Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File:                     pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier:          9j4yu8Qeb/U1yo91ylDeEV7NJBQMn4XW71mLh3DqHDI=
Subject key identifier:   99:A5:C7:D5:DB:CA:6F:F8:B8:02:79:1F:C0:53:9F:F0:92:9B:7D:6D
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer:       /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial:       01935576548DC0EA2B3B32C8B88362406DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number:          0761
Signing time:             Fri 22 Nov 2024 20:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:38 +0000
Files and hashes:         1: GYndkZqAIr9IcmTQUDNUh3GUlIA.roa (hash: G6VQVhszOAEUpzSBYUZHqmn0x4gt55bvstBXG8En3Wc=)
                          2: MXfLOY6jW9u54zPN4gxmtuLHqXU.roa (hash: gCJP3d+PMb8/KX6dArcYT7YcwE2AH7TLp9HzOC5s44w=)
                          3: Y1jikOAkDGdMFGocyXAdowQOD30.roa (hash: mvz3mtk/e4beejc30DthzP6pGl02djoyVUs/KAqW36w=)
                          4: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: Rm/Kt5TcWdsuOCts3xbV+Zi44qoHHrBqctBSOZP2Tb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:54:8d:c0:ea:2b:3b:32:c8:b8:83:62:40:6d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
        Validity
            Not Before: Nov 22 20:00:38 2024 GMT
            Not After : Nov 23 20:00:38 2024 GMT
        Subject: CN=99a5c7d5dbca6ff8b802791fc0539ff0929b7d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:8f:ea:1e:cc:14:b0:ac:20:d0:f5:ff:fb:
                    06:25:c2:79:35:42:5d:f1:9b:d7:3f:a2:63:d3:a7:
                    0c:ae:d8:0a:a3:0f:f2:43:08:97:ad:a9:2e:5a:da:
                    a1:99:e4:9b:fc:b7:8c:dd:11:24:50:a6:d1:1c:ba:
                    93:bd:61:75:0d:5f:dc:ab:67:4e:b2:af:54:b3:50:
                    21:f6:dd:db:10:3b:80:4a:e7:f1:f4:d1:85:a4:21:
                    05:0b:6d:f4:e1:06:d0:f9:32:38:5b:ea:04:0f:5e:
                    77:3c:42:6a:e1:ad:48:6e:b0:b8:91:da:ec:9f:eb:
                    86:42:71:cb:c0:a8:9e:93:5b:0e:ce:eb:15:8a:86:
                    31:95:20:a9:87:ab:97:92:f1:85:4f:f2:78:32:f6:
                    3d:4a:de:5a:fd:00:29:29:16:ad:3e:64:71:91:e9:
                    7b:d9:db:36:00:84:35:5d:0b:ef:51:c2:0d:32:74:
                    52:97:d2:8a:61:98:11:fb:da:3a:30:36:bc:7e:92:
                    fa:e0:54:71:82:b6:47:b2:ae:05:a0:77:70:39:b9:
                    67:fd:7a:f3:fb:d6:24:58:65:50:77:39:63:f1:5b:
                    31:8e:b0:88:e5:21:d5:30:9a:bb:cc:0a:5d:6d:99:
                    6c:74:9c:c5:d8:b2:fa:49:26:5b:16:62:7b:33:63:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:C7:D5:DB:CA:6F:F8:B8:02:79:1F:C0:53:9F:F0:92:9B:7D:6D
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:30:3d:c0:39:a9:a2:c1:b7:a2:44:9e:2a:08:4c:c7:f1:98:
         db:06:43:2f:e0:4d:ca:71:a5:d2:d7:e3:93:a0:3c:43:f6:c3:
         fa:38:ce:0b:97:e6:d2:51:78:ee:27:88:0d:8d:29:8d:58:53:
         86:6b:58:8a:1a:7b:97:34:2f:d0:4f:38:34:cb:d1:76:40:1f:
         7f:6f:d2:b2:d9:f9:ba:3a:9b:30:24:1c:37:59:21:20:88:a0:
         35:d1:ce:c3:62:33:a8:ac:a8:da:8f:68:65:fb:c4:fa:11:a5:
         6b:65:b2:be:2f:62:da:e5:f1:2c:89:33:43:5b:54:77:9b:15:
         77:be:ec:50:03:6c:62:af:c9:c5:2b:bf:94:61:d5:16:6d:c5:
         da:c5:22:13:23:16:12:72:52:b7:95:89:25:7f:f5:6c:89:01:
         78:10:2b:43:e1:5f:6e:2c:53:83:a9:98:e8:46:68:8d:a5:f6:
         be:3d:be:b7:33:e4:56:e1:d2:73:c8:02:ae:71:4d:97:90:94:
         35:53:92:5e:bc:de:d7:a5:97:12:13:58:ca:87:b3:13:fa:c0:
         15:27:27:fa:83:2d:e4:b6:84:b2:1e:7b:d9:9c:29:96:31:4f:
         ef:8d:06:cf:15:7c:64:d8:a9:00:b9:bd:6f:1e:3e:a9:29:6b:
         5a:27:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:47 2024 by rpki-client on console-fra.rpki-client.org