Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          yupR09IYzqmaMv2omkerExNFs9fEgrXqhMq74O3sTzs=
Subject key identifier:   DB:D0:5E:FA:DE:1D:96:90:59:2D:29:84:C6:B5:49:79:57:26:B4:36
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       019352AC1657B9AAA1C99BFDB1DC806A0548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          10EC
Signing time:             Fri 22 Nov 2024 07:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:29 +0000
Files and hashes:         1: 3BNH5IEXaq9-7zGNXK2rPTQGPNE.roa (hash: OTIkEQu5REolNTG2Ilw35d28N7J3Lnf9Un8dFroargA=)
                          2: 3Bg3PVo5TWcwPOtLlvv7PbmByOg.roa (hash: K3dfdrJYjGLFTEtllyvGsxdAZD6gD5zP69CH5tmr9Ic=)
                          3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: VkyakA8CTDZqrNBi/eTkB2A03EDRD2tVymBvQJtvOnU=)
                          4: Bl75VAjXE1iZ4vb5si1QZGMYDq0.roa (hash: jD7WRZRLwPF7N6iiLqk1vqZ8lGL4tDiT3EA0RC3CwOI=)
                          5: DAZZ70kyHQ4fmQYlrltvrKqFVFc.roa (hash: L5V/qK1dsmS3PJOOJrRXeTpjoB/eMclziqjIxjMndMk=)
                          6: Ltotk8i7HZHvN-uRlGopNS5FUNY.roa (hash: Ck0Ln9+nNsOq0PIGXWusqOo59vgbe0EfZCv4ROvPI4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:16:57:b9:aa:a1:c9:9b:fd:b1:dc:80:6a:05:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Nov 22 07:00:29 2024 GMT
            Not After : Nov 23 07:00:29 2024 GMT
        Subject: CN=dbd05efade1d9690592d2984c6b549795726b436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:6f:0c:42:d5:6a:02:0b:10:2a:dd:b9:a8:
                    3b:a7:68:3d:86:3e:7c:18:47:86:9f:c9:39:32:c1:
                    03:93:29:7e:a3:75:d8:ba:e4:2d:ba:21:20:92:2c:
                    f3:fb:72:e9:86:b5:c4:ca:ea:6c:b6:91:6d:8b:4a:
                    be:f2:ad:e4:4b:76:95:1b:b1:ef:44:35:f2:34:3d:
                    3e:57:de:aa:4b:75:3c:a9:53:82:e2:e3:40:be:94:
                    55:f6:ef:91:b1:96:19:99:28:05:d5:0f:14:f6:59:
                    27:a5:f5:4b:96:bd:4e:ac:c1:ae:d3:27:25:27:92:
                    47:29:04:c3:ad:2c:0f:70:12:a9:7a:67:69:68:6b:
                    04:b2:f8:d1:10:57:ca:81:01:13:72:e5:73:1a:9e:
                    42:02:0c:94:0a:45:e7:b7:cd:bf:dc:a7:41:d1:35:
                    f0:91:3b:5f:dd:34:87:d1:4e:68:6e:8e:7f:35:08:
                    ed:e5:71:e2:b1:e9:f1:6a:84:48:1d:26:f6:fd:4e:
                    47:4e:5a:4c:a4:be:bd:c7:93:7d:45:1b:04:01:0b:
                    6c:3b:74:da:96:69:38:4f:1d:fe:52:42:a9:6f:a2:
                    94:ab:1d:ef:39:4e:d6:f8:67:1e:1c:b3:1a:74:da:
                    75:5e:cc:27:10:e8:25:f6:fb:d0:9a:89:27:34:c3:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:5E:FA:DE:1D:96:90:59:2D:29:84:C6:B5:49:79:57:26:B4:36
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f5:b3:17:11:73:20:e5:24:2f:d9:01:a2:a7:4e:30:e2:69:
         e3:60:28:e1:84:d5:3f:e5:92:f7:51:a1:c5:8c:e2:91:35:15:
         05:dd:89:58:4b:fd:d9:53:b4:dc:0c:3b:1f:64:ed:d3:17:83:
         cd:f5:7f:72:6f:d0:82:f0:cc:de:1c:75:82:6a:55:ed:ae:a7:
         b7:78:15:dc:4a:55:df:f9:53:d6:f5:3f:2f:b0:95:89:de:57:
         21:b7:80:b6:8b:ab:5c:0a:9d:61:28:31:b6:e7:12:b8:bc:dd:
         8a:ad:d2:94:90:23:f7:94:8d:90:95:7e:c5:60:03:97:4e:e3:
         12:11:5d:20:04:b2:57:3b:1a:7b:f6:e3:bc:cc:76:3c:29:a2:
         25:ed:9a:74:ea:0d:d0:e0:4f:31:ab:9a:54:b2:ad:d2:11:e4:
         f3:a6:0a:53:e9:5f:ce:8b:d0:5b:2b:cf:c0:c9:14:2f:78:8e:
         57:a1:2d:84:fb:40:68:c3:61:95:70:43:0f:bc:81:bb:31:8a:
         f5:47:77:7d:8f:32:d8:bb:d9:03:87:30:7c:bf:b3:59:90:c5:
         7b:f5:e4:04:12:4c:0b:72:6b:2e:04:7a:54:55:ae:78:74:5b:
         72:6a:6b:9a:67:7f:f8:37:28:85:1b:98:cb:36:b1:97:6b:cc:
         49:01:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:17:08 2024 by rpki-client on console-fra.rpki-client.org