Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          Nb8wDn98jNHw4wgHATt6TvDkq8VhGW9AMHO4rGQVUhs=
Subject key identifier:   9F:67:18:B5:F2:E0:40:C8:2E:4F:32:10:3C:7C:F4:C6:D2:59:9C:DF
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       01935199728C6002B3A4B3765BC54D6645A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          1380
Signing time:             Fri 22 Nov 2024 02:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:31 +0000
Files and hashes:         1: Ajo2ixTukR9-HIIXTMZr-RKIL1s.roa (hash: VmDNDMINko7FZWPwLtreeqBXxvWN2RcjDHmgZzuFSIo=)
                          2: LXHvM85_k4NCUT4kjCnVQn0AKog.roa (hash: s+GO7iYsmxj4xYH6096SRVKlBRxyiqH3efbRqT56KxU=)
                          3: WMBT7V-1Kpn_U_N4_8KcVCtYcQY.roa (hash: Vfnakmon2WXVeUOzIRI6eIZrooj0gpRB9g4oSAmI52s=)
                          4: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: 7Ly4/nD24H7AK4yQLdoAQpmuFyj2bvkU8EZdB0pT19Q=)
                          5: xbi7Cl6h56FweboPT1Kaukf5Lec.roa (hash: SNziME2sBA/EhTl/EFW4rsXk/gBrvp8ZklAiVmNwxOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:72:8c:60:02:b3:a4:b3:76:5b:c5:4d:66:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Nov 22 02:00:31 2024 GMT
            Not After : Nov 23 02:00:31 2024 GMT
        Subject: CN=9f6718b5f2e040c82e4f32103c7cf4c6d2599cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:21:4a:c0:c9:81:7f:9a:5b:15:ba:54:25:ab:
                    61:86:b1:3c:9b:26:84:46:ae:9c:3c:a8:5a:45:53:
                    dd:b0:d3:b8:ed:6c:e6:ec:c2:b2:69:33:dd:ca:2d:
                    e1:a2:ab:51:45:10:e9:b4:aa:28:a5:d6:63:9b:2d:
                    a0:6c:3e:7e:71:8d:83:97:3b:e7:41:27:3d:23:5b:
                    e2:49:f2:bd:f4:67:1a:24:00:ae:96:75:8a:05:71:
                    cd:88:bd:6e:6a:44:91:40:8e:55:0b:3f:2d:10:38:
                    aa:56:d0:6f:5a:33:7c:17:ef:ff:ba:67:e0:b5:63:
                    1e:5d:89:33:15:6f:95:bf:11:f4:36:ea:a1:3a:e8:
                    f2:a3:27:3a:e7:9e:66:e2:07:77:f9:98:92:f4:df:
                    30:bc:86:68:31:54:fb:68:ea:03:e0:a0:d4:eb:70:
                    eb:f6:ee:cb:81:4c:d4:46:1d:ea:8b:e3:19:aa:1d:
                    eb:17:22:f0:45:c9:cb:2e:ba:4b:69:e5:60:2a:6f:
                    0b:09:82:d5:cb:b5:a3:36:a5:22:72:dd:7a:40:2b:
                    d9:0c:79:61:b1:cf:07:04:bf:20:33:97:c9:81:be:
                    49:23:22:87:d4:62:c9:f4:97:89:03:c1:d2:a4:73:
                    74:b4:5d:56:de:58:84:6f:78:81:68:81:88:ff:ab:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:67:18:B5:F2:E0:40:C8:2E:4F:32:10:3C:7C:F4:C6:D2:59:9C:DF
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:32:50:f6:36:1e:1c:ff:e3:d1:44:1e:e5:e9:db:4b:38:0d:
         0f:74:c2:fb:3a:c6:1a:ad:4b:c4:09:24:e0:71:f9:aa:f0:b3:
         74:72:82:e5:a8:8b:4d:9e:a0:19:1b:7c:d9:16:f2:a2:79:d1:
         c5:64:7b:85:b4:51:12:74:6f:4a:56:87:fc:4e:df:09:87:e4:
         2c:f0:d7:bc:ce:e5:32:0e:cb:51:4f:ad:b7:29:58:6e:39:26:
         c4:28:6d:a3:97:14:26:0c:e6:f9:87:eb:02:07:b3:49:cf:9e:
         07:20:ac:ca:67:41:3e:a1:5a:2b:2e:30:12:35:74:f7:c7:15:
         d1:02:bc:d6:d2:4e:4d:6d:2d:f2:b7:36:94:f7:27:13:c7:4b:
         bd:c7:1e:1b:fc:9b:bd:f9:3d:2e:80:ae:19:b9:ef:22:0b:18:
         fd:23:32:ec:d0:a1:f2:eb:28:39:46:41:02:c8:33:3c:bb:9c:
         1f:2a:4b:6b:3e:83:8d:f7:08:44:e0:68:83:2e:28:0e:93:a2:
         18:e0:6c:9a:6d:f3:f5:6c:c8:13:c0:1a:ab:fa:6a:94:9f:e9:
         8f:a8:ec:a8:53:7e:20:e1:b7:cb:69:b1:36:25:e6:ea:2d:f5:
         aa:43:c7:d8:83:80:4e:d1:1e:73:c0:a5:b1:63:a4:5f:5d:91:
         24:0d:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:50 2024 by rpki-client on console-fra.rpki-client.org