Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File:                     0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier:          ZIut/ptpoa9dFOa0Vqz4qsd/baChX/E3dIbp2j9J+Fs=
Subject key identifier:   25:A6:89:47:CC:8E:9E:C8:73:4B:1A:CB:A3:CC:96:41:F9:0C:70:18
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer:       /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial:       0193572DCD849FE0849EEC6B983BAED1F851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 04:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:39 +0000
Files and hashes:         1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: u4t/ZuZAUUJZp/Rw81mndje8qetFnA7fd22YImrSr+g=)
                          2: 8OHRv5RyW0FKLMBVpJ7CJWfYtEM.roa (hash: 6qAFFMhREgdAe2I81oqcFoaxgk06wJRAWHZF0aBUnh4=)
                          3: MR_57AFXMXoRrUdCdmpkDltOtyE.roa (hash: bkFu0cEmDaP0SSpZYVEiVUsbn2ddv79F08eXyZggnx0=)
                          4: gAEvp1-KM4UOuiTMfXLLnP22VsU.roa (hash: TFGDocGw8j0tswS49YYRh7cl9NtHFJdmWzGKm8AHgRg=)
                          5: jEOvpcdFKWI8wf4Ui1r-zXAjfgY.roa (hash: dleyQRweaO5HWrXAd7te/yMUxo5v2A1Z0o+PNDuExvE=)
                          6: t9F8dY0PEBZp_VZ3YVBBc7CSe-o.roa (hash: h+k4HNy10swJtkhmU2Yv7+HS7rzLsWGT9CVEOoxeEMU=)
                          7: w_ZX0yuJdz5wpwGKwC5rwZIn3Pc.roa (hash: nDyGmJ5Dat2CTwaK83rfZdo2YbcFBKkmBUZqH/fb4yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:cd:84:9f:e0:84:9e:ec:6b:98:3b:ae:d1:f8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
        Validity
            Not Before: Nov 23 04:00:39 2024 GMT
            Not After : Nov 24 04:00:39 2024 GMT
        Subject: CN=25a68947cc8e9ec8734b1acba3cc9641f90c7018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:31:52:b8:07:ad:88:8c:58:81:ca:c3:b2:
                    a9:c8:eb:27:0b:82:fb:06:63:bf:1c:06:2c:c5:6e:
                    7a:be:f0:e1:e3:5c:e0:25:34:31:30:96:d5:6c:06:
                    90:74:7e:30:11:ee:b8:7c:39:58:12:a6:18:20:d9:
                    94:0f:48:41:6d:50:4e:b4:6e:b1:17:d5:8b:b8:24:
                    8c:70:da:b4:8c:a1:79:de:f2:ef:59:ef:e7:bd:40:
                    d3:39:71:ee:7f:5a:df:5a:d8:58:5e:34:e3:da:6c:
                    2a:3d:c0:c5:d3:28:22:c1:e3:6d:70:d8:09:b1:01:
                    d6:b4:14:48:9f:3c:f8:38:5c:28:70:1a:68:1d:95:
                    db:cc:73:99:22:ec:da:5f:43:fc:38:d2:bf:0e:40:
                    7d:ed:58:de:5f:47:e9:41:e6:24:7b:87:14:32:98:
                    dc:ca:2a:ca:c4:f7:02:32:a4:29:e9:eb:cf:72:08:
                    be:7c:5d:2e:ec:0f:26:99:f4:ea:9c:99:28:33:2c:
                    bc:4c:16:98:b7:77:56:69:f1:04:02:63:d3:48:8c:
                    95:9d:cc:50:2c:d8:e3:bd:7f:db:5e:02:c3:d2:fd:
                    f1:8f:cc:bd:f6:79:d5:fa:18:81:ca:f3:be:38:db:
                    d5:d8:60:4a:b1:07:cf:9f:26:0b:16:f8:9b:fb:09:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A6:89:47:CC:8E:9E:C8:73:4B:1A:CB:A3:CC:96:41:F9:0C:70:18
            X509v3 Authority Key Identifier:
                keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:13:64:32:f5:06:f3:44:49:1a:2e:25:34:a9:14:11:94:
         78:25:14:f2:b7:92:8c:ca:0f:e6:6b:aa:72:14:76:68:cf:83:
         dd:11:be:73:00:5e:fd:ff:cf:40:83:30:e1:9a:db:43:05:f2:
         5b:53:79:b9:13:5d:ef:fa:78:19:70:c5:c2:8f:0b:1e:a0:c9:
         68:b7:4b:3b:41:a4:98:e5:dc:ed:5b:4c:55:63:14:32:fb:9f:
         99:b1:75:62:58:ff:49:be:64:12:1c:41:8c:be:42:69:9e:5e:
         57:3b:4d:96:68:0a:39:e0:e0:aa:6a:81:7d:a0:6b:75:18:ab:
         86:fc:c8:7d:3f:cb:18:8f:46:da:7e:67:64:ed:b8:81:a3:0c:
         c7:1a:29:38:b9:64:1b:13:02:99:45:00:ee:01:66:ee:f6:17:
         41:06:0b:a4:ad:26:49:b6:46:71:26:23:9c:4a:73:37:62:58:
         15:74:cf:31:5f:94:06:21:70:d6:f9:d2:da:3c:93:d9:43:4d:
         bc:f4:5c:64:57:62:2b:a9:8c:83:be:64:9e:b8:bb:22:64:96:
         1c:bc:af:e4:d3:44:fb:cc:c4:80:89:72:53:21:c8:16:b0:45:
         0c:47:0e:fd:4d:e4:e5:ce:e4:3e:d3:a6:0f:60:28:4e:ba:a8:
         80:50:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:52 2024 by rpki-client on console-fra.rpki-client.org