Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File:                     gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier:          xHtcpBgtL0NRmfvX4McPPLRM7+ZlWogUacA605roAi8=
Subject key identifier:   19:C6:4B:DF:FF:D7:26:83:43:74:57:4C:1B:0A:29:20:7E:76:5F:48
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer:       /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial:       0193561AE654868EC8AA6597D292955D7260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 23:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:23 +0000
Files and hashes:         1: LOBwupmtOjvwOD71NxZ7Ho0s2Qw.roa (hash: DJGhaJo+0yNK8F3TYQ6FU/rc+9w29cSxCTAMEnX0zus=)
                          2: QaGm3ck9sEy-kuLJFjrgWLxJbUw.roa (hash: 4B0Mc2mpsi9sdHMi3RxxUR37uvt9/vftJqigRg+9ULY=)
                          3: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: BjniRdbp+02ko5+/L+UVQ3Xwz1L6DmHNgWn4pWTmUWM=)
                          4: z3WZ1sHE8jHKeFZwGLi5B67pFxM.roa (hash: I6DPc57WvL7E/Z6Dhq3lczRMHMK+kbys0sGGmQXGmDA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:e6:54:86:8e:c8:aa:65:97:d2:92:95:5d:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
        Validity
            Not Before: Nov 22 23:00:23 2024 GMT
            Not After : Nov 23 23:00:23 2024 GMT
        Subject: CN=19c64bdfffd726834374574c1b0a29207e765f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:ad:2c:ec:76:ed:de:f5:f9:73:38:2a:32:
                    4f:1c:35:6d:27:2c:70:13:cb:70:29:3a:ad:93:ed:
                    ac:3d:ea:c1:60:05:89:c2:57:10:5b:53:9a:7f:9c:
                    40:05:26:4f:fc:0e:22:3f:72:66:cd:0a:f4:bf:49:
                    df:8b:23:c2:20:06:34:aa:e7:67:39:9e:a2:b0:50:
                    19:b1:0a:0d:ff:00:39:6a:f5:5f:f6:4e:da:33:61:
                    3a:30:f0:ed:fc:fb:4a:c3:e8:46:12:af:2a:99:03:
                    0a:44:dd:dc:e7:89:c4:7d:cd:84:9e:e9:90:5e:6d:
                    e0:5c:fd:90:d5:db:18:43:c8:34:dc:30:e6:6d:e7:
                    1f:a2:03:79:e9:c5:c2:39:d3:69:91:ee:08:3e:c7:
                    2b:4f:9a:2e:50:a6:0c:52:5e:f2:17:3c:db:ea:16:
                    4d:88:51:4c:e6:52:42:b7:27:c4:54:63:e5:44:5b:
                    92:64:f6:21:eb:e4:dc:c2:5e:2e:49:ae:27:39:29:
                    20:81:e6:d2:7b:1f:4a:8b:89:3e:bf:d1:f8:2f:b1:
                    5e:3d:68:23:4e:52:53:bd:49:00:30:23:ca:95:71:
                    df:7d:8c:12:24:d1:a6:8d:8f:2b:50:d8:4e:1f:1d:
                    f2:4e:0d:68:35:ce:42:d5:a7:59:cc:b5:0d:60:56:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:4B:DF:FF:D7:26:83:43:74:57:4C:1B:0A:29:20:7E:76:5F:48
            X509v3 Authority Key Identifier:
                keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:01:27:03:ec:d7:47:f2:25:0d:4f:1e:c6:8b:61:39:91:18:
         03:ab:f6:61:d4:8d:9d:8d:ff:ef:84:60:0a:6b:ce:b4:3e:a8:
         fb:45:01:7c:c5:d4:cf:3f:f2:eb:62:f4:68:64:70:c8:ac:76:
         69:61:8d:36:30:3f:80:41:b1:38:8d:35:c1:4c:bd:d2:9a:8c:
         c9:92:00:04:cc:23:24:90:dd:a0:35:24:71:19:ec:02:b8:8c:
         60:15:2e:48:e6:f3:a7:36:70:c2:75:8c:43:26:b8:ff:da:b0:
         d9:c6:b1:41:4e:58:ce:30:97:79:41:f1:c2:fe:1f:90:ff:79:
         f4:a5:73:4d:14:b0:e9:ff:b0:b5:fc:5d:cc:1c:f7:33:53:2e:
         ed:a0:51:c6:9b:57:5c:23:61:71:72:fb:ad:05:0b:e7:d4:4f:
         d2:14:fe:c5:08:ae:47:e8:8a:d3:86:63:80:ad:5d:7c:80:3d:
         a8:ea:61:9d:89:1b:03:e7:9f:71:fe:2a:7b:9a:3e:4c:b0:e1:
         d6:75:1c:08:80:54:49:c2:42:f6:04:92:29:9c:b0:25:e1:57:
         95:b9:0f:28:e2:3b:86:60:ea:6c:9e:0c:b8:f8:89:6d:3a:94:
         6b:be:6a:6f:73:44:87:43:9b:a0:11:9c:35:4c:54:d6:ee:d4:
         11:65:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:11:05 2024 by rpki-client on console-ams.rpki-client.org