Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          UluDjkJYH2wo5KVfy5vySGGDoVsimeUThgOIa+gZlVY=
Subject key identifier:   BD:3D:88:71:04:7D:33:0C:4C:36:41:4E:F3:E9:70:A6:80:11:BA:77
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       01935689AA4273EDB6591B1E8C8249B60F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 01:01:22 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:22 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:22 +0000
Files and hashes:         1: 71qVwY5qrT2g6VhQlQvQ9IM9q3M.roa (hash: cgcb1YkfkdFVKUOKqRnVLMVBegRHXaJV+lpw/pOFPoI=)
                          2: Xc77nOZFw1uoO06GdpYii_vECtY.roa (hash: tT3mpiy3vobBovPeVkyWYXW9iQfSLh0nCunNyn4d2/k=)
                          3: Z4VaaAH-F3FA138AMhi6Q04plKs.roa (hash: QbNMMh9KVkUyXd8R/Oo37DpQ3jqDM9A6owodc6GElgU=)
                          4: eqNkhdgnmT_BvDt83WNw8kQ2ChQ.roa (hash: sKT4Nmiap9wrcjN20JlEE1JUjVn9bjeZiBnDweI2NAk=)
                          5: o8z2KoUjtdC4F_awGgVFXhBaFCg.roa (hash: +kxGQWW2/rmrxU0wu+zxbfwJetpoXbBMLVa8EZ9FXIU=)
                          6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: Qa4Kf3JSBeBQqbYiCo/cniAp6rJxxLicB5PTWDqRkac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:aa:42:73:ed:b6:59:1b:1e:8c:82:49:b6:0f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Nov 23 01:01:22 2024 GMT
            Not After : Nov 24 01:01:22 2024 GMT
        Subject: CN=bd3d8871047d330c4c36414ef3e970a68011ba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:88:72:af:4b:5f:5d:a6:5d:fb:8e:ad:76:
                    30:8b:2d:9a:d4:b4:3f:43:41:7b:3e:39:7d:e6:28:
                    10:55:00:b7:bc:3d:14:14:dd:20:38:83:f9:46:70:
                    0a:2d:e7:b2:15:ee:49:7b:04:03:b4:05:10:bb:e1:
                    60:a3:2c:b5:fd:09:e5:35:55:76:d9:e6:06:93:dd:
                    32:64:18:6d:df:38:a4:61:c8:77:af:ed:01:92:d4:
                    c2:54:e5:cd:10:da:d6:5b:0a:40:36:7c:1f:a3:2f:
                    70:3b:8e:91:20:36:7d:9c:da:f9:66:9f:b7:fd:45:
                    e2:a3:56:97:43:11:7e:02:90:3c:63:62:9e:2c:38:
                    f2:6c:65:cb:14:e0:77:64:33:d4:70:a7:a4:ff:c2:
                    d1:5f:02:bd:85:37:e2:e0:81:ba:96:41:48:d1:47:
                    e6:ab:99:a0:ee:96:d2:e6:ee:42:f1:ba:e6:3f:1c:
                    c3:ea:4b:9e:59:97:c3:8d:b3:16:46:30:eb:53:53:
                    e6:18:d9:13:50:89:fb:69:b2:42:3f:d2:24:43:a8:
                    ec:5d:85:74:3d:95:0a:b0:e3:a9:5e:68:9a:eb:3b:
                    c3:47:73:f0:da:b0:17:8c:0a:e1:a5:e2:a0:d2:5b:
                    ba:6c:61:27:b2:e4:15:f8:f0:49:40:97:48:f6:a7:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3D:88:71:04:7D:33:0C:4C:36:41:4E:F3:E9:70:A6:80:11:BA:77
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:dc:5c:6c:29:9d:4e:fb:c9:a3:35:6d:6e:7d:ba:cf:f7:fa:
         2d:8e:36:cb:32:4d:a5:d8:07:39:76:b4:3e:06:0d:09:96:bd:
         97:1a:3d:56:2a:1b:58:0a:28:92:99:71:e8:e7:56:7c:67:d0:
         1a:3a:09:80:be:83:03:4e:94:e2:0a:27:a6:f2:8b:30:47:b8:
         17:8a:4a:b6:e0:eb:5b:bd:49:52:28:49:39:c6:a7:a0:d7:e8:
         1a:96:48:65:1e:37:35:dc:89:bd:82:e9:7f:13:f3:02:0e:00:
         3f:ca:fb:f3:0b:20:cb:0d:0f:b3:f2:a9:98:6b:9c:a3:bc:1c:
         4a:1d:f7:58:ba:90:c3:19:3a:4a:66:34:6e:fa:76:b1:70:9c:
         01:5b:ba:28:be:0f:5b:76:44:ae:9b:96:63:d9:73:c4:40:02:
         5b:b1:60:81:d8:e8:61:58:12:8f:73:cd:59:dc:20:d6:83:48:
         7b:34:c2:ff:fd:8d:41:77:fc:3f:4f:8f:00:9b:65:db:e5:ff:
         46:5a:1d:9d:c9:2e:a1:ea:dc:94:e1:07:8a:d7:28:0a:74:7c:
         b8:cb:e8:bb:92:ba:ef:00:f5:5b:e5:e0:c6:bd:c4:2d:9e:72:
         1f:b5:97:10:c5:93:af:c3:02:4e:22:4f:50:8c:6e:f6:c4:77:
         f2:95:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:51 2024 by rpki-client on console-fra.rpki-client.org