Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          ODPdQ6/e3v/eEtNquzXBlY672oaPW0zA8tfsCpaySyA=
Subject key identifier:   5A:4A:C4:3E:91:07:2F:68:54:09:D9:C3:F0:C5:F8:48:16:9A:44:0B
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       01936A468AEE55010545D16FE2D55C5E2F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          0FDB
Signing time:             Tue 26 Nov 2024 21:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:28 +0000
Files and hashes:         1: 3PoCEGUHO0F6-bM2snR-v6cWDC8.roa (hash: NmNWpCd8PLoKASNzrrCpWi9O2aNgOQt6RcYJxaJwEDw=)
                          2: C9vKVm9fab3roTzfGAZ68K8T4pA.roa (hash: WpO7lDr5GWFwAo4qtuCLLrsSOwpEzstFJR1xII12bSM=)
                          3: HxZRl2Md5dbaKIxW1lx0SRY6AGk.roa (hash: 8C2BXZZlT1RLr4cTDWMUqTTOpBwJQ7PeyhgjSM0eWdk=)
                          4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: Al++2bcMfdRtpT++ZV0meo8qsQ6W24wYtB7ZZwOGn3Q=)
                          5: zOdJBBMREu07n21F4ltd92KQ8ls.roa (hash: ZsCinYVpkxBnYSp7va66ac94/JQdRJjg+RLMSXM+3xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:8a:ee:55:01:05:45:d1:6f:e2:d5:5c:5e:2f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Nov 26 21:00:28 2024 GMT
            Not After : Nov 27 21:00:28 2024 GMT
        Subject: CN=5a4ac43e91072f685409d9c3f0c5f848169a440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:12:b1:10:e1:37:6e:04:3a:52:53:7e:31:
                    68:90:fa:a7:8e:18:8c:3a:5e:07:cd:78:a4:3a:ac:
                    d4:f0:e8:1f:10:89:5b:ed:e9:42:1b:99:06:db:2c:
                    82:c5:a0:54:f0:43:fc:c8:eb:4c:49:0f:ac:3c:07:
                    3e:db:b1:f4:a1:14:a1:0c:8c:50:76:db:07:fe:a2:
                    a0:33:a2:7d:22:98:8d:6d:31:04:69:76:12:ac:20:
                    d9:fa:54:18:2c:60:05:94:35:90:44:cd:87:3f:67:
                    44:bf:89:3f:f1:a5:82:da:e7:b8:7c:36:01:24:91:
                    81:74:9d:00:c1:9a:4b:b5:76:51:e8:f3:8a:2d:da:
                    58:b5:c0:13:74:9b:cf:94:60:95:7a:66:26:07:20:
                    b9:0c:72:4e:3f:79:4e:d8:ab:73:dd:25:63:93:0b:
                    d5:c7:29:2b:fc:a3:d9:c4:5a:4d:ac:0d:6c:6f:4e:
                    ce:97:38:e9:66:5c:16:44:12:38:df:c9:3b:06:75:
                    ce:13:00:b3:03:18:f1:58:a1:26:e5:c2:ca:c2:39:
                    69:87:c7:80:c5:8e:2d:ca:c4:12:a8:d7:e1:01:06:
                    e2:3a:76:43:47:3e:db:de:9b:56:58:e3:0a:b2:79:
                    1a:7f:83:f7:16:40:da:13:80:df:8f:fc:36:4b:cb:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4A:C4:3E:91:07:2F:68:54:09:D9:C3:F0:C5:F8:48:16:9A:44:0B
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:04:fe:76:7b:f6:03:a7:eb:1e:67:8f:64:a1:ac:b4:90:
         05:1d:fd:88:99:64:d5:37:be:a0:0c:16:2a:c9:a6:ac:ad:47:
         46:29:86:99:8b:59:15:9f:9b:24:97:b9:31:d5:9a:78:6f:c3:
         fb:d8:ac:a4:d6:15:0f:31:2d:56:54:f2:fa:73:58:c9:ca:bd:
         48:d5:b0:68:f1:d6:df:17:e0:19:b8:54:22:01:b0:be:10:f2:
         1d:9e:fe:45:d5:e3:1d:95:8f:01:08:3f:17:76:df:6a:0d:81:
         74:ad:19:9a:2b:11:2c:02:f9:83:1b:11:e8:3d:e5:6b:8c:15:
         a1:a6:57:fa:3a:21:4a:99:3c:be:92:05:c6:08:14:44:9f:50:
         00:d2:28:0f:f9:cb:44:21:ba:24:e7:f3:36:23:3c:a0:43:01:
         06:79:5c:09:ca:6f:3f:4c:fe:1b:b2:72:ea:11:a4:2c:8a:7c:
         66:d2:10:2b:c2:82:da:6e:1e:3b:e4:d8:d2:f6:e8:4d:54:26:
         49:ce:de:8b:fd:9f:42:c1:a3:32:1a:f4:c2:35:09:71:d9:f7:
         71:cb:f6:58:3b:66:5f:e8:f8:a8:6d:8a:ae:d8:e2:34:5b:a2:
         7e:83:0c:9f:38:dc:3d:5f:ae:ec:c5:2f:ab:db:42:fe:ef:5b:
         67:90:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:35 2024 by rpki-client on console-fra.rpki-client.org