Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          d7uWFDAC0FkHo1USp8m79qfWamza2ugMOlhGfnLpuSk=
Subject key identifier:   D6:AC:A1:C5:87:92:55:C1:14:CB:50:A8:86:9A:40:C1:58:CF:C4:68
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       0193579BB0E5DC722B6823293A676B19EC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 06:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:41 +0000
Files and hashes:         1: K0jjPNJHQlih5ZP4rzEHuCyso4w.roa (hash: Lwsw4OWi34GvPuK9MY4pRcrccnvm2+sMHLq1GYiD1VU=)
                          2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: mubGru1KYUDQsHPHMFrBT25HQRaDfEiElLI55W1p2xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:b0:e5:dc:72:2b:68:23:29:3a:67:6b:19:ec:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Nov 23 06:00:41 2024 GMT
            Not After : Nov 24 06:00:41 2024 GMT
        Subject: CN=d6aca1c5879255c114cb50a8869a40c158cfc468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:1c:f6:3c:b5:88:a0:ad:13:d0:9e:91:ab:
                    28:1e:df:35:73:b1:60:b2:31:ed:12:e3:fc:36:df:
                    6f:93:90:6a:24:a5:3d:01:d2:63:91:1d:50:13:c9:
                    d6:f6:5f:74:1d:22:05:54:77:4e:08:c2:a1:f2:9d:
                    3e:a2:ab:e0:1a:4e:58:ae:67:83:63:44:4c:08:ba:
                    e8:5e:04:4c:eb:ef:d1:99:71:61:1f:f7:0a:2b:d7:
                    93:ab:6a:45:56:06:76:4b:8f:43:bb:70:a6:54:39:
                    47:77:57:8d:44:af:2e:d1:79:9d:29:a0:44:ce:46:
                    ca:0f:c6:f4:19:05:9c:5f:f4:07:13:8d:46:21:bf:
                    dc:3a:31:0f:35:bd:96:50:4f:65:51:97:2d:ef:24:
                    53:00:c3:43:b3:59:c4:44:12:8f:ff:66:ee:a3:4e:
                    95:ae:72:c7:83:c1:f0:9b:01:91:c7:3e:18:2f:d2:
                    ee:c9:32:3c:2d:1a:3b:73:f0:00:c3:db:d7:08:d5:
                    25:17:03:74:a2:54:90:a2:b8:cd:b3:f0:0e:6e:0c:
                    4d:0a:8d:7a:98:bd:29:98:d0:a7:8e:48:27:87:9c:
                    e5:c8:83:91:27:6d:dd:54:d6:c5:89:74:26:70:e5:
                    28:82:b8:ff:8f:83:5d:74:82:a1:8f:57:d9:66:fc:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AC:A1:C5:87:92:55:C1:14:CB:50:A8:86:9A:40:C1:58:CF:C4:68
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:ac:e0:7a:4e:67:73:8c:1b:a7:92:67:f4:d2:7c:0d:92:
         84:42:68:14:8b:92:d9:41:34:b2:b2:79:08:2d:0e:f4:78:dc:
         78:d2:32:a1:cf:90:b7:c6:f5:62:e8:ac:6e:6f:bd:fd:1b:54:
         be:da:09:42:82:97:5b:d9:e3:10:ce:a5:60:42:4f:71:02:7b:
         cd:f9:a0:7d:d2:f1:0f:0a:6a:75:9e:f0:2e:6f:33:4e:37:5e:
         74:6c:91:6e:99:d6:e0:d9:fd:3f:7f:c2:aa:d0:4e:40:2a:c4:
         c8:10:02:ab:1e:e6:ce:cd:3a:10:12:fd:f9:07:82:37:ae:9a:
         37:3f:7d:2b:d7:94:6f:81:d5:95:fc:a3:9c:3d:e7:b3:92:7c:
         eb:f5:b4:49:0f:4f:5d:1c:7d:77:03:74:f0:e9:22:ce:71:72:
         f1:0d:90:9d:47:c3:b0:9c:c3:33:36:d5:2e:3d:60:db:3d:2a:
         02:ac:ce:cf:2f:64:b9:1e:8a:a7:28:bb:96:97:0f:41:64:3a:
         f4:d2:4f:16:f9:73:9a:bc:c7:13:e4:48:09:82:8e:68:7a:dc:
         64:37:34:18:08:94:3b:ce:69:86:09:f2:8a:6c:fb:eb:a9:80:
         57:c0:6c:bf:5e:c7:41:5f:c4:a0:f7:ec:75:19:cb:db:41:83:
         44:5b:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:27 2024 by rpki-client on console-ams.rpki-client.org