Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File:                     iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier:          PEt7cZX1fphysxBlSB7WqMvYCD07wsPKgbLHqBWp23o=
Subject key identifier:   79:3C:92:B6:0D:5A:54:94:39:5D:52:2D:78:71:A4:C6:BF:1D:03:54
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer:       /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial:       01935688C60A7F61FC43A6EFEFEBBE4F4739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:24 +0000
Files and hashes:         1: 1-k_KmZOBusITFY5I4gikxD7IMzQ.roa (hash: 79zln1HPthu79FYLzjfgPfgoaBv6A7oXYyV1p8vlRK8=)
                          2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: N7u/vhmg9uQEyC5ORBwTju79WAG7AkqQPtuf2yL5Gk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c6:0a:7f:61:fc:43:a6:ef:ef:eb:be:4f:47:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
        Validity
            Not Before: Nov 23 01:00:24 2024 GMT
            Not After : Nov 24 01:00:24 2024 GMT
        Subject: CN=793c92b60d5a5494395d522d7871a4c6bf1d0354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:2f:8a:99:1b:e5:ab:7e:88:97:33:6c:f8:
                    b3:44:92:cb:61:0b:1d:37:2f:33:7b:e3:c5:a9:0c:
                    14:3c:54:de:d7:c4:a5:5c:0b:bb:ea:5f:05:7c:13:
                    12:2d:a7:2c:50:f4:3e:3d:a6:77:55:ee:96:38:81:
                    31:1b:04:7d:7f:6a:c1:1e:44:2e:70:cc:ed:e8:5a:
                    4d:80:20:20:dc:ba:e8:d3:fd:eb:1d:0e:33:3b:a9:
                    5f:8c:59:e5:46:9a:22:c3:aa:1b:cc:80:a2:71:29:
                    47:f8:c1:5d:bb:34:d4:34:30:dd:b8:98:8f:f1:19:
                    c5:36:32:aa:e6:cd:dd:10:8a:be:55:b1:2c:a1:c3:
                    a0:ca:54:a6:ca:11:32:4e:e7:2d:7b:d9:01:60:27:
                    6d:e5:8a:a6:08:99:45:b5:6b:53:3b:b4:d7:e2:44:
                    f7:b6:6e:87:bf:7e:f7:c6:51:78:60:d4:7e:ff:11:
                    39:0b:3d:1d:ad:2f:fe:5e:09:1e:3b:29:88:4e:fe:
                    ed:bb:4b:7a:6a:c8:18:0d:f0:12:b9:3f:7f:14:27:
                    e3:b0:b6:c1:2a:80:b1:8c:6d:ef:79:7c:4e:21:a4:
                    6c:14:8e:41:36:f1:34:80:4b:b5:9d:ce:53:66:fb:
                    30:60:d3:76:db:4a:bc:75:42:08:63:29:78:0c:7f:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3C:92:B6:0D:5A:54:94:39:5D:52:2D:78:71:A4:C6:BF:1D:03:54
            X509v3 Authority Key Identifier:
                keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:15:e7:8c:c5:0c:97:57:3c:e0:78:6e:c8:04:46:93:b3:
         d7:ad:f4:f3:0c:17:5b:1e:c5:84:ef:33:c8:b3:2c:83:da:35:
         f1:5c:79:fa:58:fc:6a:7e:23:e0:e1:9d:38:95:f5:d4:48:dc:
         13:78:40:af:43:fc:b0:5f:17:9c:c4:f9:a8:db:25:08:73:ce:
         30:69:6a:17:72:7d:91:b5:30:8d:ef:c6:1e:7d:93:1e:d8:52:
         91:da:9f:42:34:dd:55:e7:c2:c4:85:fb:3f:02:86:65:02:22:
         ee:f8:a9:65:0c:20:b3:1b:84:3d:5d:96:de:bb:3b:c3:d8:df:
         70:d1:dd:48:37:d7:21:65:09:6d:41:5c:f5:1e:10:d0:c5:ce:
         b4:3e:06:83:16:bc:5b:b1:e9:d0:86:c5:05:fc:ae:9d:9b:7d:
         d1:52:26:91:0f:12:c9:c5:b3:65:b1:39:b9:01:b0:bf:ea:5f:
         b1:11:88:4b:f5:df:45:99:48:16:6e:db:d7:5c:7b:4d:e9:00:
         bc:2c:1a:de:a2:7d:d3:fc:c7:c1:d0:e0:a5:3f:8d:71:2d:50:
         10:6e:69:d0:77:14:15:41:6c:c3:be:91:e5:c8:43:d9:89:16:
         76:0f:4f:fa:1e:b3:19:bf:64:93:f2:37:29:02:d9:60:f7:1b:
         88:c1:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:44 2024 by rpki-client on console-ams.rpki-client.org