Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          B4XNgLC6XIy8tPnlpIb8Z2w0QsRA+gRpVtOsqr6DFUE=
Subject key identifier:   DC:44:B0:2F:89:DD:38:4C:8D:B9:59:6B:E6:3B:BB:99:15:9B:75:CD
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       019362C462844CEE6D16CF87FDA222FBCACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          0F7A
Signing time:             Mon 25 Nov 2024 10:00:57 +0000
Manifest this update:     Mon 25 Nov 2024 10:00:57 +0000
Manifest next update:     Tue 26 Nov 2024 10:00:57 +0000
Files and hashes:         1: 79fUImlWMWhi2l-V6gWw5Y3z6gg.roa (hash: vIZA84VABd82PJVrh/qkjpDpmgR0lSA2sFJ8sd1qOTE=)
                          2: 7Q9yn768nB9F2sjNZhhO2QeXfDM.roa (hash: D1P+fo+0AWvulxWPSuq6lNa7wTOm7njtGEBrJSf0zek=)
                          3: 7gABtph01csXg82SiRa9y1wD9hs.roa (hash: Vwzc2iPRpdJRiaLHzHnKdQXz9b7Nrl1ZrGa0t/yZq9Y=)
                          4: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: GnMmSaVl2b5EyS/5DT1bHKyHPM4HQlkPArB4Bwfllf0=)
                          5: MWq-NIe9TcTyra4a1XgGOe8UYS0.roa (hash: OaOSNjLVZmeJkIyoJRZPOk9VyTZDlUEFNemOJEE9Ch0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:c4:62:84:4c:ee:6d:16:cf:87:fd:a2:22:fb:ca:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Nov 25 10:00:57 2024 GMT
            Not After : Nov 26 10:00:57 2024 GMT
        Subject: CN=dc44b02f89dd384c8db9596be63bbb99159b75cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:97:1c:2e:84:a2:d3:4b:0b:af:14:dd:57:
                    b3:61:fb:40:83:27:06:de:3a:a7:90:2c:e1:22:fe:
                    7b:e1:a6:65:87:16:2d:6e:4f:1d:4b:5a:80:a5:ea:
                    20:f1:96:45:83:19:af:8e:5f:ad:8e:9e:39:a0:a8:
                    3f:d0:6a:03:49:33:91:ff:40:7e:e1:31:ee:24:b8:
                    67:b8:35:34:ec:08:8e:09:0b:7e:89:92:ea:12:81:
                    73:6c:ef:ee:42:5e:01:87:ce:d1:67:91:13:9f:4e:
                    a1:3e:bf:0b:b3:b4:d8:c3:c2:1b:c0:1c:a7:fc:cf:
                    94:83:20:df:3b:03:e6:2a:19:b8:05:3d:46:8e:30:
                    01:7f:17:c3:f0:0e:be:8e:3a:09:28:31:f0:c4:19:
                    1d:01:24:de:1f:b6:fd:44:8c:71:a9:66:0d:37:74:
                    62:62:08:7e:e6:7b:18:2c:06:35:9d:43:e6:78:3c:
                    44:dd:ee:37:7d:f9:fc:79:93:8d:4d:7a:e0:5c:8f:
                    4d:a4:d5:73:f6:f9:61:b6:c8:ce:1b:7b:8c:eb:ce:
                    96:5e:e4:5f:74:dc:3f:20:67:be:ea:25:94:f1:49:
                    66:f7:96:19:9b:25:af:f7:ac:37:34:f9:b4:10:62:
                    f8:ac:4b:1f:41:63:8f:0d:f3:ed:5d:25:4a:b7:69:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:B0:2F:89:DD:38:4C:8D:B9:59:6B:E6:3B:BB:99:15:9B:75:CD
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:30:a6:bb:6d:ee:0f:a1:08:a8:c4:c0:9c:5d:7f:39:43:5f:
         35:3e:48:3b:8b:ae:85:11:45:b5:b9:91:15:dd:a0:7a:68:d4:
         92:5f:2c:72:6c:cc:04:c4:d9:46:0f:33:a3:7d:f3:07:ff:5a:
         e5:5d:70:13:bf:a5:69:6b:4f:80:06:50:40:fd:1e:76:ef:ea:
         d3:87:b8:fa:72:35:88:b7:16:98:9b:3e:ba:eb:e2:fc:60:d9:
         27:5b:e5:d8:0a:70:2d:0f:67:b4:0d:a7:1d:98:32:c6:6f:1e:
         99:9a:9b:69:69:ce:fb:01:9d:ab:7a:d7:a9:c4:9d:50:41:cd:
         f3:7d:c3:7d:d6:4b:d2:dc:10:b1:8c:fa:7a:a9:16:8e:d9:27:
         40:31:10:9c:db:99:d4:01:24:74:8c:6c:de:51:97:c8:ab:f4:
         cd:44:ae:f7:a1:b0:80:4d:e8:c6:17:b8:ad:b5:ad:6b:88:38:
         0f:92:cc:8b:52:5e:49:4e:c2:9e:ad:fa:15:b6:af:75:f7:db:
         72:8b:67:5d:4d:b2:90:b1:dd:93:66:c3:0b:70:f2:6f:2b:2d:
         ba:04:11:68:05:24:d9:d1:74:6c:1b:bc:b0:da:f4:f8:40:09:
         b1:e6:c7:d8:36:f2:dc:a7:53:8a:61:6b:42:6a:85:e9:9e:e4:
         b0:a8:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:06 2024 by rpki-client on console-ams.rpki-client.org