Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft
File:                     p06ky4KkfFxzyC3klcOK86iET8k.mft (raw, json)
Hash identifier:          uZenT3KbwQ/mbe0jLHBP8K2RpKV457Wu00CWBfKlTfg=
Subject key identifier:   48:95:BD:8A:C0:86:3C:F1:14:F6:C6:6D:0B:02:D7:89:39:36:54:3F
Authority key identifier: A7:4E:A4:CB:82:A4:7C:5C:73:C8:2D:E4:95:C3:8A:F3:A8:84:4F:C9
Certificate issuer:       /CN=a74ea4cb82a47c5c73c82de495c38af3a8844fc9
Certificate serial:       0193621F94EDC21818A32D6ABB1A39D42F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p06ky4KkfFxzyC3klcOK86iET8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft
Manifest number:          0378
Signing time:             Mon 25 Nov 2024 07:00:57 +0000
Manifest this update:     Mon 25 Nov 2024 07:00:57 +0000
Manifest next update:     Tue 26 Nov 2024 07:00:57 +0000
Files and hashes:         1: H04V42D0gQnGuVO6eFpb8NpWbos.roa (hash: +O1XF6voyzTlCc5Qk7VW9Vi5FUeaPAuWMdsVknxEjgY=)
                          2: p06ky4KkfFxzyC3klcOK86iET8k.crl (hash: k+bb9tyOIYcjTk5Lf9xS33yWJ55I7oFgpho5Bgq/LXE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p06ky4KkfFxzyC3klcOK86iET8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:1f:94:ed:c2:18:18:a3:2d:6a:bb:1a:39:d4:2f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74ea4cb82a47c5c73c82de495c38af3a8844fc9
        Validity
            Not Before: Nov 25 07:00:57 2024 GMT
            Not After : Nov 26 07:00:57 2024 GMT
        Subject: CN=4895bd8ac0863cf114f6c66d0b02d7893936543f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:b0:60:1d:85:86:1b:9a:c0:dd:55:98:5d:
                    20:19:15:26:22:16:ea:10:88:99:b1:1b:a2:44:3c:
                    1c:ae:69:75:b7:5b:56:cb:c6:04:25:28:2c:f8:d2:
                    30:4f:99:8d:2e:3d:cf:32:cd:94:6f:75:a6:96:ec:
                    71:d1:6b:e6:49:4e:6d:8c:b3:ab:96:6c:92:55:c5:
                    42:22:1b:af:61:71:f3:2b:fd:f4:93:05:0d:c4:d8:
                    36:1c:e5:18:01:b6:7c:23:b0:7d:e5:1b:c0:a9:f4:
                    e4:6d:26:22:45:eb:73:76:76:d8:09:2d:f1:04:01:
                    98:e6:23:f8:92:90:29:09:ef:fe:a1:f9:1a:41:e7:
                    e8:f7:82:57:63:37:0f:f2:52:75:8e:a5:f3:c8:c0:
                    10:b6:5a:2c:e1:2f:f6:50:ee:b1:e4:7a:e7:91:82:
                    b5:05:41:d8:0a:19:a9:e4:a9:45:c2:87:a0:53:8a:
                    5b:08:c4:4d:f5:4b:ae:e9:e4:82:6c:35:3e:14:66:
                    97:df:a8:0d:00:d9:86:83:6e:84:5c:e0:fa:92:bd:
                    ba:32:48:70:05:3c:a6:2e:1e:5a:05:4b:0e:5c:a1:
                    70:d5:cb:47:ce:fc:bd:ac:d4:c6:b4:a0:32:c7:a1:
                    0d:02:dc:70:e8:4e:c4:0b:b0:ab:a2:f6:60:a8:e9:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:BD:8A:C0:86:3C:F1:14:F6:C6:6D:0B:02:D7:89:39:36:54:3F
            X509v3 Authority Key Identifier:
                keyid:A7:4E:A4:CB:82:A4:7C:5C:73:C8:2D:E4:95:C3:8A:F3:A8:84:4F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p06ky4KkfFxzyC3klcOK86iET8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:11:1c:ff:bc:2a:61:fe:fe:e7:6f:57:21:d5:1d:0a:21:
         29:12:74:6e:d1:b5:19:33:b0:40:b1:1d:fa:92:d0:0b:ce:ea:
         10:b9:90:53:ca:35:3f:20:04:54:8a:83:e9:9b:12:12:de:98:
         74:d4:47:f9:7e:94:2e:6b:41:54:d9:e7:08:b1:94:36:25:53:
         bc:d0:de:e8:41:95:db:e3:8b:c5:f0:3b:a0:da:9e:98:40:2f:
         f7:a8:92:ec:e2:3d:65:cb:94:e0:45:39:08:09:a2:68:70:cd:
         74:c5:33:a1:2f:87:ea:b6:83:54:98:59:2b:7c:26:f3:a4:a0:
         24:ed:2e:a6:e4:d5:0e:eb:68:6c:92:4c:e3:47:ff:e3:8d:bf:
         a5:29:89:4b:1f:3b:79:a8:9c:e5:8d:bd:0f:8c:ee:b2:b1:14:
         b2:1a:0c:6e:06:cb:b1:f3:b5:24:06:e9:04:e7:0e:5d:97:22:
         a1:22:8e:c2:83:d4:a5:8b:28:97:42:cb:4d:f8:82:76:8f:d2:
         76:37:76:51:7f:15:4a:d3:6d:74:e1:34:e3:3f:bd:3f:30:06:
         c6:78:11:63:ca:24:31:1e:37:e5:22:f1:d2:d7:d8:90:fa:d6:
         da:97:2c:cd:55:83:64:8f:39:a8:6b:6f:f5:7a:74:e7:8e:09:
         36:c9:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:12:40 2024 by rpki-client on console-ams.rpki-client.org