Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          T3jc8E/oIUkdfN08l1esi5EU6IrlZPuTB9rMzbLCaDU=
Subject key identifier:   7D:5A:89:F8:4D:EE:65:E1:4F:10:3D:25:07:67:1F:44:73:9D:B0:5A
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       019350BFBC895CEAB168FFFE0A17A45F91E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          0DFA
Signing time:             Thu 21 Nov 2024 22:02:43 +0000
Manifest this update:     Thu 21 Nov 2024 22:02:43 +0000
Manifest next update:     Fri 22 Nov 2024 22:02:43 +0000
Files and hashes:         1: JQhRMG4-Y6hXO7oAPgYjDQYPkTo.roa (hash: hDa/U14il7UgbZz09me2lDK7PKLO7CUjFaoBDYrgnXI=)
                          2: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: m9EyD7dMM8mnhv89uNQ/+FVb/90+cTiKISyBn/DYAfo=)
                          3: saxx4tewHEu8C9BClxocYtAv8rU.roa (hash: eWKZw5XQDdsrl4yVs9Nm/oS7mWWwhkqKfXruPmhzKMo=)
                          4: uvsb5pXWbc8ymgGKHd_RjKmjzpk.roa (hash: 5AO7zxRK4HVOMSlobq/xnW007CwLvtTbHH6zUz2jnZk=)
                          5: wmkj68FY9JsHkY6HPMNXlB51wSs.roa (hash: n9nwfqPBuj5RHAZVDiDky/Rq+rAdypH7fVClLUKTK8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bf:bc:89:5c:ea:b1:68:ff:fe:0a:17:a4:5f:91:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Nov 21 22:02:43 2024 GMT
            Not After : Nov 22 22:02:43 2024 GMT
        Subject: CN=7d5a89f84dee65e14f103d2507671f44739db05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:d8:9e:5e:89:65:1d:34:e0:2b:1f:da:98:
                    ff:82:a2:c4:75:35:7d:1d:5b:2b:d3:47:f8:a3:3c:
                    0d:c0:5a:4b:21:0d:dd:65:47:a4:a0:2f:f9:00:40:
                    54:1f:de:03:42:59:7a:41:6e:5b:ce:e5:30:a0:e0:
                    ff:4a:56:5a:0b:7c:fa:ed:ff:05:0d:3e:69:c6:a9:
                    67:f3:f0:be:b0:cf:a2:7a:c4:03:3e:21:4b:47:7f:
                    04:41:55:a5:bf:ca:4a:a1:95:1b:b9:4d:93:00:38:
                    91:04:c2:a0:7a:67:d5:4b:88:2d:19:c4:ea:10:b7:
                    e8:3e:57:cc:b2:d8:22:15:cc:4d:0b:eb:49:c7:74:
                    c9:cc:53:60:86:7f:95:b9:ef:5a:13:9b:37:90:f2:
                    88:a6:0a:dc:71:bc:ad:65:02:5b:28:cb:26:ba:f4:
                    dc:fc:c8:b8:07:af:b3:08:a0:3c:ef:0c:18:7c:2e:
                    6d:d1:56:b7:db:24:f0:51:37:07:95:31:5c:26:11:
                    ad:8d:3d:4f:6a:f2:a6:11:58:b8:16:56:6f:bb:f1:
                    7f:e4:5f:98:42:b0:9d:e4:a2:d9:3a:bc:5e:93:be:
                    d8:5c:fd:c7:7f:34:17:46:cd:3d:3a:a4:57:51:6e:
                    67:27:fb:8f:17:60:cf:b8:33:dc:8f:06:32:1b:32:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:89:F8:4D:EE:65:E1:4F:10:3D:25:07:67:1F:44:73:9D:B0:5A
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:af:92:9d:36:5e:71:c0:e2:ec:f8:c1:18:8c:8d:3f:0b:
         23:3b:9f:56:3c:74:e7:1b:8b:f2:ba:2f:e0:9c:ff:38:75:52:
         57:db:22:bb:d0:23:cf:aa:7f:df:0e:00:29:1f:2a:5e:af:fa:
         b2:14:68:ff:9b:dc:9c:47:93:21:3b:ba:77:a1:b8:4c:44:45:
         ef:c1:f5:fc:07:25:03:3b:4e:50:47:4f:31:88:9e:36:32:21:
         e8:95:5b:71:8b:41:ac:1c:4b:01:5c:f0:a3:4a:e3:9f:fd:1d:
         1d:a8:e2:5e:b8:85:96:8f:6f:7f:3a:d4:96:74:42:75:3e:de:
         9f:4d:f8:ad:4c:a7:3b:84:00:67:70:87:b6:4b:60:b5:b2:15:
         a6:37:c1:88:14:5d:d8:95:6d:2e:56:cb:c8:c5:4a:18:02:a4:
         88:5d:89:c4:5a:9b:58:04:f9:f1:8c:c1:7a:53:4b:5e:1d:92:
         05:aa:b4:1d:8a:1c:74:36:6d:91:36:0e:73:09:86:63:4a:f5:
         35:c7:5c:12:9a:1c:e5:b5:6c:ff:42:2e:7b:80:56:c8:b4:da:
         dd:a7:ba:1f:5f:12:8f:ed:36:49:9a:1f:f4:fa:ae:52:2d:60:
         6c:d6:cf:f3:eb:ad:71:0c:b6:61:e5:93:2e:f3:bc:a1:0f:cf:
         e9:1c:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:20 2024 by rpki-client on console-ams.rpki-client.org