Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          NwiYRfIklSww01syjjI14JAg/unxEtlcBTLkzB9IRak=
Subject key identifier:   D0:C4:7D:26:D8:8C:21:03:38:8F:6A:5E:12:22:C3:D8:F9:29:05:42
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       01935809299172BC0A540C51B563F5B3E0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          12CE
Signing time:             Sat 23 Nov 2024 08:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:15 +0000
Files and hashes:         1: 1-O1BWLqjTpYyO90J18gW9W118tc.roa (hash: +nZ2jb+X1rKvLziaeIfIr9PMPiV2fn6vlvMpaVgPHAU=)
                          2: 4_EDjULFMva7HOZuwXn7Xw9LweA.roa (hash: QolV3yoXhCz/T/Kx7nYO1Ue1cRl2WEodRxheGCE5bnc=)
                          3: DFOL60hfOLCe7zdhwp1QE4XYmfE.roa (hash: ZFVdHhwZ593V+EefhneiN+S+izIzozZUUAvQVcZGMN0=)
                          4: bWd1JiKaNT9glgl-IaitZU9oLME.roa (hash: D24aYzQqw2pm8LhOuarzrwzSnqqikuToeB3UwSdruXE=)
                          5: hNfE-EiGDK8pcxV2aPkDWALGAyA.roa (hash: PfrYUiUHJXlo50KwRIj/jIFhPPNZSC/Vb7rdebqeBms=)
                          6: lKHPOFsDQakBgYV0VdSsvdMAJ8U.roa (hash: m8WVkhF0cSaG9ISOggtKLwfq1l4ZkTJLrrV43loL3Xc=)
                          7: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: LVQY35NKc5X2MHjYJ/vr61kQGTiHRb7PY6QhX/DN/GQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:29:91:72:bc:0a:54:0c:51:b5:63:f5:b3:e0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Nov 23 08:00:15 2024 GMT
            Not After : Nov 24 08:00:15 2024 GMT
        Subject: CN=d0c47d26d88c2103388f6a5e1222c3d8f9290542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:14:07:97:98:d3:5d:e3:44:35:9a:f5:40:
                    b8:b7:eb:bf:97:27:89:49:4f:f0:18:d6:01:92:8a:
                    d1:b3:26:f0:89:e7:e1:56:8b:a7:f0:04:c9:6a:44:
                    ce:d7:04:1c:d1:5d:60:bf:2a:f1:f4:07:da:8b:ae:
                    e4:96:82:2a:cc:91:58:b9:e1:79:4a:69:ad:f2:19:
                    ea:0e:01:e7:79:ed:35:dc:5d:a6:ba:06:79:c8:2c:
                    f2:30:40:cd:05:d4:8f:49:15:d8:e0:73:d6:86:f9:
                    1f:83:68:d7:5e:20:73:90:d4:f5:69:65:07:7a:21:
                    8f:34:b9:c2:d6:b6:89:d0:ed:cd:ee:62:06:01:2e:
                    08:58:95:4b:f4:2b:02:88:f7:bc:30:29:54:9f:ae:
                    f2:d5:3f:60:43:de:0b:0f:8f:0f:d0:98:ce:a7:f2:
                    0e:fa:a2:7a:bf:30:38:23:83:a4:3c:b2:74:35:51:
                    55:58:df:37:74:1c:55:49:3c:46:fc:5e:d0:b5:95:
                    4f:61:7f:9f:04:b7:b1:9a:59:4c:91:dd:14:f8:1a:
                    df:d4:63:f2:ab:b4:e0:9f:30:f9:97:02:02:3a:ac:
                    d0:e0:7f:3b:5c:9e:f6:43:f1:66:99:96:3a:a8:cb:
                    cb:bb:b2:4a:f9:2a:af:05:fb:a9:06:32:5a:d1:1d:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C4:7D:26:D8:8C:21:03:38:8F:6A:5E:12:22:C3:D8:F9:29:05:42
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:34:30:be:1f:7e:f6:1a:df:d8:9c:34:bf:09:b6:00:ef:b8:
         c3:bd:29:41:a6:d8:b7:99:60:24:cf:22:5d:8b:c3:cf:a8:a1:
         e4:6f:1b:75:95:af:42:46:0a:20:92:85:ad:90:94:32:64:e7:
         34:ab:e8:bb:95:61:f2:12:bc:6d:62:99:96:3e:a2:43:cf:70:
         18:d4:e4:a7:05:62:3b:ff:06:78:e8:44:12:1d:be:5e:38:ca:
         8a:c3:aa:d6:9e:4e:01:52:d8:cf:1d:18:93:14:9b:64:e1:af:
         49:0e:8f:6f:05:07:ae:c9:89:26:c7:a2:91:c9:f0:f3:79:44:
         e4:01:2a:1c:12:fa:84:10:b4:e3:6c:a1:31:96:41:1a:5a:9c:
         cb:55:36:56:07:a3:f0:80:48:33:2b:9c:e9:d2:6e:95:df:f5:
         19:71:1e:69:3b:4c:3b:a5:40:58:48:39:a5:a5:21:fb:ca:ff:
         61:19:33:dc:be:0e:61:ca:08:2c:dc:d6:8f:60:c7:1d:03:10:
         6f:3a:80:ca:91:d8:75:74:4d:f7:93:0f:7c:36:dc:9b:0d:bc:
         ac:45:69:08:53:10:8a:a2:98:3e:af:5f:bd:af:88:34:0d:47:
         dd:ac:96:ba:16:9e:f0:10:54:be:ec:67:5f:ce:1f:bd:fa:74:
         97:d0:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:41 2024 by rpki-client on console-fra.rpki-client.org