Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
File:                     KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json)
Hash identifier:          AIfH4D1MMTN9KoDbm98gBQJaejWd3Xw/Vj702h/NtwY=
Subject key identifier:   1A:C7:7C:34:1A:A4:C5:1C:96:6E:7E:5A:A7:48:69:AD:92:30:A7:D5
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Certificate issuer:       /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial:       019352ADC4A05B6DD01C842711BA6678D52D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
Manifest number:          1388
Signing time:             Fri 22 Nov 2024 07:02:19 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:19 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:19 +0000
Files and hashes:         1: I8P4wOnFImAIuAMYdvxlAsMuArI.roa (hash: AD9GVp5kZ4L4e5SLMYvEHe7ZIQPH0mkAb3pQVUN/lug=)
                          2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: VDWwDjawBEfM/fZjEEzfKQj2EeHIrHQaPQbLeqUZ1Ws=)
                          3: LmHF0zIXSlY5j5Px3mrPmwsXAvw.roa (hash: 3F1eXa7OtjWqjVajl6/e9fcs9w6riGfl7OAxodeHHgY=)
                          4: QRRVuGawoI9XYjkWmSE-QiZSm5U.roa (hash: woktcn9XBDLrK5qaTnznfCg5H4J1YwzWJqyAF8wT1Bg=)
                          5: T9-PpIO_ENTFow8FT1TF_efBHvE.roa (hash: uEHEbQFLMSzx+9dJbHoFtkGCqkqLxNfoGrqiXZtVgaU=)
                          6: X9GtHIVz2NJzi9lfTi8spGRp9ZE.roa (hash: aPQIYhzXQyaSEHkdxF/+XzpSp0d9MMj/DwQNj+wBniA=)
                          7: Y8tHCvNiiDFe60vV3blETgG4RXE.roa (hash: a2c9CtDbpErT8gxP8WOoTQY/5TnUcVVblW1QWLfXPWI=)
                          8: _L1qmmmsTn7EyFFSDv1jn8xqAd8.roa (hash: ZK/M1+msBweFUs+xmlzstKJU8Gb/cQws241nmxt+aAc=)
                          9: cA9mJsPVRNkqyg1LO25OAPbzoOg.roa (hash: /pqwLCQuS9dt0IFys/lIx5/l5sl8A5mq1xp0BL6pBd4=)
                          10: e7kmI7k7f8MnGsQBpn8TU2sX_TY.roa (hash: 0WVAvhfUu0D595RKpMRHn3ncYQ6wgIm2+IXCdr+xBRw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:c4:a0:5b:6d:d0:1c:84:27:11:ba:66:78:d5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
        Validity
            Not Before: Nov 22 07:02:19 2024 GMT
            Not After : Nov 23 07:02:19 2024 GMT
        Subject: CN=1ac77c341aa4c51c966e7e5aa74869ad9230a7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:2a:7c:b9:ed:52:0e:85:e2:b6:52:7f:ad:
                    0e:1a:d7:6a:e9:f9:35:d6:4b:94:50:66:90:3d:d1:
                    db:33:a7:18:20:87:8d:f4:c4:d8:90:a5:a5:93:b6:
                    64:b4:62:38:c0:b1:36:5c:bf:ce:47:43:fa:89:1f:
                    7c:9a:cc:02:8c:5e:3f:cd:1b:ff:3c:a0:af:77:b1:
                    41:85:7d:ee:d1:42:cf:f9:73:c6:34:c6:b1:8e:d4:
                    6b:b8:97:cf:e3:d9:04:c9:92:dc:b5:6e:04:10:a1:
                    a0:ee:0c:05:1a:ed:84:37:00:fb:e1:15:de:f4:1c:
                    11:5f:ce:d2:d6:19:06:b4:ed:c2:dd:9b:b4:64:bb:
                    34:c9:e7:8d:f9:c8:3e:0d:8f:6e:9d:ed:52:92:36:
                    23:ac:c0:f6:3b:9f:a1:d2:a2:52:6e:12:83:68:2e:
                    e7:14:93:a1:1f:d3:5f:5b:82:17:fb:05:5a:a1:8a:
                    74:1b:53:64:d1:84:10:9e:59:2d:fb:46:3f:84:73:
                    1d:f7:8d:9b:eb:03:d0:8f:3e:0e:00:8d:b2:1e:91:
                    ca:a5:e8:55:22:e0:d7:89:36:1c:d0:2c:9f:cc:02:
                    f8:33:99:04:f6:21:08:c4:95:3e:78:5a:a7:92:f4:
                    70:67:f9:42:b5:97:80:77:38:1f:75:ee:95:05:2c:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C7:7C:34:1A:A4:C5:1C:96:6E:7E:5A:A7:48:69:AD:92:30:A7:D5
            X509v3 Authority Key Identifier:
                keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:1c:c6:86:22:45:78:ea:14:8c:e7:7d:c7:9a:5e:54:26:
         85:46:96:2c:90:05:79:f5:68:e6:7b:27:ea:20:e7:09:38:0b:
         39:21:41:84:cc:8b:d9:09:6a:a5:da:15:17:02:58:46:64:9c:
         50:cc:85:30:68:b4:64:50:62:66:f1:9a:83:8d:9e:9e:37:64:
         f3:dc:d7:e3:a3:4f:1a:a0:91:f8:2b:ad:ac:66:0e:68:21:10:
         65:78:0c:a6:3b:8f:04:fe:e5:0b:63:40:c2:68:36:d5:16:bf:
         67:15:f4:da:b4:fe:ff:ef:f6:73:9f:4f:e2:de:55:0b:6b:f9:
         83:4c:e7:b8:81:bb:d2:fc:c4:d1:16:2b:e1:17:f3:c1:3a:0e:
         37:45:7f:ee:84:05:01:af:51:c3:c8:a1:f1:f7:c1:4b:85:38:
         10:8c:93:11:21:6c:37:f1:9d:4b:76:38:0d:cb:77:39:1e:a4:
         77:56:95:65:59:e2:f7:85:62:93:e3:91:af:36:91:94:00:b2:
         ca:70:e5:e8:b1:b9:27:08:c7:8c:45:b7:d3:f6:14:cd:4a:fb:
         56:e5:0c:29:30:37:4f:ce:97:b6:55:3e:c5:55:4a:52:f7:b2:
         14:b8:72:80:13:1b:c7:73:50:66:e8:17:d6:de:14:45:dd:7c:
         b4:89:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:16 2024 by rpki-client on console-fra.rpki-client.org