Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
File:                     Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json)
Hash identifier:          bZWQBvMwgzDqaVhmLqivY5Ps2Hw76P+mNM1F3azBK5Q=
Subject key identifier:   E9:A4:18:BB:35:E5:8C:2E:F4:F0:2A:14:C5:9E:F4:99:62:01:87:4A
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Certificate issuer:       /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial:       01935387E0B4FA6709597B4258CC6A3BF379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
Manifest number:          115F
Signing time:             Fri 22 Nov 2024 11:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:34 +0000
Files and hashes:         1: 3ip74V50qs0h4ZWMyydEYUb3bSU.roa (hash: VaRHvi6F7wj7omvIXL/64w09nFe4kau8+GxnnxHfyXI=)
                          2: I2nYoh_KGgvxNmetD4Hh8lLdD3U.roa (hash: ZrNfG1W+euXDlf2L48H4cIH9IUvUOG3qPbFSL84l1+8=)
                          3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: nnPoQRtqg3j8YDvwaI7K+/n0nNQtMFtOdSvadYdzQhc=)
                          4: P54kU8VzssC-47HhzMryKOq9v14.roa (hash: b2CKq42C05Pp3TTpI9SGSG5X6GUrSV4k1QuE6SXYAKY=)
                          5: QfpzoDGYEHVJ7tPPLI83jP9QxD8.roa (hash: P1/MsYET87iJ1MBAfrhs4Z/tB2ahU1TEqCZIyTurxIs=)
                          6: TViWfJZ7iER3BOws9j8Q-2-GymY.roa (hash: U39dzfJ1nZ7B1kOA0sB1EnmkieBA0hDoNlF/9B27hTM=)
                          7: _FniK5HX2kEFzjvw6lb2GuCGYPg.roa (hash: 1aFy8KhkEwg9coJ+dkcfk60ceAWGiPD/iAdmtH/yHc0=)
                          8: aiF5v3FbhmqIhVosGDWCO5vfhMU.roa (hash: 9EsD1TJx82veDOVViyPy7pYkmF9t1efG6ZBjqPIvujU=)
                          9: dl4qd2NxLv2pdTNq0OS-OOlqIBQ.roa (hash: R4VZvRsgmGwvVdNYC34Oay7cu6wYCD63hbEHa/PcSQI=)
                          10: fpT0vpjSqq6vcmWpglUE8JkgG2w.roa (hash: n0iV4etE0l1TlKiu9QXu5QwZw2IGvgy3BLxhvxsia84=)
                          11: tObryqj4_uQtGJ6A9dznl4mcXvY.roa (hash: ZmeGI9tWlMBj6YU965jCFTtroOtiN7c3aKRYzf+l5Nc=)
                          12: yHL1vruYGpi0nOpfa3cqAl23ZwQ.roa (hash: bI1A73y3UrONtbp/MPi6tsZYuB6OtnkkdXqsSBzC7zA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:e0:b4:fa:67:09:59:7b:42:58:cc:6a:3b:f3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
        Validity
            Not Before: Nov 22 11:00:34 2024 GMT
            Not After : Nov 23 11:00:34 2024 GMT
        Subject: CN=e9a418bb35e58c2ef4f02a14c59ef4996201874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:84:57:71:f3:81:a8:f8:13:ef:e3:45:c8:
                    40:05:db:19:f4:0f:0e:ea:6e:13:6d:be:07:e7:5a:
                    78:57:6a:85:3d:9a:8e:7b:b2:b6:63:5d:5a:6a:50:
                    3a:4d:af:6d:6a:23:b1:c3:a9:18:93:66:c8:d4:30:
                    25:7d:88:59:a3:4c:9c:38:3b:0c:6d:82:54:bb:2e:
                    25:f9:33:0b:ed:41:97:ea:f3:4e:a9:31:f6:55:86:
                    52:c7:4b:8b:22:8a:00:dd:2a:e5:be:77:48:46:7c:
                    15:5e:7e:65:7f:b9:48:55:c2:b7:07:44:7d:15:b1:
                    a5:1c:df:dc:dd:7e:4f:86:98:5c:ca:b2:6b:b4:50:
                    4a:93:a0:5f:d5:e2:14:05:5c:a7:38:dc:ce:95:74:
                    1a:a6:8e:c4:6f:85:7e:9d:be:ce:96:f3:97:ed:4e:
                    e5:47:fe:78:77:ae:93:4c:ad:fa:30:c9:bb:70:06:
                    69:f2:e0:6f:90:37:0d:8b:ff:98:9b:e6:dd:fd:fe:
                    b9:97:3a:db:16:0c:56:c2:85:36:d9:8f:e0:d2:2e:
                    d7:bc:50:5e:18:bc:d1:4a:58:71:94:57:0e:d5:05:
                    68:e1:ae:14:d1:f9:cb:29:d2:89:a3:24:cd:9c:12:
                    2b:b1:26:82:84:74:9d:8d:33:1e:8e:5c:e2:5a:f5:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A4:18:BB:35:E5:8C:2E:F4:F0:2A:14:C5:9E:F4:99:62:01:87:4A
            X509v3 Authority Key Identifier:
                keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:60:9b:af:cf:76:4b:a1:1c:2d:1f:a8:01:3d:95:09:d7:93:
         56:a7:fb:69:56:06:20:7f:32:fe:02:4c:e0:e0:81:71:66:6e:
         31:e0:d8:0a:c7:6c:c3:8b:17:8e:6c:5d:fb:b6:02:71:e5:c9:
         43:08:f7:9b:b0:8b:cb:9f:d1:35:b8:3d:59:df:01:cd:ed:51:
         45:5f:2a:e3:9c:5e:b6:1d:81:5e:fc:ce:77:ad:ca:e7:55:5d:
         07:33:05:a1:04:aa:38:30:f3:21:bf:a7:85:df:41:79:7b:be:
         24:58:8a:6b:ab:0a:2e:7e:8d:42:bf:20:25:af:de:be:aa:60:
         8d:17:5f:7c:46:6a:2a:d7:1d:78:08:a4:0e:93:41:eb:7a:d3:
         7f:08:47:6f:c3:97:93:0b:6d:46:a0:f2:94:d3:3b:03:10:6c:
         b4:04:ea:05:d1:dd:48:ad:91:86:eb:cd:86:85:19:28:6b:dd:
         b6:85:aa:e4:d9:f7:ab:99:74:d4:7a:e1:2a:b1:d3:a0:77:9c:
         c1:89:8a:61:0f:6d:d2:36:8f:19:37:18:e7:68:c6:12:92:17:
         85:ef:df:0c:12:ae:bd:ae:a0:50:ca:88:8f:85:c4:8a:22:5b:
         86:8c:29:e6:93:b6:50:8b:0f:bc:6e:d7:2e:61:77:56:a5:61:
         97:60:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:32 2024 by rpki-client on console-fra.rpki-client.org