Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          sDXRugWA1PC/ewB7ihp6bR1AAaUe5o6XuRNWjY1Y63E=
Subject key identifier:   F0:8B:C1:59:54:FF:54:51:84:19:CB:5F:49:48:7E:BD:3A:CC:66:07
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       019356F72F089B22B2CD37F165D4E1686C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:00 +0000
Files and hashes:         1: Jn2lqNsrfbERm_6Vzks0-kD-wrw.roa (hash: 2T0yV0scCMLbDblagfFzCmeWYVFy8vBWpC3ZN+sMyFw=)
                          2: VItzM9RdUBieF0_xobY1wC2rjyg.roa (hash: I1TlU9mC0MtpSuY6WgsXyC+qUTPZuHZU/RWQdF5vDZI=)
                          3: g87p2tcRIXeBWaId0mgMpUHs9fQ.roa (hash: XNy0byiezKwkVhHCbNNKYK4p67ilAUz7wvQiiTAJMQs=)
                          4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: FK4uOPI5IhFvmWasQasyS81SYGIrcsSC4o8KoaNsmNA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:2f:08:9b:22:b2:cd:37:f1:65:d4:e1:68:6c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Nov 23 03:01:00 2024 GMT
            Not After : Nov 24 03:01:00 2024 GMT
        Subject: CN=f08bc15954ff54518419cb5f49487ebd3acc6607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:d2:75:2d:e9:5e:01:9a:b8:ad:9d:9a:77:
                    af:c1:9a:14:e7:f5:44:38:2f:aa:01:23:6d:f8:bc:
                    e8:89:c2:50:f9:76:4e:3c:49:96:80:22:3c:70:50:
                    4b:af:da:60:ed:02:38:82:99:86:83:15:72:51:2b:
                    e2:69:59:43:4d:c7:7a:38:96:87:af:11:dd:6b:ad:
                    ee:80:1f:53:bf:ae:d3:69:be:97:e6:6e:46:db:52:
                    55:99:a4:60:42:74:2b:b7:40:61:7d:46:d3:b2:e6:
                    67:72:62:6d:1a:49:e8:5d:a9:c3:d0:31:d2:65:41:
                    f1:51:f6:d3:ac:25:8a:19:d6:61:54:c6:67:65:c9:
                    0f:40:b6:06:a9:26:8c:11:b0:2a:99:14:80:79:ee:
                    af:a4:e1:3a:72:ba:b7:05:bd:c5:d4:63:69:f3:50:
                    57:b0:d6:b7:00:02:ba:56:0f:1b:b9:90:63:50:1b:
                    72:15:42:88:c7:25:30:a4:08:ec:a7:2f:48:56:0b:
                    18:c2:f9:2d:03:45:95:45:ec:e9:6d:e2:8e:ba:32:
                    58:eb:6e:d7:e5:73:5f:9e:cf:a2:32:af:d7:c5:8f:
                    96:cf:91:c3:df:e8:99:ad:d6:3f:a9:48:64:a0:bb:
                    52:ad:78:18:7b:e5:26:18:55:70:23:5f:85:e3:e5:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8B:C1:59:54:FF:54:51:84:19:CB:5F:49:48:7E:BD:3A:CC:66:07
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:36:df:5d:04:8d:a1:f5:fb:ee:15:5c:23:48:6e:47:11:9d:
         4d:86:c0:83:e8:eb:57:ce:00:7c:68:b3:b9:c6:af:3b:6c:bd:
         07:4a:be:c2:07:5b:01:d6:51:6c:b0:62:5e:12:4f:f5:d7:8c:
         35:e8:74:76:ae:4b:9a:d7:f0:15:ad:52:7b:68:2e:f8:02:91:
         6f:ae:ed:45:74:8a:10:a8:ff:df:13:b7:62:61:ea:eb:97:7d:
         c0:f8:b4:25:67:df:57:3c:50:89:a9:4c:a6:85:76:15:e4:4e:
         89:2b:30:a4:cc:84:cb:51:55:32:9d:3a:c0:4e:79:ce:14:5e:
         da:c5:6b:1a:22:a1:8d:29:a0:ee:1a:d0:d4:65:78:2d:c4:79:
         8b:6f:d7:57:fd:6a:2d:f0:d9:e2:ee:a2:f4:20:ad:44:ee:dc:
         3f:40:63:48:a6:55:10:51:8d:0d:d1:0a:3f:3e:1c:da:6b:af:
         f1:65:16:bd:d6:7d:8b:49:87:f5:8b:ed:ae:2c:ba:5d:5e:6c:
         ce:b0:46:58:ab:f3:64:08:1f:02:c1:99:c8:6d:25:fd:df:3f:
         9d:2a:20:f4:03:3e:43:3a:63:64:bb:6a:a6:4d:9a:d9:1a:16:
         4e:8c:6f:9d:51:f0:60:cf:c2:2b:e3:0b:d7:15:15:2a:18:86:
         66:74:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:36 2024 by rpki-client on console-ams.rpki-client.org