Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File:                     V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier:          YnZ5eCHFb5LEoWe6Py1MjCkAtVynsjh5t9mIziootbA=
Subject key identifier:   37:78:99:96:94:A5:A1:59:4E:40:FD:72:9D:DC:4F:77:0C:4B:E9:CF
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer:       /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial:       01935764AF511C9C760363776F6D590D5203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 05:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:36 +0000
Files and hashes:         1: 0WpnSBke64LYhoua4c8yOIP5iQg.roa (hash: drSEuFrKMBTzYmgjvWSvR5+UNxdpivqfFB/UxHiguOQ=)
                          2: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: WsFF3Y3GjDG64NjFy8au0ytq03S8DHdeObXK9px456M=)
                          3: llJppn6Lm4SsjaGr2g-fF2LyJts.roa (hash: jlqx6VROK7AhKNRRFxWMzs+98q67Dm0+GPPQiMEuJ6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:af:51:1c:9c:76:03:63:77:6f:6d:59:0d:52:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
        Validity
            Not Before: Nov 23 05:00:36 2024 GMT
            Not After : Nov 24 05:00:36 2024 GMT
        Subject: CN=3778999694a5a1594e40fd729ddc4f770c4be9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:bf:d1:18:ec:88:69:d9:d2:ce:f9:20:0d:
                    9f:55:ca:da:ed:ce:f8:1a:97:20:8b:b2:50:e2:1e:
                    02:5b:9f:65:8e:82:2e:b2:dd:a5:5a:00:3e:80:8b:
                    88:f2:11:da:2c:fd:e8:9d:95:ea:e3:04:79:49:dc:
                    f2:5b:03:40:d5:da:e1:f4:61:6a:08:48:aa:3f:51:
                    7b:ad:cb:e7:d9:8e:e6:f0:82:69:b4:38:8b:66:09:
                    0b:dc:50:7a:f9:21:2b:ac:2c:83:bb:02:f9:16:a3:
                    ae:23:70:27:d9:1d:0b:89:1c:d0:c3:1b:5e:2a:ec:
                    53:a8:68:26:03:7c:e7:32:27:4f:9f:72:68:1e:bc:
                    e0:6d:1e:9e:6d:d2:63:6a:d9:ed:61:97:ae:9c:90:
                    ed:72:ad:26:47:98:61:5c:83:b1:24:71:dd:1b:9a:
                    83:ab:fe:ec:3f:4e:c8:32:67:d5:de:12:80:77:34:
                    35:aa:88:21:1b:5e:28:1b:21:b4:e5:a6:3b:10:3a:
                    6f:bb:e7:5a:ef:08:10:34:ed:ef:29:cf:c1:fd:eb:
                    ab:d4:ea:0a:ab:4d:ee:70:ef:39:0d:0f:1f:a0:a2:
                    fd:38:d0:6e:26:52:77:ae:b3:7b:cc:a8:a1:a2:90:
                    34:82:09:be:9e:a5:4e:f3:55:3d:fc:3c:bf:f0:36:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:78:99:96:94:A5:A1:59:4E:40:FD:72:9D:DC:4F:77:0C:4B:E9:CF
            X509v3 Authority Key Identifier:
                keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:b6:49:d3:35:a9:75:76:8e:41:fb:9a:f3:de:b1:e0:37:
         6b:47:af:41:f1:29:a0:ee:ce:9b:02:0d:42:02:f5:68:c5:f8:
         7f:21:7a:d6:01:81:67:84:8e:5c:98:64:44:4d:3f:0e:e4:f3:
         83:d8:ce:af:7a:e8:f2:10:bb:a1:d6:c0:3e:24:be:49:de:e9:
         2a:5b:4a:bd:50:3e:54:4b:cf:80:36:72:53:05:6c:1a:26:8c:
         68:4c:16:0d:d7:ed:19:ae:d9:4b:ee:0f:d2:3a:c3:14:52:88:
         e8:7c:25:de:78:b7:42:e2:b1:7e:98:2a:1b:c1:ec:1f:c1:c5:
         b5:19:01:d7:25:02:0b:ee:25:27:1b:41:b4:b4:d0:42:82:96:
         d5:93:9a:53:c0:a0:e4:ac:50:51:3b:46:47:cf:17:4f:c3:e8:
         38:88:ba:bf:b0:86:e1:36:3c:d0:a0:d2:e6:cb:14:18:f1:a2:
         40:1e:77:e8:c3:3a:72:80:5c:7c:53:fd:13:e2:8e:4b:ad:a7:
         6b:11:29:b1:a1:96:09:a9:24:3f:fb:0e:da:11:50:17:8f:1a:
         e5:c2:fa:d3:2b:b6:2f:12:72:6d:a4:0b:a1:4a:77:ea:a9:6e:
         03:c3:b5:fd:55:25:59:02:4c:0a:88:6e:1d:e2:e5:02:f1:5e:
         15:d6:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:47 2024 by rpki-client on console-ams.rpki-client.org