Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          l3LWp4zDIR7Sn9f99ohjialDD8eQUjb+9Zko6d5hYKE=
Subject key identifier:   10:9C:7D:E4:00:D6:5E:D9:0A:5E:A4:1D:30:1E:80:DE:69:7B:0D:56
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       0193542C7CE8DD6387A949E72B753CA993F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 14:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:21 +0000
Files and hashes:         1: 0_dv6_hKNqZ-4nTsvvkqnn4eqkg.roa (hash: FmNRQIGEjlH2YkVaVaK37VyRMbjXxoBjD2UyFB5IzJs=)
                          2: 5Qc6C6XAUxeWDomixUSnkRG8m-A.roa (hash: PaHxvnvCv2103ZVw8avQreXVKUJe2rYs5jEFfb674EU=)
                          3: 99oVUw4qBHCoVD1Y64NqQbkrYEQ.roa (hash: ukusrWOlIceexNZf1bi3hZIoFJNvt4ChkRTpLtAJphw=)
                          4: AfiwHuz1_fE3uWHyqmYCo7emZ3I.roa (hash: N0wU3ONbWhNXpsxuJEOndCoXX/06wSPyuJ2YS0JuIVs=)
                          5: BPIxqhLCrJCG_lGKgKi50yKMVvs.roa (hash: qhK1yocou2kRuKfUswGjugkgurhdRzuvAoLSOV7Kr3k=)
                          6: Dvd9_zQ47pRujPwYBGMv4Yr7JzU.roa (hash: AqoAvieIEi7c/5yfD5qpteCjKnHXzeq6zRwAbUOslhk=)
                          7: GChUTI2A2-sfYZUGet6Hj3Z3F5k.roa (hash: De+WaQ5MYPoR964wfzemC42HT2cuZu/ybnADNHxKZWY=)
                          8: KBf8j9UMFoZXwT3u3uJkzZl5f_M.roa (hash: K4PA6YlD8WQXWWv/0hLPhN8n/YB6Ao189dtLPIDoR0g=)
                          9: P6wovKJ4HsIFeyW9yX4-rJo9t24.roa (hash: vbWytlAXub0qbj8J0dOT08uTe/PxZEK+8YMLhE0S0vo=)
                          10: SaBDgGPdSywOc1OTZ8SjW4aaqOk.roa (hash: QpRbqrmljZEoRZAxAcREU4Mj06dqTes67UZmic2uLIs=)
                          11: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: BDafWPDG7bKho/nnwUkqH/JoNXJ1Sa2c9BTo3Xg1LUM=)
                          12: aHw4739QneDJicfHm8Yc1Rl4TvQ.roa (hash: BsLCOfhX+hvi7DBkxd42/1OkNtDnKQzEOvGL2JzJUAM=)
                          13: e1PYF8UI-q6Wd15IXSgSUgOOgM0.roa (hash: uR8XcEj/6dGZ1UeHd84IiofMQFMaoTXhieU+WbbxBEs=)
                          14: eP5EXrmsPf2u3XppyC1gJ_4iUqw.roa (hash: XirZL7369pcfsx3BhOb6HQSq8ymcMEWJRpAjO/xHljo=)
                          15: fHwCt-TlVf83K-kCRpA3dmWLD34.roa (hash: T2mNm5oydcBb0v82fzeOb+58gLjHLeCZZ6gNDvgoWGE=)
                          16: q36EbkkqDy_91lS4zoRVoYUp4ZE.roa (hash: E+2D/rGXtloh6mMT23bkCDG5ZgewSn6H0wy3TL2gfp0=)
                          17: s53IUwL0OEzcYN19aA0UUregMcY.roa (hash: oGlK43xLbGliRac5fedl0x3SRzLK1wu8hJei6Z9MNA8=)
                          18: upJqSAoRM0K-eK9r3JzxY9AktXY.roa (hash: g/8zTi4gPfOGWwRYDAWSEGMQsz2ZuBI9cTPM/xQcfx4=)
