Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File:                     hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier:          3FjqG4CQFPkrD1MK9gTM2MoW2bACXGMmgV5PHEBrLm0=
Subject key identifier:   FA:92:7B:5A:33:52:C0:85:0D:EA:EB:D5:BD:7A:C8:AB:BF:2F:F6:D3
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer:       /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial:       0193572D6E1AFB6B4C6D81A6600C1DA60749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number:          046A
Signing time:             Sat 23 Nov 2024 04:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:15 +0000
Files and hashes:         1: BC84Z362X32fz1P7cfRFyJvpl1Q.roa (hash: rVwDqJ9Lz7NIcujtdscMhzJyUpVg0+eWxmcr0K0jFBw=)
                          2: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: 1fTnDxSDXcXuFPbycw9B/DfJyS64Fr4ecnlAHGXrNOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:6e:1a:fb:6b:4c:6d:81:a6:60:0c:1d:a6:07:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
        Validity
            Not Before: Nov 23 04:00:15 2024 GMT
            Not After : Nov 24 04:00:15 2024 GMT
        Subject: CN=fa927b5a3352c0850deaebd5bd7ac8abbf2ff6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:fd:e9:0f:ec:74:2b:b2:f2:40:43:c4:88:
                    69:07:1b:3c:2a:65:65:d0:89:21:86:63:83:99:a8:
                    43:db:6d:3e:97:58:26:af:5c:a5:80:c9:63:65:ba:
                    87:01:a1:2a:2e:9e:4c:75:ba:5f:a9:f2:8f:48:21:
                    38:bc:96:b8:bf:3c:5c:d3:fb:0e:7b:c0:da:b3:51:
                    a6:76:df:6e:ec:4e:11:c7:f5:f6:2f:8b:63:06:33:
                    7d:03:28:aa:3c:3e:bd:0d:61:fe:75:12:09:14:b0:
                    be:04:8a:06:4c:1b:31:54:12:e3:f9:b3:45:f5:c9:
                    fe:a7:ce:12:e2:de:47:d8:72:c7:22:62:ba:5f:0e:
                    c2:42:6f:96:7f:62:51:4a:d7:08:fe:44:4b:8a:d0:
                    04:ea:66:f9:9a:8b:e8:25:a3:34:bf:08:5c:b3:7f:
                    23:f9:4c:2e:2f:15:f0:b5:d1:f2:5e:32:3e:57:c0:
                    cb:0b:32:df:f0:f8:39:c6:49:78:d1:98:c0:c0:e1:
                    10:0a:82:87:a5:90:31:d9:00:ba:17:f0:0f:45:5d:
                    e2:eb:70:bf:a4:ce:66:df:09:c9:2d:48:5b:cf:f3:
                    91:bd:42:61:ec:8a:df:41:96:94:c9:ab:4e:80:2d:
                    62:ef:16:4b:2a:19:17:69:35:5c:f1:fb:cc:1a:9f:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:7B:5A:33:52:C0:85:0D:EA:EB:D5:BD:7A:C8:AB:BF:2F:F6:D3
            X509v3 Authority Key Identifier:
                keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:a1:6c:98:20:a6:58:12:3d:f0:d2:7b:73:2d:69:ae:b2:
         4c:da:e7:a7:82:b1:46:7e:58:41:2a:7d:35:74:6e:ed:fb:80:
         ea:b5:1c:64:a6:ff:d9:28:c5:34:2b:2e:cb:2c:b0:12:76:4e:
         87:9f:2d:da:b9:0c:08:a3:ce:b9:c7:f1:53:6b:f2:3f:23:81:
         01:27:2e:8c:54:f5:48:b1:7d:ce:22:3a:3a:9e:42:e3:e0:7e:
         b6:04:c6:21:3f:e1:e2:0e:5e:6c:c5:57:fe:d8:2b:de:03:3a:
         76:37:d6:39:5c:0a:d4:16:b0:96:66:31:17:18:00:7b:78:f0:
         b5:88:5c:1d:00:f5:33:e6:ba:ca:0a:4b:0e:99:59:33:f2:bb:
         d2:20:09:91:77:78:1d:3c:98:af:ad:1c:9b:17:bb:43:38:22:
         58:4d:b9:03:64:95:da:90:6a:c6:c5:75:ed:17:d0:3f:ad:8a:
         e8:67:2c:8a:78:d9:bf:4e:a0:07:07:e9:7d:6c:5c:17:10:3c:
         57:27:57:d6:6a:5d:54:4f:c3:15:ef:63:41:15:0a:5c:81:40:
         fb:ae:4f:e8:c8:3d:61:4f:64:a2:00:11:f5:d6:9c:79:e4:e4:
         ac:79:cb:be:d6:17:e8:a0:25:1e:77:c8:9c:97:ca:89:09:75:
         61:bc:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:17 2024 by rpki-client on console-ams.rpki-client.org