Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File:                     GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier:          B+Au3Is3RxkI+APblecVi6kZhyj4yhD8xtO5lDwOg/8=
Subject key identifier:   3E:EC:99:95:FE:0C:05:87:35:F0:52:40:0F:3C:C9:BA:50:70:E3:2A
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer:       /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial:       019356F6CA67E02F7621DF86BCCA724AC17D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 03:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:34 +0000
Files and hashes:         1: 4ARG7dN_UWclQ-rfAtZG7qsBAP8.roa (hash: FLt7IJ3Qv/PbliOseWo5lqCzOpguJYkHs4AV3VE7pcw=)
                          2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: LBV0gaGcBvILF9nj98P1QZQ5Af5z2wUszewD23+/0AE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ca:67:e0:2f:76:21:df:86:bc:ca:72:4a:c1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
        Validity
            Not Before: Nov 23 03:00:34 2024 GMT
            Not After : Nov 24 03:00:34 2024 GMT
        Subject: CN=3eec9995fe0c058735f052400f3cc9ba5070e32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:29:45:92:16:e9:66:8a:5a:b0:29:5f:65:
                    d6:56:9f:39:9e:59:34:0d:77:8e:4a:b0:1e:c3:b3:
                    23:2d:0e:68:97:e4:f6:71:59:1a:17:65:ab:39:3a:
                    cd:ec:ae:4b:3b:dc:98:8c:6d:2a:8f:b6:e1:93:f5:
                    e7:d7:da:34:38:c8:67:0a:e5:02:af:d3:50:9d:a3:
                    da:06:4a:06:c3:eb:b7:3f:bc:d1:26:8d:08:4c:ee:
                    a1:2f:55:cb:17:70:5d:7d:6a:b4:db:c3:87:95:e3:
                    94:99:6f:a6:0a:a2:24:1f:6c:08:e9:1b:4f:b4:29:
                    7e:35:5e:b6:5b:5d:c4:ff:bf:42:cd:6d:3f:dc:22:
                    a1:6f:b8:4d:d1:9d:09:d9:1c:70:d5:20:6b:19:a2:
                    f4:7a:45:dd:66:53:55:05:9f:85:e8:a4:e7:d7:24:
                    4f:a9:cf:56:15:05:ae:cc:9d:d5:a4:29:bf:7c:d7:
                    a2:d2:3c:36:0c:6b:f4:f3:90:0c:ec:f2:50:44:8c:
                    b2:07:bd:62:84:ac:40:9f:e2:e5:8e:56:18:be:c3:
                    3a:7e:7b:5a:26:85:0b:dc:67:bf:18:34:36:a5:c0:
                    05:87:dd:58:12:52:39:85:8e:49:ee:dd:a6:c2:cd:
                    bf:95:68:90:69:b3:3f:47:3d:36:f2:45:cc:b9:f6:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EC:99:95:FE:0C:05:87:35:F0:52:40:0F:3C:C9:BA:50:70:E3:2A
            X509v3 Authority Key Identifier:
                keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:72:7b:01:a4:b6:d3:a8:7f:12:ef:2a:ef:a7:41:38:85:
         91:ee:a6:89:be:7c:ab:b1:3d:cf:d4:cb:e9:d5:b7:58:2d:6b:
         41:57:2b:14:a1:ae:f3:2e:95:63:07:3e:e8:25:82:6e:c7:88:
         6b:9b:33:38:6b:b9:8b:ef:47:3f:87:33:98:54:87:ca:7c:33:
         e8:4e:1a:e1:9f:3d:07:37:4a:66:a7:15:83:0a:b5:76:7b:f4:
         59:d3:35:62:6d:17:07:4f:77:73:93:69:6b:5e:4f:cd:03:51:
         2d:59:57:b8:4c:3a:83:09:b7:16:7b:ed:73:e3:ac:05:91:47:
         7c:ea:3a:90:dc:8a:31:4e:54:c6:d3:08:b8:28:a7:98:8c:f5:
         f6:6d:56:0c:30:b7:f2:13:2d:90:04:1b:ee:e4:be:4e:ff:72:
         72:1e:24:29:88:3c:de:dc:11:46:2e:05:f5:7c:c2:4c:3a:b8:
         73:d1:f6:13:09:d0:ed:06:e8:02:9a:6d:87:7a:7c:d0:13:a1:
         36:dc:f7:df:fe:73:af:c6:0c:7b:b9:48:ee:df:18:7b:58:cb:
         6f:73:35:40:22:d0:06:14:28:ae:e3:8a:a4:79:0e:f8:a1:73:
         98:57:c6:ae:85:ce:9c:be:01:8b:54:64:9d:4e:8a:e8:91:ff:
         87:9c:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:57 2024 by rpki-client on console-fra.rpki-client.org