Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File:                     odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier:          B5GrnjUoH+Hjo/ujZhyH5+pQF76/0noqJVlWn3rNYBI=
Subject key identifier:   6C:B4:A8:91:9E:2F:54:62:FD:81:52:87:48:F5:8E:73:D5:DF:47:B8
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer:       /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial:       019352E2D869AEDFA86A319CD43894A469BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number:          1050
Signing time:             Fri 22 Nov 2024 08:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:18 +0000
Files and hashes:         1: K2ZAmDE64gAPDuDD8CdihOxtXkA.roa (hash: 3kY0s57YeZQKS9rm2vR9x2k1NCcnbOdB6e1RqxrDNW8=)
                          2: _16esGG3l_RC7C0_cr2RJhhgGQ0.roa (hash: C4EJcHJMgJvpeLPQbOlyh7ZmP8xhVZ7cz6w/Cqb9V6Y=)
                          3: _WpCG7RBPMJvYQimdYCF1zGOczk.roa (hash: FruKV4nsIUYfeaA98UE5kKBsaRoJxHQgfbq6MZM4X1s=)
                          4: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: M4N6MzsvPe6mDgOATGl4dRKrz3055AhNBbFVx+oEa1A=)
                          5: v2CyRy475Ck7z-LRsgq02ox6hA4.roa (hash: kGb7pxh4aUe0Qd6SECVdke0BCUUNUaeKj/FlEPr2pug=)
                          6: ycaMXVnQcghKBgub9UfH055lagg.roa (hash: YtkHKstmYiZO6NWbQjDNnxJWjyOKB8hqbSpLpH+EdwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:d8:69:ae:df:a8:6a:31:9c:d4:38:94:a4:69:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
        Validity
            Not Before: Nov 22 08:00:18 2024 GMT
            Not After : Nov 23 08:00:18 2024 GMT
        Subject: CN=6cb4a8919e2f5462fd81528748f58e73d5df47b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:3c:06:fa:b3:2b:80:7d:4c:6d:e7:e6:83:
                    d6:fa:7d:10:69:c5:b7:7a:c2:a5:e2:68:cb:02:d3:
                    8f:d5:72:05:a7:1a:7d:e1:34:d0:e0:b5:ae:38:0b:
                    ca:0c:ee:b1:31:7c:a2:ad:67:24:c3:5c:99:0e:8d:
                    c0:96:8e:aa:2a:49:b2:21:dc:37:7a:b6:9a:f2:ea:
                    4a:c1:3a:a9:55:77:b9:7d:9c:ad:e0:f7:81:3d:e4:
                    eb:67:77:ee:8a:59:51:e8:6c:4d:88:fb:6c:18:22:
                    04:a1:fd:ad:8f:78:68:2c:27:63:b3:71:8d:0b:5f:
                    39:80:2f:3f:f1:64:b7:62:1b:76:2b:08:9a:22:b7:
                    24:ef:55:6e:6a:e8:11:ec:8e:59:37:db:81:67:b4:
                    8a:5d:a7:32:40:da:99:4c:d4:bc:4e:67:09:73:c9:
                    16:b7:f4:fa:3e:05:88:0f:11:d5:09:8a:60:65:21:
                    77:6c:20:64:27:28:f3:4c:66:20:31:37:14:ac:28:
                    2d:11:64:6b:fb:eb:de:43:75:f6:7c:48:30:e4:86:
                    0a:f5:d1:07:e7:64:e7:49:6c:96:6d:f2:1b:4d:f3:
                    5d:12:24:46:b0:82:99:d2:9b:75:05:ae:6b:46:e5:
                    24:e7:04:61:b2:89:4e:99:35:4b:63:7d:bd:13:f6:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B4:A8:91:9E:2F:54:62:FD:81:52:87:48:F5:8E:73:D5:DF:47:B8
            X509v3 Authority Key Identifier:
                keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d2:db:bd:98:79:5a:12:df:62:90:bf:b0:ad:22:da:70:81:
         89:91:3e:e6:5a:da:3b:97:63:c3:2c:86:84:2f:87:45:17:04:
         7c:c7:a3:d0:cc:d3:35:47:4a:d2:8c:63:08:b3:e1:a0:5a:f3:
         0a:d9:9e:ae:cb:d2:20:0f:fd:4f:96:38:64:4e:e0:d7:f5:ee:
         87:b9:93:69:68:fe:57:d8:85:ab:96:88:9a:22:32:7f:25:96:
         7c:ef:57:ec:09:82:13:a4:e5:b8:d4:1d:8a:c1:1d:a4:1b:36:
         a8:68:de:37:1f:5a:12:45:47:a2:73:09:ad:2c:3f:9b:28:af:
         11:95:ef:94:49:e0:1b:c2:75:8a:9a:75:22:09:4b:bf:ad:6d:
         ab:86:f7:28:ed:36:87:37:41:cc:3d:11:a6:72:14:d9:60:cb:
         a7:f9:ee:51:da:bd:ad:b9:99:ac:a6:af:cd:c5:c4:cb:c3:dc:
         6a:66:48:03:98:fd:98:ae:c7:8e:01:5d:5e:5d:fe:01:6d:08:
         a5:73:32:21:88:f2:d7:dc:16:42:7e:bd:93:73:81:2e:de:98:
         31:07:59:ae:3d:77:b7:f3:6c:63:99:fe:02:ce:d2:a3:85:dc:
         a3:0f:f8:34:ca:ab:93:bf:04:ba:7e:7a:3d:c5:0a:cc:2a:03:
         0a:05:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:06 2024 by rpki-client on console-ams.rpki-client.org