Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
File:                     pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json)
Hash identifier:          mD6fdCv7ogXrChoRu5DsAcdOtU1hUCH0pEOKtHpI6Oc=
Subject key identifier:   36:48:73:93:13:E9:BD:FF:4C:03:AC:E0:7E:90:56:15:3B:E1:68:C9
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Certificate issuer:       /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial:       019352E2C01176E3652252AC2A2E8ED19D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
Manifest number:          1045
Signing time:             Fri 22 Nov 2024 08:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:12 +0000
Files and hashes:         1: 7c9G0GQJYG-3YOy2JdgPC5rbXOE.roa (hash: x1PB6tJTCd6Xpwia6jLWqx+tukloXQvhfkKqPZ6Cp0Y=)
                          2: 7qODuGSs4dmqZxJ-1yR3uLnt78I.roa (hash: u9dD83B9w4i3dzT6MQPlhoVscgdl/eJq2CSU2nReV/s=)
                          3: H7F_0BQY9F_vqEdMMlcW-DDy7VQ.roa (hash: unxO3BoaME5QVELFtPjBOedR7U60ugmeLRDAif8cQIw=)
                          4: JKBe194GtTE6-jtROjlvi6ISDwE.roa (hash: ECqICTzRBzYMc+lUuuWPVyHqU8Zqtygn4BtTESjsaLI=)
                          5: JhcnO_f3vyWsqORCbqRb3pMOP9o.roa (hash: QlJfGZeKFSMCeTj/+DzDXYivB2hKP7gLhvKjLsKYzVo=)
                          6: PYhvTWu2gLGxgQFdlL60IH92CE8.roa (hash: yV6fRqMha8M+YZ9PxKlydMdQ/YHg+s/tvkAKEMqbpOQ=)
                          7: UoM7GZS22qIm_xwu48_5lIS3d5E.roa (hash: B2YkWctj7HnoEfUInkkDB7kWzpC8mVEet27ugRM2Yjg=)
                          8: VnNOyhJgLmShK4zlF9XdAN2q4s4.roa (hash: B/S8y9b1ISPp/BBs9L+1yYuLtM/Q6p7iTzrPaTaI4+Q=)
                          9: XLYAPTD2no7p509qKAMCL1mF5Kw.roa (hash: 6fVzPn2OvDKI7tMg9uZxaVzB70BMWrRH9hLnWPXyA9Y=)
                          10: _SRd9-jnhzoZhmioLNmTQnooO10.roa (hash: EYM3jpvUqrqdHraSGULYWyF3fiwTNPdZMhniKdxAMgU=)
                          11: fuUps2aRQkJHHd5iIfnTKFZGxHM.roa (hash: sJ25TtqdOaT/n5KyVJJPUK/zQ3AMSASckTZRULIgdlI=)
                          12: nlNRTOXpQFo_d8AnPPNfNphLBmQ.roa (hash: ryNBMff0UZy/g85NWb7cdBlRbr7UNf/fMA9h7ViPBk0=)
                          13: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: C8AGl46HyFRxi2dFP9swIHEe1l59bQIfgMFqbrB4v2E=)
                          14: qsKIPbHveiCP8xnSrxIMqZdVk6Q.roa (hash: tErfnGfNrbtatT/OHnsoFUmZd85cqmf/258GdBmrxUk=)
                          15: wZF77SiErYymosNHzp8aF-JhSN0.roa (hash: KReCDeSN+XFI3gXfRjrK0vu1WQZqer0ApJzCHW9RNDg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:c0:11:76:e3:65:22:52:ac:2a:2e:8e:d1:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
        Validity
            Not Before: Nov 22 08:00:12 2024 GMT
            Not After : Nov 23 08:00:12 2024 GMT
        Subject: CN=3648739313e9bdff4c03ace07e9056153be168c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:a2:fc:78:59:1a:70:14:f9:19:ab:46:62:
                    0a:cf:3e:c4:72:c7:15:4c:3d:36:f1:ee:49:24:0d:
                    e5:52:42:77:e3:54:98:26:9a:fd:0e:d4:af:95:c3:
                    cd:50:85:a7:89:48:14:eb:d6:8a:b6:d5:71:2c:9d:
                    0a:70:83:86:80:58:97:aa:60:85:33:b9:c4:6d:75:
                    f8:71:1f:b7:58:24:3a:86:8d:6e:0f:28:3c:26:9e:
                    32:ce:a9:1b:23:2d:63:2e:37:28:3f:de:fa:aa:f4:
                    33:fa:e7:32:e6:1e:17:25:24:ac:13:1f:4d:e3:55:
                    e5:7b:29:78:dd:59:e2:dd:38:d4:94:72:a5:0d:c0:
                    17:be:2c:88:99:a1:fd:71:5e:73:a8:5d:45:8c:04:
                    2b:ab:b1:55:3d:00:d4:1e:d5:5b:dc:2c:80:06:6a:
                    9f:ca:fa:ce:86:4c:41:fe:9f:b3:c8:79:63:f4:bc:
                    a7:c1:19:7a:3c:17:f5:10:ec:b2:61:dd:ed:75:0d:
                    1d:84:1f:cf:10:38:c6:11:66:b6:30:c1:92:fc:3a:
                    43:e9:a6:33:22:4d:04:0a:f7:a8:6c:9b:ed:11:a9:
                    da:e1:fe:88:3e:78:f2:3e:94:79:82:8d:3e:4f:4a:
                    5f:83:60:7f:15:d1:e8:34:5f:ca:74:ee:3f:a9:d0:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:73:93:13:E9:BD:FF:4C:03:AC:E0:7E:90:56:15:3B:E1:68:C9
            X509v3 Authority Key Identifier:
                keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:ed:13:dd:59:04:b1:cb:9a:b4:27:9c:6e:c2:3d:b1:45:
         dd:5c:c3:2a:5b:5a:cf:d7:ad:9e:2f:be:03:d1:cc:75:f0:84:
         36:e4:e8:d6:07:12:9b:e7:6c:23:99:3d:8b:63:58:bf:64:e6:
         27:5b:1e:82:8d:cb:f1:0e:68:bb:be:98:9c:c8:6c:87:f6:eb:
         fd:fb:68:38:ee:b3:41:a6:03:d2:4b:94:ca:9f:6a:77:7e:4e:
         41:b1:3a:49:d7:f4:8f:5e:c4:c7:ee:27:af:0a:12:32:82:5f:
         4e:36:d9:65:7f:f6:18:92:85:1b:73:44:18:95:e0:e5:07:fc:
         46:3b:c0:20:b2:f4:3e:20:89:af:1f:7c:bf:cc:ba:e3:1b:86:
         0d:79:a1:f6:ec:88:26:0e:5f:c1:5d:18:7a:d1:30:18:de:8e:
         2c:cf:a4:a9:d5:8c:f7:19:af:12:1e:95:73:6c:cc:bf:49:22:
         3e:ab:54:02:d4:41:c8:3e:51:86:df:47:90:57:a1:04:6a:23:
         97:65:4c:fb:ca:da:d1:68:3d:03:6f:6f:ef:8c:37:c9:77:6e:
         0b:df:40:b2:ba:1f:b5:f1:08:41:18:c6:c5:62:7a:77:26:96:
         27:c1:2e:d3:c2:10:91:cc:1c:9e:d8:a1:9d:0a:06:1a:85:52:
         e7:66:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:52 2024 by rpki-client on console-fra.rpki-client.org