Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          CWqBPrSSJCFbSaJHcM5zKzwtcguJhbuYHHZJjX37Z4c=
Subject key identifier:   25:02:31:C1:67:29:12:70:01:3F:FF:B1:B1:B2:3C:FE:C3:B1:2B:7D
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       0193576479DAB02535CEE536BF339B7B9D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          1387
Signing time:             Sat 23 Nov 2024 05:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:22 +0000
Files and hashes:         1: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: In4MEZNqY5ZwgjFtj154Uu7Q44CNb3QvMcuXn6+6E4A=)
                          2: 1K8NQnbBMKW92e1n-63Uee1O1uI.roa (hash: y0vUXBRpTYZ+R8SiKT8GEIFwC0b+Lcx5kr2TlzScLvs=)
                          3: 48vbwqd0kM9YU_DxFPRhsko7wcg.roa (hash: Ioebo+nv8Etgm2wA9n3MYMsanXwaytJgtWKwUimi5Yo=)
                          4: CymF1nchgVW0vDZfFioJrzbkQ5I.roa (hash: dh0RKkiXeiyHgqu/d9QQnpQqA1hNYatCU01GldFD0r0=)
                          5: DZCpzPKc-IuyEMHXJrrLdQZmk5A.roa (hash: AbR3T9z5e+CKOnNvhG+EOOwcjQmJZPzqdctLg99laAk=)
                          6: J0_CLpWzDeS7m3t-mYkBwuhdgeA.roa (hash: yicuwRpdOM/ZZ59rqIk/zdQ93cHh5OUKRZu0pLvPiws=)
                          7: Od16Z38VCI_NnVkZCHK9hxsLvJg.roa (hash: t9L02Vkh/g/TqI+GJ1Meb8kN6IGxFGeJHaG4V2ZXqKc=)
                          8: SWWdzfKISndFcbrDaPcWAZb2fF8.roa (hash: ztLImufapOYp+PNA6WrVd+oJkIBtg2Mg0vDzUCgEpUI=)
                          9: U4xqTxhyBsQqqQqYQs2s3jpxaOI.roa (hash: 6EcsHrZ15RjlXRoEpVNyfi8sIpbGa6JMJpy/QFSVpJA=)
                          10: ZvmHFcWNZeQ1XtFOWZXTDfdKqok.roa (hash: eNRGYTBzQuyiSkNpaeosMdJ7pAzVJBMZZeDho/3JMbM=)
                          11: aeC4JxsxhFxd97iNG0cLafef3VQ.roa (hash: ysnasqurUK2eeDM3AdNB4/ZfZuZ9xpkAFaAEEpiPW1Q=)
                          12: atj-mILuL669zZU6NsEr3Cl-Rvo.roa (hash: l7e7/RbROSzv21/aqjecU4pVHJBt9uABWiqfJEkdOGA=)
                          13: hhxyQU__fAlrXklmRcUF5nLLzNA.roa (hash: cPAy3rRz6DuUknV5hryfbE1M81fLUAcoc3GV5Jrunyo=)
                          14: mQTx88mQ0MRlTA_EwTmlpizVjqs.roa (hash: chJjt0RXIogy63vOKuV4oXZ8dZznCbjuQFHZvX8vwjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:79:da:b0:25:35:ce:e5:36:bf:33:9b:7b:9d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Nov 23 05:00:22 2024 GMT
            Not After : Nov 24 05:00:22 2024 GMT
        Subject: CN=250231c167291270013fffb1b1b23cfec3b12b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:94:c8:66:7f:f4:09:cb:0a:ef:35:72:33:
                    f5:b0:15:e4:dc:e7:c9:a1:c4:21:0f:e0:aa:c8:88:
                    8b:16:c6:4e:36:86:95:77:9d:cb:95:6b:33:c0:40:
                    ef:25:e7:f9:ae:0c:7a:ff:de:83:ab:04:e6:c2:11:
                    4f:09:2f:c2:0b:09:63:d0:94:8b:2b:71:c7:73:83:
                    70:ea:59:3f:35:8f:ea:a0:b0:b7:7a:cd:5c:d8:05:
                    8f:c6:45:b2:48:d8:11:38:d8:c1:77:d6:4f:05:27:
                    d5:47:38:99:18:11:61:b5:51:7b:d6:ae:a7:b1:30:
                    38:b2:50:17:c6:69:0d:a3:09:ea:ab:dc:bb:dd:ba:
                    b5:d9:ff:bb:7e:7d:ea:fb:2c:0d:c3:f9:56:6a:1c:
                    e3:0b:00:d6:f8:85:8a:86:27:7e:54:f1:e1:ba:31:
                    6b:b0:e6:09:8b:ef:b5:0c:4f:ef:b0:f1:73:90:eb:
                    55:02:11:a7:c6:39:0d:ac:76:a3:6d:41:fc:e4:3b:
                    5a:2f:49:61:f6:59:b7:63:87:d2:e9:0f:3e:67:c5:
                    7b:d6:e8:d4:56:da:d9:0b:55:f1:4f:7d:22:8a:a9:
                    6d:0f:98:5f:2c:f8:13:d1:79:74:04:94:fa:35:98:
                    ee:07:0a:1c:d2:e6:d7:cc:57:70:21:ce:d4:f0:c8:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:02:31:C1:67:29:12:70:01:3F:FF:B1:B1:B2:3C:FE:C3:B1:2B:7D
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1c:d5:5f:47:50:93:d1:54:44:4a:ec:81:d6:70:e1:51:6c:
         79:d4:77:65:ea:e4:81:84:bf:45:bb:86:ca:93:3f:13:53:3d:
         ca:58:3d:4a:ec:1a:e3:d7:8f:86:ec:87:d9:c7:e8:72:a6:dc:
         5d:8a:7f:3b:e8:6d:ec:f2:09:ca:17:03:24:9c:82:b3:1a:18:
         c4:24:3c:5c:b8:8e:fa:56:34:06:03:5b:98:90:d4:e7:e8:8c:
         ea:28:18:15:c1:14:31:14:02:d7:de:d1:73:b7:a1:50:f4:82:
         e7:d9:af:cd:8e:d9:2e:27:42:07:7a:9b:ef:43:98:03:a8:2c:
         40:9d:87:2b:46:ca:85:77:9a:6a:9e:ac:74:7d:f9:e2:9f:29:
         18:41:6d:eb:e7:5c:01:60:2f:bf:64:68:4b:4a:ab:10:21:61:
         9d:15:50:62:04:59:8e:c8:fa:da:d5:94:2a:f4:5f:6a:15:59:
         8a:da:cb:31:4b:a8:e5:29:df:3b:4e:d5:8c:c8:b0:67:f1:ff:
         70:f0:95:3b:97:e7:1b:42:3b:d6:9c:4d:d1:e6:eb:a9:08:47:
         f9:42:9a:11:72:13:61:91:9d:ec:4e:42:92:1b:6c:60:71:fb:
         2f:bb:c8:58:17:8d:dc:28:90:a9:a5:cf:ec:c4:45:f0:72:87:
         6b:b7:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:15 2024 by rpki-client on console-ams.rpki-client.org