Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File:                     FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier:          1ug8/owJvMX3YGFcIUTyrXvISWh5w+xuvyTbYlKJ0i0=
Subject key identifier:   F9:13:F1:BB:6C:AC:2F:4B:F6:8E:5E:85:6F:A8:49:31:3A:D9:24:84
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer:       /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial:       0193568A4859FC4AFF492765E6D8CC410E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number:          0D43
Signing time:             Sat 23 Nov 2024 01:02:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:03 +0000
Files and hashes:         1: 9J-7UsVYsfdkP2E3NOkBKfo27Dk.roa (hash: SNkjPEe1B/N7nRs7uvizDjy6wV1ZvM+qnHJ198JtUE0=)
                          2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: yXVZyv7cIkpZrxe7aW4ZYNisLv43352BK65c+l8N4xU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:48:59:fc:4a:ff:49:27:65:e6:d8:cc:41:0e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
        Validity
            Not Before: Nov 23 01:02:03 2024 GMT
            Not After : Nov 24 01:02:03 2024 GMT
        Subject: CN=f913f1bb6cac2f4bf68e5e856fa849313ad92484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:51:b2:93:b6:c1:a1:b7:e6:61:58:99:a2:
                    f9:e1:b4:83:5b:d2:62:a7:b8:7e:7a:ea:ab:f2:82:
                    b8:dc:dd:c6:e8:49:22:6d:e9:3b:9f:d2:7b:d1:bf:
                    56:66:13:f1:b8:f0:52:46:e2:41:b3:fc:26:6d:19:
                    ce:59:7a:da:54:ee:0e:03:20:c8:cf:c7:98:e5:e5:
                    92:ad:78:2b:c1:8d:05:ba:c3:d4:12:fd:a5:69:7a:
                    ca:f7:63:be:2e:3f:1a:61:b0:34:05:f3:ab:b5:c2:
                    88:97:78:e2:d0:58:ae:54:2c:e3:68:47:5a:12:f7:
                    2f:43:14:c4:99:ca:99:ec:f2:ad:a4:75:4b:2f:40:
                    1a:9c:29:92:3c:d3:e5:63:e6:9a:f1:40:6b:53:5a:
                    ee:05:92:7e:16:c9:b6:15:a6:fc:2b:a4:db:04:68:
                    a6:97:f9:f5:0b:78:66:f9:5b:92:17:8b:19:7d:8f:
                    19:af:7c:cc:b6:29:cb:50:4d:40:9d:54:21:87:32:
                    1b:06:36:4c:6f:f0:3f:29:0d:da:43:9b:3b:c1:cb:
                    b7:e9:ad:6c:a9:4b:73:f4:96:56:9f:7c:3b:60:2d:
                    b9:69:d4:a5:76:a0:b0:d4:cd:fe:dc:ef:70:43:b9:
                    eb:8c:13:bd:fb:a4:e6:4b:c0:92:a0:32:32:59:fa:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:13:F1:BB:6C:AC:2F:4B:F6:8E:5E:85:6F:A8:49:31:3A:D9:24:84
            X509v3 Authority Key Identifier:
                keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:11:73:38:87:f6:50:dd:1f:d1:62:e3:f3:d6:46:df:a9:6e:
         e2:c4:f3:c3:3c:31:e0:24:30:57:10:a6:ac:d6:6d:a9:b4:d9:
         e2:51:de:12:17:26:d5:71:0c:24:50:87:8c:ff:a6:40:d3:88:
         fa:db:5d:6f:58:d0:b1:c6:ba:d1:0b:f4:23:6a:d2:0c:c6:f4:
         c7:0e:20:01:bb:3f:0a:db:76:af:b1:ea:f6:24:cf:e3:47:40:
         e4:84:26:55:b2:8b:2c:fa:82:9c:ef:30:3b:03:53:ec:b2:53:
         25:c0:24:d6:bb:bf:06:c3:73:d4:28:1c:bb:e1:1e:c1:c0:d4:
         72:1c:4f:86:90:10:f0:a5:08:07:df:3a:c9:18:7a:1f:f1:2f:
         4a:31:23:43:63:ea:42:1d:97:9b:fd:fe:ac:e1:60:4f:af:7c:
         47:9b:96:7b:ba:88:c8:3b:c2:b9:50:89:4c:66:71:51:6d:d8:
         8d:de:e4:a9:7f:18:7c:3d:3e:42:8d:7d:c0:7f:7f:74:74:9f:
         78:ed:ec:83:20:4c:09:11:d7:e4:62:d7:ee:76:77:f5:dc:43:
         a1:29:ec:ba:3f:26:17:b2:c0:5e:20:ff:3d:ae:a3:8c:26:78:
         85:31:9a:d8:82:48:85:93:9c:b4:3f:40:de:79:89:36:57:9f:
         3c:44:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:14 2024 by rpki-client on console-fra.rpki-client.org