Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          /A4GQdH9cQ1E5syiuBxpEJ26w5t9hgQap8Os9DNNW6A=
Subject key identifier:   84:C2:AE:E4:AF:CF:8E:16:43:7C:35:7C:A4:40:EF:48:A5:25:C5:22
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019351D0AFB107231E4DA7CA0CEAE9E4B3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 03:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:51 +0000
Files and hashes:         1: 3CPpP1_XU7y2325EguJDTajCoL8.roa (hash: UAN36mhMg9KE+6NnklbmfkbKftroTSnagoR99wpA5Ow=)
                          2: JdgAe1IsbORN7hiyLhyTFGx9-88.roa (hash: gCFdn8d+cfgY8ktOUVgfLa4lzGfUbF9Q0zWuZRBuqf0=)
                          3: SJw9gv91K8NgMkdjIC_fQj8uIvc.roa (hash: uffK9n8U9oXFE42pZj1JpBLiC9Z7woUSmQ6v+Ta7OHM=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: aho4zTa8AW30Fj/uoFkFlsJ20vDXXFeEeeh8ErqYyiE=)
                          5: x-FVmCvgSuWq-6dQrKgxH0DYPTw.roa (hash: 85UsWjUS/ArYMQXIbGnd6m1N664LHYJbmqTamqrgSIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:af:b1:07:23:1e:4d:a7:ca:0c:ea:e9:e4:b3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Nov 22 03:00:51 2024 GMT
            Not After : Nov 23 03:00:51 2024 GMT
        Subject: CN=84c2aee4afcf8e16437c357ca440ef48a525c522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:73:e1:3a:7e:be:47:95:5f:5d:43:a7:c8:
                    05:7d:74:4c:57:a5:47:13:72:f3:87:fd:c1:67:68:
                    be:83:a2:4b:88:db:1f:34:7b:99:b6:b2:9f:9a:e9:
                    c3:3c:48:46:e7:23:d8:6d:90:26:18:a9:73:f5:42:
                    6c:67:f6:80:87:4a:5e:1e:f6:b5:cf:a1:ab:40:ea:
                    ac:b7:28:b4:4b:d9:34:9e:9a:f6:2d:b0:46:a2:96:
                    15:92:6a:bc:3c:1e:2c:60:a2:4c:71:91:ae:2a:2d:
                    74:c0:33:bf:5c:36:89:a1:61:e7:a7:a0:09:95:ec:
                    3c:6e:49:14:da:5c:fa:b2:b1:01:a6:86:02:27:12:
                    f1:39:6d:59:44:43:21:dd:14:cc:1f:e4:c0:63:89:
                    a9:bd:ed:b1:74:27:35:d8:bc:86:9d:cf:bb:bb:c8:
                    7a:30:9e:12:2d:88:16:ad:e5:9b:40:17:5c:7c:07:
                    82:3a:58:d0:aa:c8:d1:c2:5d:f9:28:2b:49:39:ca:
                    2f:92:62:40:3f:53:09:5c:94:ef:04:06:5c:60:d2:
                    15:f5:77:04:65:bb:a5:b2:53:73:35:36:cf:d7:d4:
                    0d:c5:86:65:6c:04:28:5c:ab:15:63:d1:aa:f5:fb:
                    e8:15:72:61:fb:5a:f5:6c:b7:fc:2e:ef:7d:37:8d:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C2:AE:E4:AF:CF:8E:16:43:7C:35:7C:A4:40:EF:48:A5:25:C5:22
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:30:1f:cf:51:71:56:c8:71:0b:b5:13:22:0f:62:6c:7f:dc:
         33:6f:9a:a8:f4:44:b9:1a:98:4e:47:a2:9c:dd:cc:40:52:d3:
         fc:a9:ac:5f:84:fb:14:dd:03:4a:ad:2b:be:6e:e9:83:7b:83:
         80:ae:d3:87:32:f0:d1:5b:50:1f:7d:98:15:14:03:48:13:13:
         91:19:4d:65:1b:43:56:18:e6:c2:b5:7e:d0:a8:46:10:b6:42:
         7f:70:36:34:c2:f2:53:10:29:9f:fe:c6:b7:8b:9e:13:3d:f3:
         65:da:55:5a:2e:32:79:84:a3:36:6d:64:0d:53:51:fb:cb:ad:
         ef:95:55:8a:62:5f:10:7c:bd:16:7f:12:03:17:03:ca:0c:d7:
         a6:8b:23:e8:21:4d:c8:6a:a8:08:22:32:39:2d:39:35:68:5c:
         4b:35:9f:af:d6:02:cb:12:5c:03:6f:4a:b9:75:2a:22:b7:ae:
         b2:b8:34:20:1c:fe:e1:4a:3a:fc:e2:39:fa:d7:e5:83:32:66:
         8d:61:0d:ba:cf:a5:8f:83:26:a5:24:7c:6d:4d:b4:50:8b:b6:
         7d:f0:f3:58:0f:64:3a:76:83:94:e8:b2:e8:ec:7e:b6:84:fb:
         91:90:55:7c:3b:4d:83:51:04:35:9a:a9:57:20:30:bf:dc:45:
         4c:be:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:04 2024 by rpki-client on console-fra.rpki-client.org