Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
File:                     EDQGi16fcxQnfivpcmxzITGxdWw.mft (raw, json)
Hash identifier:          /ToGqeW9zrZbrDh2eR1oWKwi58ufByYSf22Z5VOuOws=
Subject key identifier:   95:F3:6E:B8:7E:19:42:CD:4B:33:E4:C5:D3:5C:83:14:0B:98:45:4A
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Certificate issuer:       /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial:       0193523E1B0AD0DC6650284709AABE852739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
Manifest number:          0DDE
Signing time:             Fri 22 Nov 2024 05:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:22 +0000
Files and hashes:         1: BSGstQ6Yj3H6s_eRiYm2wtxbgpw.roa (hash: e2+44+BOVlmaOgYvzvkHvIbfcMcI4oiznp+2wM/plUo=)
                          2: CMxTCAMcOyg3Z9FCHd3oj6v27R4.roa (hash: 5/+H+kwkdlalwY835pI6GJhxWor+tSbFubil9w99WpM=)
                          3: DHtiwlaRfWkYJKXLfESHdKUe2dI.roa (hash: kw7fpMCMETV/mfJ5n+xx1Si0YPTbPHbDY2anOeZ2Akk=)
                          4: EDQGi16fcxQnfivpcmxzITGxdWw.crl (hash: Qbr9PcZWCj3024HXe8l1WYlj7fN4LwP2rRuuJQ7i/Q4=)
                          5: HIB0Ed05n2g7TVdYGGpemu6aOp4.roa (hash: WeYhAmYSzR2yCAO/SbzvTeupXScmINE2tB5DYEcyzB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:1b:0a:d0:dc:66:50:28:47:09:aa:be:85:27:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
        Validity
            Not Before: Nov 22 05:00:22 2024 GMT
            Not After : Nov 23 05:00:22 2024 GMT
        Subject: CN=95f36eb87e1942cd4b33e4c5d35c83140b98454a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:85:20:79:bd:77:6a:f1:4c:e3:2c:dc:ce:
                    46:2a:8d:cf:8e:1c:a8:1f:a9:eb:70:b3:ea:ce:f3:
                    3b:cb:9c:c4:56:88:2f:8f:b7:a0:7a:72:60:c5:09:
                    48:1b:f8:f2:80:ad:1d:13:dd:8d:b5:d1:17:5d:be:
                    ab:8d:e3:5d:27:9c:0f:c5:c6:10:83:e6:76:12:24:
                    3c:98:05:e1:60:20:a0:49:a7:93:05:c8:6f:8d:a8:
                    d8:41:51:76:d5:02:73:10:ac:6d:4c:1d:03:82:aa:
                    6b:6e:37:67:b2:22:6a:2d:6a:2b:53:d5:21:46:e5:
                    0f:e4:d9:96:b2:c7:96:40:55:c2:2a:a7:40:cb:3e:
                    af:40:95:a6:84:04:c8:47:55:27:b0:17:26:00:7b:
                    53:10:43:ae:f2:43:97:15:d7:06:67:73:cd:46:8f:
                    84:b8:db:48:15:4d:78:5e:26:c6:11:0d:95:ba:50:
                    10:af:a1:a9:d1:64:14:a7:e9:e4:d0:a6:ca:4b:b3:
                    0d:41:24:df:90:e7:db:e5:d4:dd:3d:96:8e:31:3b:
                    bf:aa:5c:45:2b:07:dc:56:45:9d:40:00:47:df:e2:
                    c3:12:19:16:06:e7:66:ad:73:cb:91:e2:25:91:95:
                    c5:08:7b:51:d3:cb:76:70:ad:63:c5:6a:97:3e:cc:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:6E:B8:7E:19:42:CD:4B:33:E4:C5:D3:5C:83:14:0B:98:45:4A
            X509v3 Authority Key Identifier:
                keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fd:b8:a9:85:78:28:1f:c6:80:c2:ea:45:9e:00:30:7c:f6:
         14:d4:e5:3b:04:9a:c9:0a:4f:db:57:49:d3:3c:6a:a9:24:19:
         bf:f9:00:99:e4:49:ee:76:06:07:5b:de:4d:41:db:55:79:5c:
         35:a1:bf:4b:fa:aa:4b:39:28:f3:9a:87:7a:4c:25:48:37:86:
         8f:0e:c6:82:44:7a:95:ba:7e:77:de:bf:c3:b0:d6:0e:46:5b:
         73:29:58:ce:5e:93:42:2e:5e:40:6b:0a:25:7c:5a:5e:2e:a5:
         d9:a1:da:44:53:c4:ae:b7:23:37:88:c8:b4:1f:d6:fa:c4:0f:
         9b:1a:80:73:76:90:6f:05:2e:9b:61:2b:d0:8e:52:bd:7f:40:
         f7:ce:e1:c5:63:c8:91:c5:61:77:99:cf:b3:a1:55:ae:09:fb:
         3f:01:3e:b9:45:48:11:49:70:c0:7b:a3:56:0f:40:62:79:31:
         34:b6:3a:85:50:f9:2c:05:82:3c:37:11:85:f4:42:6c:e9:80:
         58:08:09:7b:19:d8:b5:fe:ac:e8:ad:60:0d:b1:bc:8e:49:1b:
         f7:88:9e:94:9e:f1:34:f6:ad:cf:fe:38:a9:a0:89:7d:5f:cb:
         85:31:fa:34:6b:f6:4f:1b:a1:8e:6b:a2:49:62:3d:ae:e1:ec:
         2e:91:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:59 2024 by rpki-client on console-ams.rpki-client.org