Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File:                     pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier:          Q+98Dg0s3pkiDc+jgTSNZpMayS73av3l1SIGfiHFJa8=
Subject key identifier:   F1:CC:3F:AC:07:6A:B8:43:60:4E:FD:AF:A8:81:95:3B:4A:C5:5C:F8
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer:       /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial:       019350F48E4F43D52D7F103FD7EB2B9BB4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number:          1385
Signing time:             Thu 21 Nov 2024 23:00:24 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:24 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:24 +0000
Files and hashes:         1: ORCHICHYiYZUBd313aBdLXPDbKY.roa (hash: wSrdKASdBbYIuzHZMm0knNIIdFS1pntvVbWAAegtWL4=)
                          2: SfV0wWgUfPeZlr98-cniE8Y2t0o.roa (hash: d5BLl2mdp2dLjuN3Dqs/i4zHWnQ82ykbPu89lwkJuiA=)
                          3: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: 4C4/MILX9HMGqwlBhRbwUSeQfhdkvPAUHDEq2Xm9qyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:8e:4f:43:d5:2d:7f:10:3f:d7:eb:2b:9b:b4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
        Validity
            Not Before: Nov 21 23:00:24 2024 GMT
            Not After : Nov 22 23:00:24 2024 GMT
        Subject: CN=f1cc3fac076ab843604efdafa881953b4ac55cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:6e:68:f6:3e:43:b1:f7:9c:ab:e5:e6:d3:
                    c1:cd:77:21:6f:34:93:52:85:fb:77:92:21:9a:16:
                    50:b2:7e:de:bc:a5:f6:e1:84:d7:cb:42:6d:7b:ea:
                    88:72:61:ca:8a:ee:88:7e:72:2c:e2:8d:b6:fb:a8:
                    96:e6:ba:96:42:13:73:96:b1:ca:c5:42:f9:ca:ec:
                    16:2f:ed:2b:84:28:70:de:94:53:72:89:dc:c5:e2:
                    ce:61:36:e4:7d:c8:1f:ed:57:9d:57:1d:24:94:e0:
                    b7:2f:ea:b3:7c:ce:40:63:b1:29:92:8c:cb:a2:a9:
                    28:bb:9a:7a:04:c9:7f:d3:ba:e1:fb:29:fb:10:4a:
                    1d:ad:a9:66:9a:af:08:b3:49:30:c9:fc:27:69:a2:
                    25:d5:12:2d:fe:b6:e0:3c:ef:9a:41:3a:e6:4b:1e:
                    7e:2c:61:5d:a3:33:f5:64:c6:05:f4:6d:67:c3:bf:
                    2f:19:76:79:a0:e8:13:d8:aa:50:d9:80:1c:3e:cc:
                    8a:09:cb:66:42:56:04:8c:0a:56:62:e5:c2:9e:ad:
                    17:67:8b:80:82:06:67:62:95:91:e3:ae:7f:3f:ee:
                    39:5e:7e:89:a4:d5:33:0c:b4:9e:4c:37:1a:6a:2e:
                    e2:25:a7:49:3f:37:17:15:81:6c:f0:62:b8:b0:ca:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CC:3F:AC:07:6A:B8:43:60:4E:FD:AF:A8:81:95:3B:4A:C5:5C:F8
            X509v3 Authority Key Identifier:
                keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7a:1f:f9:5d:e7:0a:d9:64:19:1d:c5:3d:4a:f6:2e:55:9d:
         8d:e5:94:47:a7:1c:26:82:70:12:23:7b:d0:63:f0:af:43:73:
         ba:22:3a:c8:fd:e6:16:6a:de:72:08:6f:2d:c2:12:14:19:5b:
         be:45:2c:38:ef:23:f6:fd:64:d6:a7:c4:fd:77:cd:19:31:b1:
         39:01:81:71:ac:71:eb:e4:a4:a2:8a:e5:6e:ef:73:7e:5e:14:
         28:00:4e:a3:1b:49:4f:14:de:8e:7a:df:c2:1e:09:4f:00:e1:
         6b:fc:1e:5f:7a:ab:38:e6:e7:18:cd:3b:99:7c:57:20:07:98:
         89:5e:7a:89:7e:9e:36:82:b9:69:17:3f:07:29:71:2d:b7:a4:
         42:a1:2f:8a:f9:a0:c5:1e:2f:42:11:99:a9:cf:6e:16:1d:c7:
         89:90:a8:e3:ce:58:ae:ef:c7:00:ec:1f:64:2e:0c:0b:f3:43:
         26:79:e8:22:1b:80:32:f9:f0:52:4d:fc:d1:d1:c8:02:8a:15:
         a0:2d:88:10:df:bb:bb:3f:bc:10:b5:19:a2:9d:91:27:a4:51:
         b0:2f:e7:59:42:59:d2:bd:7f:a4:59:a6:2c:94:3b:49:74:41:
         48:c7:f3:a4:db:4c:4e:09:8f:01:7d:2d:db:89:4e:89:fc:4b:
         60:fc:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:30:16 2024 by rpki-client on console-fra.rpki-client.org