Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File:                     dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier:          QV2muXlnFzY6sxScwygC7WwEDpcj4QW8leo7vEG32HE=
Subject key identifier:   62:B9:3B:F7:06:41:D6:0E:EB:06:5F:F8:E3:E2:3A:56:D7:B1:C3:83
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer:       /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial:       0193512BDAFD6B39BAEF4EB5E78FE9183B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 00:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:48 +0000
Files and hashes:         1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: CLqNa+VCZtSMw12Y5Dkda5Nx/uar/41Hr4yz0jFwPbE=)
                          2: gmebv7qPnfm0rVWmKx6BYhQD8xc.roa (hash: IEY/Z0hJsYCV1/8mTL0cWdQa6Yp8gv58PPFk7tSjGYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:da:fd:6b:39:ba:ef:4e:b5:e7:8f:e9:18:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
        Validity
            Not Before: Nov 22 00:00:48 2024 GMT
            Not After : Nov 23 00:00:48 2024 GMT
        Subject: CN=62b93bf70641d60eeb065ff8e3e23a56d7b1c383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:10:e0:51:c6:01:ca:b9:b4:cf:1e:f8:05:
                    24:47:b5:82:96:83:0f:4e:4c:81:6c:c5:64:01:4a:
                    df:fa:a9:7c:1a:49:93:a0:39:36:94:b0:91:47:f7:
                    69:0c:35:d3:cc:62:a0:79:f6:d8:70:1d:9c:08:e0:
                    f1:e0:20:f9:fb:c9:94:40:bb:74:5d:2f:75:7d:b0:
                    6a:14:55:1e:11:3d:0b:a6:a5:06:07:1c:ad:aa:28:
                    b9:2a:53:d4:2d:fb:d9:c6:8d:41:72:09:af:75:75:
                    4d:53:d0:e7:a9:29:8b:b6:04:b3:df:b7:7a:8c:c0:
                    bb:91:7b:a9:36:04:30:a2:31:20:3c:f5:e6:e1:43:
                    91:f3:b0:71:ba:b3:2d:97:70:9d:72:70:40:99:b4:
                    1f:0e:e4:55:57:17:1b:a0:1d:04:ce:dd:78:b3:bd:
                    f8:1d:c8:d8:06:90:39:e7:85:19:da:a6:c2:67:30:
                    da:33:87:18:55:77:08:91:54:42:9c:f0:d9:9c:b4:
                    e4:7e:37:c1:0e:22:3e:c6:53:95:77:b9:f0:84:b5:
                    5a:7b:05:e0:79:77:04:2a:57:34:38:ac:ce:a4:07:
                    be:2d:1a:3a:a6:c1:d0:0b:0c:3e:3a:cb:85:9c:d4:
                    d0:6a:fc:bf:7c:07:16:89:8a:5e:ca:51:c6:d8:d2:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:3B:F7:06:41:D6:0E:EB:06:5F:F8:E3:E2:3A:56:D7:B1:C3:83
            X509v3 Authority Key Identifier:
                keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:8a:6b:3f:eb:4d:09:b0:ef:67:3f:c4:9d:87:c0:bb:d2:
         84:f2:2f:4d:05:03:e7:24:54:0c:d0:30:95:5d:b0:cc:5f:f9:
         63:3d:ee:27:c1:6a:ea:d3:25:50:ba:18:fc:30:38:71:3f:86:
         be:12:e1:26:ac:2b:ee:59:4c:33:c4:2d:7a:83:40:92:a5:ba:
         5e:ce:39:e5:b4:30:4c:f9:c1:f9:ac:1b:5b:2f:ad:58:b0:dd:
         10:c1:14:31:86:2f:ed:be:d6:40:18:ee:a0:50:56:29:e9:e5:
         66:a8:bb:00:5b:13:82:51:8a:8f:64:83:ed:2a:b7:a5:96:5e:
         b5:9b:d5:49:a7:9a:d4:08:97:ac:b8:ee:16:e0:72:2a:f7:4c:
         c8:a7:82:83:83:d1:27:fe:55:15:e1:9d:c0:17:56:d2:ac:50:
         1b:75:88:31:9c:18:33:5e:6b:6a:f1:fe:12:72:87:e4:1a:91:
         66:40:7d:6c:a4:ca:2e:6b:e9:1f:9f:e1:2d:87:69:1a:b1:66:
         ea:8c:28:4f:fe:1c:86:8b:c5:96:88:d9:fd:ed:f2:ba:97:14:
         2f:04:60:13:5c:7d:bd:bd:9e:83:1f:29:f5:9e:d0:c4:1b:e9:
         a8:4d:af:82:b9:92:82:27:ee:8f:dc:5e:d8:3c:58:00:46:15:
         76:0e:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:39 2024 by rpki-client on console-ams.rpki-client.org