Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          9igBHaXHn2bBjLd/yphaiMTj2mO27Lwi8cq5/Xeg71A=
Subject key identifier:   CC:F6:90:65:39:D0:98:18:20:85:C3:84:7A:D5:45:C1:3C:85:6A:5B
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       01935764D372C4B127AE4E433318E4B0C2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 05:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:45 +0000
Files and hashes:         1: EcCbyv6F86Py9PP9C5RspZsolrE.roa (hash: YS2Cs3q7FnSTKblADfw+zOrbamxy7kjIi3sCMReJuOk=)
                          2: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: vlDUP87VRe5cCEjqzV1MyYdTNv5Y2jVgAIz9DtHKcYQ=)
                          3: VsRlCZUYG6wFt1MtJqJ-7hSM0c8.roa (hash: KfoQ9ESZALvZOuUVMt38yz8qlfcv/Eae5enitFD53Gw=)
                          4: ZcxQKehNRFEOd5-ktRlLyib3USo.roa (hash: EfmiUv8i7E4qQK7pO50SY+5JdHtEGjpCBFmCHwr9+uY=)
                          5: i5gxgXiZ8Zjrg3KOfokeB0RwPpU.roa (hash: ApFTMo6snQDax3dcI4Gma5H/8WtTNKz+KdtKfkqSQZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:d3:72:c4:b1:27:ae:4e:43:33:18:e4:b0:c2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Nov 23 05:00:45 2024 GMT
            Not After : Nov 24 05:00:45 2024 GMT
        Subject: CN=ccf6906539d098182085c3847ad545c13c856a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:98:76:cd:98:96:31:1c:63:29:ce:5d:fc:
                    52:00:f6:c5:26:81:59:db:41:dc:1f:92:d4:01:6b:
                    20:20:ff:d6:16:7d:e9:b5:f8:18:88:24:51:89:28:
                    d5:7c:5c:07:36:61:dd:3e:7b:49:25:63:1d:50:42:
                    67:13:f3:61:c1:ab:4a:2a:97:19:b1:81:1a:c7:5e:
                    f2:eb:e0:2b:d8:f7:95:dc:39:01:3f:a1:44:fd:70:
                    a3:85:50:eb:dc:bc:3f:4e:a2:cd:55:ae:44:47:4a:
                    87:04:05:2e:a3:49:40:de:c7:a2:ff:4f:12:31:26:
                    83:73:57:ce:34:c2:b7:5b:3d:46:8d:e5:ee:b8:9f:
                    47:0c:9e:bc:84:0e:df:b2:cd:67:03:d1:36:16:1c:
                    5b:40:dc:58:3d:d2:a1:cb:73:24:3d:49:36:3d:6d:
                    ed:10:72:e5:b4:69:2c:39:61:80:00:e1:cd:f3:d0:
                    92:bc:a7:49:1b:28:6f:bd:3e:e7:15:59:1f:7f:67:
                    e8:ba:fd:43:66:d3:97:dc:6d:4d:1d:12:3e:1a:75:
                    db:61:50:e1:1d:b4:2e:44:8e:a1:79:b0:76:77:32:
                    60:70:1e:95:f6:e0:ef:9b:1a:df:5a:b2:30:26:a9:
                    b1:a1:c0:8b:26:7d:f3:78:26:28:15:33:2c:48:cb:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:90:65:39:D0:98:18:20:85:C3:84:7A:D5:45:C1:3C:85:6A:5B
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:06:00:c1:a9:6f:45:ee:b9:b0:9f:90:85:b8:36:3d:75:
         c2:70:79:23:ac:48:9f:2c:a5:5b:8a:fa:7c:c2:b9:8c:ad:ad:
         0b:61:15:8c:03:c4:ae:45:17:d6:d6:12:b9:36:25:d8:d4:e7:
         7d:af:5a:94:d1:b9:ba:e0:94:5b:c7:e7:f0:ef:e2:ca:89:0f:
         7e:83:e7:74:9c:1d:75:db:c4:f2:bf:aa:a7:b0:b4:26:f5:76:
         fb:a0:20:4b:95:5f:c5:ea:06:17:8d:1a:a2:ec:86:19:da:94:
         9f:95:cf:81:40:07:2d:01:c9:5f:bb:9d:57:73:19:ad:ab:27:
         92:34:31:3d:44:3e:88:50:7f:9f:bf:b2:e8:3a:e9:ae:b6:14:
         ed:61:08:7f:bf:57:c4:cf:b5:13:31:36:ad:35:90:ac:3a:f2:
         20:ae:d7:33:81:9e:9a:ee:90:a8:e0:da:02:f3:cc:c0:35:b9:
         d1:eb:db:ba:da:3a:b5:9a:89:6c:bf:9c:ea:ca:e8:7d:22:c4:
         55:64:04:a3:4b:0c:87:42:3c:f1:17:cb:7f:f0:8d:eb:49:3d:
         37:c7:22:76:9d:44:9f:54:e9:ee:29:d6:57:83:9e:7b:72:00:
         db:e0:f5:94:ee:52:28:f7:11:ac:6c:dc:8e:fd:e8:b4:da:67:
         55:68:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:38 2024 by rpki-client on console-fra.rpki-client.org