Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          PYdRzqTGqWylDwrESD2dvV3JzRSFpdN/2VYi8hX4xN8=
Subject key identifier:   E9:49:58:48:95:66:00:E4:81:D0:DD:83:43:72:26:AB:F3:31:57:FE
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       0193550857BE628406679BD1488DCD45D171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 18:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:30 +0000
Files and hashes:         1: GIzPCEuKJSX2evavd6Flcr9Fh0Q.roa (hash: hCwgv3Z6/BGim9DbI5RtIaf8j2Vz/hVPEE884jqp0lQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: TpqQ0g4Nr//GN8DsDuYS7cwyS/wmZAZlt/dmYl/RveQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:57:be:62:84:06:67:9b:d1:48:8d:cd:45:d1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: Nov 22 18:00:30 2024 GMT
            Not After : Nov 23 18:00:30 2024 GMT
        Subject: CN=e9495848956600e481d0dd83437226abf33157fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:34:60:5e:51:6c:00:06:87:19:05:4a:6d:
                    1b:fa:57:e4:85:33:8b:c7:c3:f2:74:e8:0b:8e:96:
                    e7:48:37:21:19:5a:f8:8f:10:ab:74:46:08:ef:62:
                    d9:be:64:8d:69:97:d3:d0:e9:d6:a3:54:56:f3:15:
                    4d:68:f7:c2:eb:3d:57:f7:39:58:95:5f:9c:c8:96:
                    7c:8c:68:dd:84:f9:3c:df:de:04:93:44:da:ad:1c:
                    55:18:c1:98:68:1c:19:e3:4d:b9:1c:a4:68:81:c5:
                    98:76:75:e7:d4:d1:5c:09:70:eb:f4:a3:d6:3b:95:
                    40:c4:99:d5:d4:40:9d:06:ca:e4:74:e6:66:a5:3d:
                    c2:a5:96:cc:08:ee:a7:3c:86:b8:09:e1:41:e0:ba:
                    66:18:37:ac:6a:b2:e9:27:9f:96:78:08:d9:a6:08:
                    c0:bc:5d:b2:01:f4:05:cc:ae:85:7f:e4:a9:2f:97:
                    df:63:a9:b8:4f:1d:b9:62:fa:80:33:ea:fb:e1:63:
                    0c:ba:d3:86:6e:b9:e1:c7:d9:81:58:ce:27:df:8f:
                    9d:b6:e1:83:e4:94:a1:30:0a:b4:71:fe:4d:57:1f:
                    71:82:15:f8:b8:95:bb:28:a4:66:49:82:8b:e7:39:
                    87:9c:b5:cc:f6:57:06:9b:47:4d:bd:ce:60:b3:08:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:49:58:48:95:66:00:E4:81:D0:DD:83:43:72:26:AB:F3:31:57:FE
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e8:a2:74:db:87:d2:bd:b5:be:a2:d0:72:45:ec:b5:a0:71:
         b6:4e:16:70:88:1a:f6:0f:f8:c7:c1:8d:b1:c6:ae:5b:30:54:
         36:10:e0:e1:5b:ba:b8:fa:f7:31:7f:7e:68:90:a8:9a:dc:68:
         3c:34:33:9c:0e:bc:48:f6:73:28:ee:92:05:70:35:ca:9d:31:
         37:4e:64:e6:49:8e:c3:6c:a3:18:af:8e:4f:59:89:c4:5c:31:
         c2:a6:45:e8:2c:68:7f:71:89:9a:2b:b6:54:ad:07:a1:76:3b:
         a2:d0:01:b3:c5:d9:1d:d3:6d:dd:a5:75:14:16:c3:91:6c:f3:
         d7:65:6b:b3:e0:43:be:af:2a:3e:7e:08:84:32:bf:98:ef:f0:
         1a:3f:82:fc:7c:a3:32:4d:8a:bd:e2:8b:cd:ec:dd:36:67:e1:
         ad:ff:99:e0:bd:86:4a:5a:18:2c:68:6d:ab:ef:c4:23:c5:9d:
         a7:3f:9f:16:bc:ac:ee:95:32:d9:77:35:fa:73:12:c6:63:7e:
         7b:09:a8:ac:62:5d:25:86:74:bd:c7:f4:ae:4d:04:47:36:fa:
         89:ec:f6:68:d6:ed:34:c2:11:a7:09:52:d0:1f:c3:e3:47:90:
         25:74:37:ca:f1:d2:0d:1b:2c:86:7b:aa:75:1e:c2:e7:9a:eb:
         94:05:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:47 2024 by rpki-client on console-fra.rpki-client.org