Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File:                     rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier:          jm4aP7B2esgedIzJpnFmGseTddyLwhZG959yKmkLcec=
Subject key identifier:   74:24:0E:B8:21:1E:9A:6B:A8:76:91:94:D7:9F:4A:C5:68:D7:01:3C
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer:       /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial:       0193568A04C62028F2CBFB006FA79F0368C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:45 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:45 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:45 +0000
Files and hashes:         1: BRdk_nhbaxS617nOjxzzJeSyKKE.roa (hash: hoGd5pWCF31ywBI9Io3yEQs34IspTOwoLFhSO9k9bUE=)
                          2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: wSX3I7kKz+6MNwC7Yv0t6XA0BTBvHf3+ULhTbmQF7WY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:04:c6:20:28:f2:cb:fb:00:6f:a7:9f:03:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
        Validity
            Not Before: Nov 23 01:01:45 2024 GMT
            Not After : Nov 24 01:01:45 2024 GMT
        Subject: CN=74240eb8211e9a6ba8769194d79f4ac568d7013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:b4:f2:1d:9a:51:e2:49:a6:7a:ce:9c:e6:
                    ff:4c:47:2b:d6:59:46:08:49:e8:1c:02:cb:de:06:
                    8d:21:1d:c4:0d:f5:be:25:2d:a9:80:3c:06:d4:bd:
                    36:d7:ca:ba:dc:65:ad:f6:48:1c:0b:8a:22:f1:e0:
                    49:a6:cc:6c:60:11:d9:bd:fb:40:63:61:9c:40:91:
                    07:84:a5:9a:ad:fc:5b:5e:fa:35:fe:e9:99:5c:89:
                    62:11:b3:da:3b:6d:84:01:d1:37:bc:27:b4:91:d2:
                    49:30:72:fe:20:4d:cc:11:0a:e6:79:79:f1:60:6c:
                    28:d2:32:62:b9:06:5d:bf:ee:ea:f1:70:05:23:2c:
                    dc:ae:ca:55:02:12:21:78:4a:95:5b:9d:90:67:96:
                    ea:e5:a0:e7:62:61:f7:c3:0c:b0:d5:97:1f:c5:a5:
                    25:14:aa:cd:5c:9d:3b:8b:30:f8:73:da:22:14:d0:
                    7c:a2:74:f2:2b:9b:c9:29:30:5a:a5:f6:d3:64:d8:
                    97:b7:67:47:27:5a:b8:93:0f:25:11:0a:26:b3:0c:
                    b2:51:b7:35:c8:e5:01:36:ff:ec:ee:df:6a:55:7a:
                    df:d7:d9:26:fc:93:14:e3:16:fb:8b:ed:ed:46:93:
                    f4:80:c5:63:8e:af:25:a7:5c:81:f5:03:9e:70:29:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:24:0E:B8:21:1E:9A:6B:A8:76:91:94:D7:9F:4A:C5:68:D7:01:3C
            X509v3 Authority Key Identifier:
                keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:34:9c:f9:bd:34:f7:5b:99:5f:09:86:17:0f:d3:cd:6a:
         82:44:ad:c5:34:e3:2d:d3:62:f4:29:e7:1e:88:a2:35:7d:50:
         37:cf:22:d9:f8:25:53:0e:39:8f:35:5e:56:89:7d:f3:f2:1c:
         c0:dd:4c:d9:03:b4:8d:fa:bc:84:1b:3e:09:f9:4e:e0:45:2a:
         66:ff:02:cf:33:49:c0:b0:3b:b1:65:98:0b:2f:8a:4b:7d:34:
         86:2f:4a:05:c5:4e:40:25:36:57:e0:c9:11:2d:75:ea:bb:d8:
         8a:65:b1:ce:35:1d:01:3f:6c:75:0d:d8:dc:b4:10:6f:74:c4:
         90:47:76:da:0e:83:42:ce:82:57:7d:c0:26:f4:e2:56:f2:c6:
         14:70:c9:a8:59:53:b1:b6:ba:22:31:35:34:39:f1:4d:f6:8a:
         06:51:d6:64:8d:1d:b7:ba:16:aa:1e:3d:f1:70:90:23:9d:49:
         8d:82:f9:ff:24:30:fa:e8:c3:11:69:64:41:dd:7a:c2:d4:59:
         1e:a4:b0:4c:ae:a1:46:3f:1f:95:d8:bb:fb:a2:43:44:66:6a:
         ab:7c:1d:58:13:c5:e2:5a:df:f0:b5:e5:2f:4a:ab:b4:52:22:
         be:43:a6:f8:00:bd:d3:96:92:3c:d8:af:71:c8:0d:23:0d:98:
         12:e9:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:08 2024 by rpki-client on console-ams.rpki-client.org