Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          8Vr0LfKJq3LuLSVqvuxYSY1qe1SS5DSejpOBAMmvSew=
Subject key identifier:   25:5E:65:C1:2A:D0:2F:95:35:5A:D3:16:91:57:D0:C6:EB:6D:2D:DC
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       0193595333680F08D08C2B3B101C8E243384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          10B2
Signing time:             Sat 23 Nov 2024 14:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:45 +0000
Files and hashes:         1: IjqgYgZhmkJN1FFTKOB2q8MXn60.roa (hash: 8ROufLNEuQUDrf/HTDr+Nr2BDTIc7TPKcCmE1UewAcI=)
                          2: JBxZoSrW35odi2y3ehUGir85gpc.roa (hash: ZfSkxCcbTlzdkdkhesmXPLL34s/OH7HxxneQyJ7Fr8I=)
                          3: Pl1pKCoQYqFXYXSJZKmnb0uNJog.roa (hash: YYw7h/HVOQ+xr/z/kn98QxIMVVOmgaQGAJdsgShCxDA=)
                          4: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: A9o5u/0w55IzoohkWO6tTiDD/Vrgc6IT5SL+R8zNW2k=)
                          5: xRc_2SKdp0p-SJGSKhVg55XH7-s.roa (hash: ZoIPyJeUp4y/LLPvEnNsmwnyYRemRxF2Hg5Mt+cr1H4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:33:68:0f:08:d0:8c:2b:3b:10:1c:8e:24:33:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Nov 23 14:00:45 2024 GMT
            Not After : Nov 24 14:00:45 2024 GMT
        Subject: CN=255e65c12ad02f95355ad3169157d0c6eb6d2ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:65:b2:c1:8a:6d:f6:6d:02:00:12:36:c1:
                    1d:19:a5:76:e1:00:35:e4:88:41:63:f0:df:38:99:
                    fe:f3:3c:d5:49:86:42:2b:b1:31:44:ca:fa:4a:31:
                    d4:b9:98:d1:06:c0:a3:06:e3:92:a2:40:34:02:3a:
                    33:b2:f7:e5:b7:28:29:a5:a1:e3:5f:8e:a7:24:9d:
                    7e:6b:00:91:92:5b:a6:12:6e:5a:5f:2c:49:00:eb:
                    9a:1c:8e:d7:3c:57:e3:d5:32:28:7a:11:01:fc:ce:
                    ba:23:8c:f3:c3:f2:d3:1b:d8:fa:19:59:7d:e7:68:
                    fa:a1:91:f1:23:39:20:d5:f6:d2:b5:23:f8:33:94:
                    63:ad:11:90:97:a0:2d:bc:ff:c5:93:76:9b:c4:2b:
                    dc:4c:ad:7a:b2:f4:37:c0:62:8c:c8:56:b9:bb:f7:
                    78:d0:3a:56:86:e7:51:99:16:09:88:08:e5:ab:24:
                    98:19:d6:fd:3a:88:89:e4:2b:36:d2:71:2f:9a:8c:
                    b9:72:36:c0:56:16:83:80:f5:94:fa:43:de:23:13:
                    c9:df:5c:48:a3:33:11:be:43:4e:5c:2a:3c:79:57:
                    8d:2d:9c:17:b1:48:cb:78:a6:38:8f:22:0b:8c:a2:
                    d3:d4:13:df:e8:03:f6:57:20:42:46:b1:fe:0b:cf:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:65:C1:2A:D0:2F:95:35:5A:D3:16:91:57:D0:C6:EB:6D:2D:DC
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:ed:f1:68:aa:eb:de:af:a6:5f:f6:32:d0:d6:4c:cc:c0:
         e1:3f:c6:fe:af:c9:60:4f:6c:88:10:e5:38:af:0d:22:c3:51:
         44:fb:0c:00:79:69:62:24:d7:4b:de:4a:1e:a6:92:9a:2f:1a:
         59:a9:29:35:e2:c6:f1:d9:07:4a:4a:18:d6:50:12:e5:67:8a:
         d6:15:a1:53:a3:d9:98:b9:1f:a8:e0:1d:f1:02:dc:8f:9f:0a:
         b8:d6:ac:0a:8f:ab:62:3b:4d:55:06:e1:cc:25:45:72:f1:57:
         62:03:bd:e1:0d:1a:9e:0f:c4:f0:d3:4e:f8:71:ed:21:c0:b8:
         99:7b:46:8b:a3:3a:51:9a:0d:1c:d4:82:ea:48:5d:c8:d5:b6:
         85:65:7b:cd:e0:aa:b7:24:c2:74:8a:51:e9:5b:6b:ad:62:bf:
         ed:64:b0:a0:0b:2c:83:15:a6:31:f9:2d:9c:24:94:a4:a6:27:
         ac:b7:c7:2e:67:99:61:46:e6:8f:da:3e:74:48:a2:a2:c9:f2:
         24:a3:54:1b:e1:9d:e9:63:b6:cf:7a:f8:32:e4:96:60:a7:8a:
         71:6b:ae:a8:cb:12:42:dc:dd:ba:55:f5:79:6e:5b:a3:ff:a5:
         d5:9c:59:50:d5:dc:df:60:a9:73:7b:5d:87:49:94:40:c6:f7:
         26:7c:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:29 2024 by rpki-client on console-ams.rpki-client.org