Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          IbtTorbicmgnPyt3PX42QsXiM1IzUhZmGND8u5lJ0Sw=
Subject key identifier:   4A:E1:68:C8:85:2A:F6:E0:07:0E:23:49:CB:55:B4:4D:90:6A:A1:EF
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       0193568AFB93B778A72859E0454C67194EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:02:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:49 +0000
Files and hashes:         1: 9I0h-2gZn-GT6bHfxOMOmJ0EGE4.roa (hash: +/dQrI4zK91TaRWVslcXt1VUXD/ghX9jyZ4jQid5O+w=)
                          2: NdfYhyEIlOx2bM1fbY-6y_Mzqu0.roa (hash: GVG5D0DMkIKvSNVyuIcHw5fPR+kX2pfQRbrnBqYsWAI=)
                          3: TINsK14tVkPnTRZR_ZlFXCFyeVU.roa (hash: N/GIm3rtMm0CfXzbos/tlIYsJw7j5xZbBeyzAuoEAKE=)
                          4: _wQSHk03wW5Lf4blHA4JfIh1oYM.roa (hash: Iq0RNI/RXnzo9CWG7STXxSecZ+twPEF2J+dlj2gvdKU=)
                          5: naCDrTI4ZxLMhotNMDHPASIYbZY.roa (hash: aR3PswhmxTD7d0uQzfjJdm7bSPrB/RzWXhv5NZpNO7o=)
                          6: owO_Fpj7ES5g2k-xve4j0Jaaswg.roa (hash: oOb341g8oEofIVH7HHp1M+Dk7OmziBrYUGPCh0e6woE=)
                          7: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: M+T2/3tLnaGeJd0pnBJwN6WAxGRyZCsaC8m0tUu25Wg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:fb:93:b7:78:a7:28:59:e0:45:4c:67:19:4e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Nov 23 01:02:49 2024 GMT
            Not After : Nov 24 01:02:49 2024 GMT
        Subject: CN=4ae168c8852af6e0070e2349cb55b44d906aa1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:c7:cc:e2:96:f9:2c:53:16:46:91:c9:ac:
                    60:40:03:f8:ef:08:11:c4:e9:c3:8f:4d:c4:44:8b:
                    d6:c8:b8:e6:e0:a0:aa:f1:71:a4:22:d3:f9:08:33:
                    6f:4c:36:9e:bc:89:49:b4:1e:b7:9f:f4:b7:d9:d8:
                    04:47:6f:2a:d0:25:60:d4:4f:87:e8:68:c1:71:c1:
                    6f:4a:a1:db:b0:f6:9e:c6:8a:7a:29:76:50:e0:4a:
                    65:6c:33:f9:a4:c4:16:f7:c3:5a:c2:23:9f:0b:46:
                    94:96:40:da:7a:23:13:1c:e5:9c:23:eb:21:50:16:
                    8c:8f:19:f8:6d:df:00:3f:96:1e:60:ea:d5:36:79:
                    12:35:97:e8:a6:02:8c:03:df:32:2a:ad:80:4d:db:
                    df:13:39:3a:6d:95:a9:6d:0a:fb:78:b5:a9:60:01:
                    22:65:ec:5c:49:ca:bf:f6:18:91:83:ff:f0:59:f8:
                    3e:fc:dd:84:00:fd:80:79:d7:ca:ba:02:58:ac:b1:
                    40:1a:69:bf:f3:bc:d4:a4:ae:15:ec:53:7b:e9:5d:
                    fa:17:53:c1:96:dc:6f:64:a4:99:26:6b:1a:5a:32:
                    89:c5:d2:af:47:1d:f5:f7:84:b6:65:9f:b6:81:08:
                    5f:33:eb:b9:e5:21:e6:b6:25:b3:e5:7b:91:f5:15:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E1:68:C8:85:2A:F6:E0:07:0E:23:49:CB:55:B4:4D:90:6A:A1:EF
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:31:9d:df:cf:3d:4a:e6:99:cb:f7:4e:aa:5a:14:6a:ae:
         69:12:b9:ed:98:27:46:7b:9f:25:41:f1:39:83:60:2c:95:9e:
         a7:77:97:e0:6c:3c:4c:1c:5e:bf:81:0b:d8:80:29:55:0f:2d:
         86:96:f5:c1:5a:c6:53:d3:44:ea:fe:1c:0a:ea:bb:7b:46:b7:
         4e:f8:c8:c8:d1:65:fa:b6:1e:75:51:e5:68:bb:3c:9b:c4:f6:
         0b:aa:0c:a4:08:a0:46:29:1b:eb:99:ca:38:23:69:80:13:12:
         b1:5d:78:f7:aa:f9:1a:0e:72:94:b7:06:1a:41:91:84:04:28:
         99:cd:a9:58:d9:b9:60:6a:07:8e:5e:78:37:15:e5:25:ed:a4:
         4a:b6:ea:27:6d:bc:e7:ef:f6:f8:64:e9:f7:a5:b8:68:24:53:
         7b:36:0c:b4:d3:e9:9f:44:22:9d:40:23:2e:8c:23:6f:2b:f1:
         48:49:b1:b4:cb:f5:21:92:1f:67:37:33:9c:58:ed:ca:11:4b:
         ca:5e:3e:88:f7:36:59:e6:06:47:3f:95:4c:d2:1f:06:ea:7e:
         a5:36:b7:5c:06:af:4a:82:6b:63:0b:87:52:e1:f2:b1:0a:1c:
         f4:b6:8c:ae:5d:5f:06:9c:5d:19:97:4d:00:ee:3a:29:63:5d:
         5e:04:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:30 2024 by rpki-client on console-ams.rpki-client.org