Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File:                     RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier:          jT5e4eXh/eOj6+27uWpH4uTt4YxjcFYbyUVWTF/ROWY=
Subject key identifier:   B4:CE:5E:5B:92:50:F3:35:36:03:E7:D1:FF:3A:31:B7:A9:9C:E3:DC
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer:       /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial:       019352ABF6A1A50D57FD1638655D4590FF94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number:          1021
Signing time:             Fri 22 Nov 2024 07:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:21 +0000
Files and hashes:         1: K4pJl16Zy4HBzixLmxebbQsBpaM.roa (hash: BO0da7qaAwQq8xP6ynYhr6EnrXedFqMXn2hBx53CfQE=)
                          2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: t9g0LBUYvHjfeyHOuI3Xeo0wNPsQs+GRQUM7jecNNAE=)
                          3: nGipjGiyzDwze7ohQXWPp3LuMNg.roa (hash: FkPgZ4TKoKthLJdEuIXAULV4q3W9b0MSpwU9sxPBjWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ab:f6:a1:a5:0d:57:fd:16:38:65:5d:45:90:ff:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
        Validity
            Not Before: Nov 22 07:00:21 2024 GMT
            Not After : Nov 23 07:00:21 2024 GMT
        Subject: CN=b4ce5e5b9250f3353603e7d1ff3a31b7a99ce3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:12:75:da:01:fd:df:0d:51:c8:cc:ec:f4:
                    b3:60:ce:b4:93:35:aa:8d:16:23:b9:10:3e:05:7d:
                    a5:0e:b8:68:63:9a:8d:e3:eb:14:d3:4f:21:c4:88:
                    b2:d1:8e:b7:3c:60:28:d6:9c:51:90:3e:89:7f:f4:
                    eb:7f:22:02:10:cb:43:20:e8:db:d1:70:8c:79:c9:
                    4c:cc:d3:ad:f2:fc:5c:0d:34:28:61:cc:ef:8c:be:
                    8b:61:eb:f7:c6:3c:24:9e:71:a9:33:20:08:a5:f6:
                    ed:4b:7c:7d:d0:05:a8:87:ab:71:92:70:5f:9e:dd:
                    a7:92:5a:ca:bb:34:52:36:2f:29:52:36:8d:63:d2:
                    df:e0:6b:99:6e:f8:9b:68:8b:c7:35:a3:69:19:6c:
                    a8:05:b1:98:ed:f9:04:1f:be:eb:20:94:5d:0b:ad:
                    f7:28:5f:e2:9a:ed:ff:17:33:f1:2f:86:f1:8d:93:
                    ed:57:e2:b0:ef:97:f1:ec:93:cb:5a:7c:6b:d0:b3:
                    0a:4b:05:b6:65:57:d8:35:bb:6d:09:01:f9:2e:e8:
                    fd:b0:45:97:20:d0:20:e2:5e:88:34:2a:97:9c:04:
                    8a:a8:e2:e6:61:87:d6:05:d9:45:ff:6c:a8:d3:56:
                    c9:57:9a:b7:f6:1d:75:47:ad:b5:15:da:a9:d1:2a:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CE:5E:5B:92:50:F3:35:36:03:E7:D1:FF:3A:31:B7:A9:9C:E3:DC
            X509v3 Authority Key Identifier:
                keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:82:11:b0:2b:d6:a3:15:b0:df:8d:66:20:0a:c5:ad:a1:1c:
         c2:86:81:29:c8:1d:c7:53:67:82:1e:68:16:63:50:c3:ee:7e:
         f5:b5:56:83:a8:e7:e0:4c:12:91:22:e2:b3:b1:06:02:eb:b8:
         c2:d7:2a:f3:41:8b:43:49:4c:9f:15:49:de:61:ed:9f:ef:11:
         7c:88:96:35:da:b6:54:ef:18:2b:7e:ae:3b:33:fa:3a:66:e3:
         15:59:ff:1d:f0:db:30:d7:60:05:2a:05:11:e3:2e:3c:74:8c:
         9f:c5:5e:b0:24:ec:e2:14:75:2c:de:4a:5d:c4:ee:1a:a2:1f:
         03:a5:aa:be:78:63:a9:d3:15:13:4f:32:ab:6b:f9:96:25:bb:
         22:37:9a:2d:35:a3:87:b8:27:11:d1:bc:90:07:f6:80:3b:7c:
         cf:e7:2c:1c:27:51:b6:5e:b3:1b:29:94:0e:96:7c:21:23:37:
         36:2d:e1:d8:33:62:6c:3e:a3:f0:58:c1:c0:b9:07:5a:44:6b:
         1e:85:3b:2f:25:15:f1:64:01:ac:15:34:f1:34:88:d9:ea:e7:
         17:0d:4b:f5:e1:a5:dd:97:e7:ac:30:1a:19:50:96:ec:f2:ed:
         8b:0d:20:fb:f1:f6:9d:df:ed:1a:95:08:60:77:a3:0d:a3:fe:
         88:21:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:29 2024 by rpki-client on console-fra.rpki-client.org