Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File:                     mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier:          ZnERVAw4U/lzaXJJntaGSmBLl9lBqsZkD3C4ylRWxYc=
Subject key identifier:   7A:EF:3E:54:9F:6B:E3:0C:AC:6B:57:88:37:04:C5:29:1B:A5:31:C4
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer:       /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial:       019356F71C57A52D67372019FA602498CD34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 03:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:55 +0000
Files and hashes:         1: AS_YRyCOQqctYdpBs_xGqPWT2Ts.roa (hash: mHi+aT8ucu0gYQBkDEbSYCftREywdiOBXbArdIlQ/hc=)
                          2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: PJhI3St8hrMqYd7sEFjbmdc3be1pXwp2WImwV65MhyM=)
                          3: y3Ulg4MRl2Rp-uPtFxq5ljgzEc4.roa (hash: s3tlub+gijUYdIpKjxBrWCMS3eH9fSAksqiHKZHCeA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:1c:57:a5:2d:67:37:20:19:fa:60:24:98:cd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
        Validity
            Not Before: Nov 23 03:00:55 2024 GMT
            Not After : Nov 24 03:00:55 2024 GMT
        Subject: CN=7aef3e549f6be30cac6b57883704c5291ba531c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:c4:b3:b0:97:33:03:f5:0b:f4:ee:46:a4:
                    dc:1a:37:0f:95:aa:96:21:5f:47:1c:91:af:06:05:
                    90:c9:77:65:65:3e:e0:4b:8b:12:56:d6:65:0a:ba:
                    1e:5f:02:fe:bc:1e:a9:f5:ec:8a:c9:80:4c:2e:9f:
                    96:00:4c:2c:c7:81:c2:dc:2c:99:5a:20:5c:d5:7b:
                    f3:dc:d7:23:4d:6c:e1:1f:d1:5a:d0:1c:57:65:a3:
                    36:08:d9:37:ba:17:dc:a5:2e:3c:f5:b5:1d:0b:5e:
                    00:7f:39:2a:28:8f:54:d0:32:16:1a:81:8b:a4:25:
                    fb:ae:fd:5d:bf:43:67:7a:fe:54:fa:54:2b:ca:6f:
                    cd:be:b1:55:78:37:02:a5:9b:72:d1:45:cd:7d:dc:
                    13:fd:b2:ae:cd:48:26:b4:3a:7f:89:8b:af:86:16:
                    64:aa:65:c7:55:d1:a2:83:6e:dc:5c:e8:24:25:10:
                    01:87:9f:5d:30:56:86:4a:44:8a:20:4f:17:62:a1:
                    cc:0d:be:b3:ba:39:b3:73:63:1c:76:80:a6:40:a0:
                    3a:64:a5:57:d9:87:5d:92:8a:cd:1a:47:3a:71:16:
                    86:cd:93:a0:c7:66:f3:df:84:dd:03:86:d0:92:24:
                    e6:89:08:83:ef:68:72:99:69:ed:88:47:1e:5c:3e:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EF:3E:54:9F:6B:E3:0C:AC:6B:57:88:37:04:C5:29:1B:A5:31:C4
            X509v3 Authority Key Identifier:
                keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:21:f7:0b:ed:3f:13:8d:68:ee:7f:b3:21:21:53:e5:66:a6:
         d9:1b:db:f7:99:97:83:6d:ac:a0:e0:17:5e:c5:6d:38:bf:2a:
         0b:4d:53:60:99:72:0e:ce:a3:78:3e:6c:24:c5:fb:9e:af:94:
         25:25:f2:c4:5f:86:85:58:66:35:94:71:01:36:36:2f:98:a0:
         8e:3e:e2:b2:60:64:ef:60:44:d2:65:c6:5c:34:43:f7:25:be:
         7d:41:7b:fd:e9:89:d0:f8:ef:cf:7d:bb:28:94:70:bc:dd:d0:
         57:7a:f0:d6:23:ea:78:1c:c0:5f:8d:5d:eb:fb:c2:a4:58:9a:
         6e:4d:1f:02:cd:0a:97:4a:6b:bc:58:99:20:3b:31:85:e8:88:
         92:30:a9:1f:e8:46:66:be:47:81:cd:19:3f:05:cd:37:74:8a:
         09:02:73:90:72:5e:2d:8d:cc:c5:64:80:c9:de:ad:6a:36:91:
         00:42:b3:d0:34:8f:b2:1f:bb:b1:46:66:fa:f6:aa:f8:00:2d:
         a3:d8:1e:44:d7:14:da:e0:ac:e7:2d:74:77:8c:a1:67:4a:22:
         34:e9:00:6d:b3:29:e5:08:b5:08:82:35:82:53:9e:28:20:a3:
         62:23:e6:b6:bb:fb:56:5f:c1:3e:25:10:bb:2a:2a:f9:39:bb:
         ea:35:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:08 2024 by rpki-client on console-fra.rpki-client.org