Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
File:                     ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json)
Hash identifier:          ismaqvOJ0JKBfiMhJKVnZcjG6LlqVItk1i8itsk1gDY=
Subject key identifier:   90:BD:AF:EE:E8:E0:B9:9D:D8:E9:52:F6:4A:AC:AE:6C:BB:62:A1:A3
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Certificate issuer:       /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial:       01935689586E6A440F17A0A128957095F46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:01 +0000
Files and hashes:         1: 84Y7T475VPF0BJarkUVoc_AiRd8.roa (hash: 7oekIr7rzxBCZReGsWYydUN6/as96gJkK2vBl9b6zwU=)
                          2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: /7FWYQN5ZGsn7HZbQXRvqbYH4SXOmXLEQkX4crYOWy8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:58:6e:6a:44:0f:17:a0:a1:28:95:70:95:f4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
        Validity
            Not Before: Nov 23 01:01:01 2024 GMT
            Not After : Nov 24 01:01:01 2024 GMT
        Subject: CN=90bdafeee8e0b99dd8e952f64aacae6cbb62a1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:db:e5:d9:92:44:77:15:47:c7:15:e4:64:
                    dd:59:88:c8:1f:a2:ed:1c:e4:f4:62:8a:51:34:0a:
                    02:b3:09:26:be:c0:81:f6:0d:57:a4:7c:2d:b4:ee:
                    79:ba:39:2f:e1:87:e0:6d:5e:5a:e2:41:da:ce:6e:
                    f4:90:2a:ad:cb:84:9f:b6:25:a6:5c:c1:2e:10:ef:
                    25:58:13:7f:37:be:91:85:7a:1b:bc:16:43:35:3b:
                    a9:e7:f5:a0:d6:e8:98:b5:5f:a1:66:66:a6:3e:3c:
                    c8:9b:47:e5:6c:47:7a:f6:3b:ce:c8:b8:d2:c8:48:
                    e7:7c:51:d6:3e:3b:4a:6b:0c:12:76:af:72:18:c3:
                    f2:d9:e2:7d:aa:ba:2c:11:0b:e3:78:d9:34:1a:71:
                    6b:bf:75:9b:46:94:e6:45:df:e2:a7:87:e4:6d:2b:
                    30:91:0c:49:e3:2c:a6:22:62:39:a6:7e:2b:57:65:
                    ea:29:60:bc:2e:a4:b8:e7:68:7f:12:cf:8e:81:00:
                    fe:bb:0f:eb:1c:21:2c:19:09:13:df:43:d8:0c:72:
                    61:f8:d1:08:b6:33:dc:b9:fd:eb:69:c3:68:eb:1a:
                    a3:c1:2f:04:e4:2b:61:a2:7a:33:53:c7:89:59:de:
                    ca:d8:f2:f4:3b:9e:eb:78:68:c2:61:8e:1d:69:51:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BD:AF:EE:E8:E0:B9:9D:D8:E9:52:F6:4A:AC:AE:6C:BB:62:A1:A3
            X509v3 Authority Key Identifier:
                keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:50:e1:ed:03:fa:2f:42:df:f3:c2:e6:b0:32:e0:2d:9e:
         17:0b:14:d8:39:77:ec:69:6a:d0:0c:86:44:ba:61:8e:3b:da:
         6c:56:59:0e:b9:cc:e7:0b:6b:cb:04:fe:86:c4:55:37:34:22:
         56:97:40:73:a0:88:97:ee:74:5c:ab:31:a0:d8:da:f6:49:b1:
         ba:52:04:4f:cb:60:47:dc:6a:78:b1:29:41:58:08:60:b1:9a:
         4f:fb:21:0f:8a:ed:0e:37:2e:37:fa:4c:57:ee:11:d8:d0:76:
         bf:84:57:a8:c6:8a:d2:21:eb:f2:8e:83:44:3d:65:fe:1b:8f:
         d2:46:6a:c5:3f:96:2f:51:f5:a9:14:57:a4:6d:2d:a6:15:58:
         9c:72:68:e8:56:3a:17:3d:26:d1:30:e3:e6:1b:06:fc:cd:d7:
         a1:fc:d8:d6:7f:10:f9:74:95:ec:57:6d:21:cb:66:26:0d:9d:
         8c:7b:d4:59:e1:88:b0:24:e0:ec:ae:b8:39:0b:b6:12:c9:54:
         be:6a:c9:04:30:e8:39:72:8c:e4:d6:3c:40:4f:78:71:be:eb:
         2d:cf:94:74:9f:3f:c6:4a:3f:2f:5d:98:55:d3:31:32:a4:d6:
         d7:37:65:f9:ca:6a:e0:66:17:7a:7f:16:9a:f4:04:3b:e1:a1:
         e0:9e:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:43 2024 by rpki-client on console-ams.rpki-client.org