Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.mft
File:                     eANVjqblFls4dgl691vx6SoULPI.mft (raw, json)
Hash identifier:          TAsy/WW7wsNGUbZfEN4ize2I6lelbbLHu2xHE+XuQKM=
Subject key identifier:   36:52:4F:9B:EA:E6:CB:F7:D8:36:7C:46:DC:B8:9A:0E:07:EA:D2:37
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Certificate issuer:       /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial:       0193516261B22DAB4C949EDA6BE09CA5355C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.mft
Manifest number:          04E8
Signing time:             Fri 22 Nov 2024 01:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:22 +0000
Files and hashes:         1: 5HwDaNuaFnUsAsTNr92C8q4CLeM.roa (hash: p81QRSjFV2ngF2QIWnWNjc4FOewx93gE5U1L4Lo7NAo=)
                          2: 8zqjLmOnKGx0zOCgKEJ2fM4GAj0.roa (hash: tZxStpijPFCIZscVBmiaIm5epNtuI/gs1bkkF/sMjLs=)
                          3: ONkj0lm5Lto5bOa0g6EHPaOERok.roa (hash: 74ESDJb+PcGyLSfa8bzOdhYX51WvEqVo2UoFVC4bKcg=)
                          4: S0jouFh38XJhleCHvWXpdcRru3s.roa (hash: T1pnGAlR09L2XsZQohIchT5XvH2V/Y/zceSJWiW9jLs=)
                          5: ZXPXf7BQRDvK-Ev7Ja0J_aJPHoQ.roa (hash: jC2qcP+PCEVazgGNrq4OMQIQbxE0U8qfxiX6dG4hzcw=)
                          6: dprzEk2xoK4M7OTHgwIpEzpchNw.roa (hash: /kA3PdFdh59d+SmXKzkaF8IjJZ2Pt+HKn7JmdSM0J38=)
                          7: eANVjqblFls4dgl691vx6SoULPI.crl (hash: ZWfqFYcSSI9GhxhpcBKCvc58hsPz+L5uWqFDDG3HaGc=)
                          8: fCmcS9FQYHEJLexrWrVYN2TxHVY.roa (hash: vYndb6nl0ZcwiUMXpr4kAT5gueVYeAXeNeptqNPWRZw=)
                          9: ic4kSEApIrIEjL0d1epfnNwowKs.roa (hash: FkGWgwhznAgz8y5/4QpCWNyCU4LujoncIll+8gTMHf0=)
                          10: kJYD4o7CpchknBnqVcEKAmnCsaM.roa (hash: +DLNZo8qfMANqKeP8GAARy12eQ/T7PPV/Mliey8pkKc=)
                          11: vjV2XtztJWFoywtP2jeJJ328mOI.roa (hash: PhpjCTVkKUPo2ieTKvHeKhdkwHWJFMYRoy8uStX+vro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:61:b2:2d:ab:4c:94:9e:da:6b:e0:9c:a5:35:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
        Validity
            Not Before: Nov 22 01:00:22 2024 GMT
            Not After : Nov 23 01:00:22 2024 GMT
        Subject: CN=36524f9beae6cbf7d8367c46dcb89a0e07ead237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:50:09:2c:0f:eb:ca:76:2a:48:e3:60:fd:
                    36:1d:b2:95:34:da:f0:02:8f:f7:56:e0:b5:9c:30:
                    ae:13:05:93:a7:ec:f2:a2:5b:20:92:c3:80:51:91:
                    0e:1f:79:b3:64:8e:8f:c8:74:c0:28:0c:bb:53:98:
                    0f:88:65:fc:b1:e3:40:da:3c:3f:67:5d:d6:f1:aa:
                    b6:2e:b7:d6:73:c2:3d:11:63:f9:3c:f5:75:cc:9a:
                    47:1f:12:9c:fe:9c:fb:92:f2:d6:6d:0a:6c:f7:8b:
                    7b:63:18:70:5b:fe:52:5b:68:c8:7c:dd:cc:a0:9e:
                    51:f1:b8:c7:d1:e6:b8:f5:15:73:98:4e:43:67:fd:
                    f6:b5:8a:fb:dc:f7:c8:02:49:4c:65:88:84:6f:8d:
                    ac:86:7f:1e:c7:d9:bb:3d:6b:0d:8f:7c:81:41:b6:
                    bb:43:5b:a0:fb:64:e5:8c:ed:1a:48:05:45:75:29:
                    b7:f8:2a:87:9b:45:20:08:fb:03:89:c5:e6:af:bf:
                    2f:2f:bf:4a:50:16:d0:17:bc:62:30:7a:7d:d2:0b:
                    34:3f:97:84:a7:3c:ef:a5:8e:ba:3f:af:fb:0c:1d:
                    57:e8:5f:de:3b:88:ae:94:72:dd:ae:8d:5c:80:02:
                    00:42:46:81:09:3c:e1:0d:37:c9:2f:e5:cb:89:84:
                    f5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:52:4F:9B:EA:E6:CB:F7:D8:36:7C:46:DC:B8:9A:0E:07:EA:D2:37
            X509v3 Authority Key Identifier:
                keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:c5:cf:61:14:1e:c5:81:d6:78:86:9a:99:6d:44:c7:26:
         9f:cb:ed:2a:dd:9a:b7:f5:39:e8:55:cb:2d:fc:8f:9b:f0:3d:
         c3:40:d3:b7:c9:20:70:08:01:1d:b4:da:25:57:10:95:1c:62:
         11:e9:f2:eb:42:65:de:e4:d7:59:f9:0a:89:cf:bb:e6:c7:de:
         bf:55:9d:bc:08:cd:68:fe:6b:c7:30:8b:05:70:81:85:a7:7f:
         58:63:59:44:6b:e6:2a:04:6b:1a:d6:28:5c:ad:60:39:75:a9:
         aa:d7:65:26:f9:c6:27:32:c8:11:d0:b2:31:e1:56:c1:cb:8e:
         f1:d3:86:c9:a2:cf:a6:fd:27:94:08:00:75:83:51:4c:e1:f8:
         53:95:83:0a:d3:df:ab:38:7d:89:be:8b:bc:cb:19:32:71:11:
         ec:6c:aa:62:18:d5:04:fc:d6:6f:c6:64:86:f0:0e:78:53:05:
         94:d9:c3:93:a7:b4:b4:d3:68:a5:5e:4f:87:9c:0c:12:82:3c:
         4f:3e:49:7d:1b:0f:cd:bc:8c:d8:61:21:94:be:e9:24:53:27:
         27:c5:8f:db:94:46:24:aa:37:8b:b0:f3:1e:99:8b:a9:4c:30:
         3e:b8:16:98:0c:12:6a:f7:61:d6:7d:09:29:95:c0:55:05:d9:
         00:8a:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:09 2024 by rpki-client on console-ams.rpki-client.org