Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
File:                     d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft (raw, json)
Hash identifier:          ghKz26JU9aWMI951s00kp/ElFA9jxm76ExVmX7MIg5k=
Subject key identifier:   41:5D:7A:0E:E7:2A:37:22:BE:B9:E8:11:80:EC:D2:50:AE:E4:01:D5
Authority key identifier: 77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08
Certificate issuer:       /CN=779ee00dd8baa59f53384dd0277a50e8b9802908
Certificate serial:       0193553F36B8586F71949859A4EE5648DB42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 19:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:26 +0000
Files and hashes:         1: _vR8mIbonKuQaKzNe02h_UaJtRc.roa (hash: YGvzHjzclpKWU30sgdT+37Q5JDJ+Tn4BYSLh0KhLMoA=)
                          2: d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl (hash: 1HaqG2fNvppvN0pP0PX6dM/mEZmKotO7kQY3eO3CrLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:36:b8:58:6f:71:94:98:59:a4:ee:56:48:db:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779ee00dd8baa59f53384dd0277a50e8b9802908
        Validity
            Not Before: Nov 22 19:00:26 2024 GMT
            Not After : Nov 23 19:00:26 2024 GMT
        Subject: CN=415d7a0ee72a3722beb9e81180ecd250aee401d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:c4:92:d3:86:d1:37:bd:ab:ce:d4:1f:fd:
                    f5:1f:d7:94:5a:ba:2a:99:d0:82:be:a5:00:17:ef:
                    37:be:23:62:c7:23:4e:6d:88:97:c9:37:e7:a2:8e:
                    71:c5:3a:d6:25:8e:c1:98:5e:05:df:cb:f8:04:36:
                    b4:03:af:38:83:c9:33:8a:2e:6f:24:5c:b2:5d:50:
                    c2:e8:18:59:b6:0f:d7:07:92:56:17:0c:e1:1e:49:
                    d4:0a:7d:9b:dd:c0:83:6f:31:e3:b3:7b:e9:62:2d:
                    e8:a0:d6:59:3c:05:c2:00:69:d7:d4:f4:c2:7f:b7:
                    12:10:09:ea:9c:ab:ac:59:de:5b:95:59:a4:6a:5e:
                    13:b9:8e:4d:08:e0:93:a2:48:f4:34:c6:0a:19:0f:
                    a9:a1:29:22:f7:18:9f:c3:2f:76:67:0b:79:dd:46:
                    cc:ae:d3:0f:4f:77:da:60:a9:e9:d1:06:4c:9c:8e:
                    25:96:b9:a6:10:e0:ab:69:18:8c:a7:9d:50:60:9d:
                    2c:41:94:4f:59:ac:85:ff:08:9f:b1:24:b3:f2:c7:
                    5b:af:04:cb:61:87:c2:85:68:86:a0:73:02:6d:86:
                    c3:cd:06:c7:47:b3:67:50:c7:62:4a:1b:fe:3a:1a:
                    46:79:cb:c1:99:ca:b9:40:01:5c:d2:3f:75:af:08:
                    ca:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5D:7A:0E:E7:2A:37:22:BE:B9:E8:11:80:EC:D2:50:AE:E4:01:D5
            X509v3 Authority Key Identifier:
                keyid:77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:f8:5e:cb:ba:eb:6c:e3:c4:3f:81:f1:f0:61:62:ea:b7:
         26:5e:ff:11:03:7c:4f:a7:3f:f5:af:f1:57:f3:09:72:d4:38:
         35:96:b6:bd:77:ba:18:da:cd:42:43:19:6b:f0:45:46:d3:30:
         f1:e5:97:5d:5d:dd:d0:01:87:e5:bd:0a:ef:b7:19:f5:8a:71:
         98:91:fc:8d:51:6a:a1:79:6a:ce:15:4b:96:0c:49:fc:16:a3:
         a6:d0:87:fd:6a:90:c2:cb:2c:ae:60:79:85:4b:58:a6:26:d1:
         60:9e:d1:ad:75:d6:45:45:b5:53:63:10:c5:38:31:34:04:b9:
         15:c0:96:f0:c9:93:06:50:e6:67:ed:3e:73:34:67:f0:11:db:
         62:81:87:58:ae:9b:61:7c:08:58:48:e6:2e:11:de:84:4f:a7:
         b5:8d:37:2b:64:c8:fa:71:9b:56:17:a7:12:cb:f6:14:08:1c:
         61:35:1e:f4:62:bb:c4:8c:d3:0a:83:d1:1e:6d:8d:28:37:8f:
         a5:b5:dd:d5:33:c2:eb:3e:43:48:b5:19:59:7c:4f:ac:02:8e:
         44:8d:18:54:8c:ce:3a:7c:2e:da:9d:6f:39:9b:21:d6:5a:f1:
         6f:40:2a:d1:ba:44:d4:23:c2:dc:a4:0b:b2:9f:76:ad:7b:f2:
         de:d1:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:48 2024 by rpki-client on console-ams.rpki-client.org