                          19: zsetB9lXxTPEgEwWWpCwjj12YNg.roa (hash: Krmj1SJ+iuECQDViIisdxmCqnMEZwLnRoTzdwbkzTC0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:7c:e8:dd:63:87:a9:49:e7:2b:75:3c:a9:93:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Nov 22 14:00:21 2024 GMT
            Not After : Nov 23 14:00:21 2024 GMT
        Subject: CN=109c7de400d65ed90a5ea41d301e80de697b0d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:ef:df:eb:f4:3c:d5:cb:a6:3a:46:95:0a:
                    38:a5:b7:99:00:76:c7:b8:60:6a:48:52:b2:0e:ca:
                    42:96:67:b3:80:91:96:d5:e1:95:0b:d7:11:10:d4:
                    27:0b:49:66:04:49:63:ab:77:82:11:c1:10:c1:3c:
                    e0:17:22:6b:ac:1c:17:70:7a:a6:d9:56:99:b4:71:
                    ac:98:2d:87:3a:7a:46:a4:d4:cb:1b:9d:93:02:da:
                    13:28:46:f5:3f:54:36:33:1f:95:21:72:06:73:f6:
                    3e:88:3e:38:29:6d:b0:33:ae:db:08:90:71:53:86:
                    75:f0:90:fc:3d:b4:65:0e:23:53:be:99:b0:0e:c9:
                    2e:d6:c7:fb:2e:35:f9:b4:f1:5d:db:4d:69:47:3d:
                    f4:c3:a1:0d:10:5a:6f:b8:1b:8f:fb:33:52:df:98:
                    f8:02:73:27:8b:13:fb:6f:dc:1c:53:2e:1d:1d:36:
                    ca:15:64:8e:e7:eb:e0:04:f6:06:a5:25:58:3e:94:
                    0d:aa:45:0f:29:15:52:c0:57:95:e3:d5:6e:e3:13:
                    98:f7:46:78:5f:9e:5b:96:59:c2:9c:08:3a:13:1a:
                    de:f9:84:84:3d:fd:97:9f:e5:9e:84:8f:a6:97:1d:
                    ed:3c:89:c7:d1:8f:6d:0f:93:b2:51:b3:a6:99:97:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9C:7D:E4:00:D6:5E:D9:0A:5E:A4:1D:30:1E:80:DE:69:7B:0D:56
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b7:c1:8d:d4:58:3e:98:52:f5:0b:9f:9c:e3:22:63:8e:53:
         2d:d4:4e:0c:44:25:28:4c:7f:9c:91:b9:69:df:a1:82:69:89:
         e9:f5:8e:63:fa:a2:f7:77:1f:d2:f2:16:ee:ca:45:9b:09:29:
         86:25:91:d1:4f:cf:c0:b9:d2:bf:b1:33:c9:4d:26:1c:dd:fb:
         70:34:8d:85:6f:33:38:f0:b1:72:1d:64:73:36:9e:b6:1e:b0:
         bf:07:7b:e6:0b:34:48:8e:98:83:ef:20:93:af:e6:7e:eb:44:
         14:bd:ba:04:d0:cc:06:72:5f:26:1f:a7:41:d1:3c:f2:f9:31:
         7d:74:f6:94:c6:d7:f4:2f:cd:e1:0b:aa:fd:3a:1d:16:de:68:
         13:43:d6:9b:a4:62:55:7c:3a:df:fa:f0:b9:42:14:57:73:71:
         88:98:81:60:1c:7f:c3:ee:2e:3a:90:0f:61:d3:00:4d:10:5b:
         2e:73:0c:dc:31:4d:aa:29:3f:b6:36:50:16:b8:7d:ab:98:12:
         4f:64:54:8e:ec:28:22:33:34:26:87:17:ae:11:97:a7:1b:aa:
         a1:2c:10:7d:d1:9a:ac:db:75:e5:ba:75:8a:45:39:c0:47:e0:
         db:22:e5:86:e7:27:0f:55:15:bc:2f:e8:64:16:f1:55:21:29:
         a5:32:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org