Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          QHzgOyQAK9uIbRVyMtnkV+KldYt5+MUR5BSQ11oG6W0=
Subject key identifier:   77:F2:55:1A:7C:9A:1B:3F:1B:E5:3E:06:F7:44:4D:89:89:34:B7:1C
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       019355AD4B9AB74E80113A54C4FB345C26D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 21:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:40 +0000
Files and hashes:         1: LbMSzWjj0b7RAyhVE_rwX0eoJsE.roa (hash: brzj2PLQjt+FqlZTi6y7m3QGOFzLDfzi/MQ/T+R9xgQ=)
                          2: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: PasFiosRY53Q8hfnUVggK776afL+bXmUCOLk8iL3jkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:4b:9a:b7:4e:80:11:3a:54:c4:fb:34:5c:26:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Nov 22 21:00:40 2024 GMT
            Not After : Nov 23 21:00:40 2024 GMT
        Subject: CN=77f2551a7c9a1b3f1be53e06f7444d898934b71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:b4:d9:9f:d4:8d:9a:d2:ec:75:26:60:5f:
                    7d:9d:66:61:fa:52:5b:21:8d:cb:7a:b6:a9:39:61:
                    3b:37:29:26:3a:71:f0:09:f6:73:25:df:da:60:63:
                    6d:2a:07:95:b1:59:8b:24:c8:74:f4:b2:d7:d8:cb:
                    36:1e:86:21:42:36:4e:67:cf:0d:ab:31:dc:87:a8:
                    18:13:06:46:3d:3d:4b:7b:96:a2:36:8c:bd:5e:56:
                    d2:71:e8:3c:5a:39:5f:19:dc:31:49:32:47:7c:2e:
                    68:d7:a3:0e:ad:92:59:bc:9a:95:11:f1:e8:8f:3e:
                    15:4c:cd:72:e9:e8:6b:bb:f7:b8:fe:9c:52:c1:5c:
                    37:d0:4f:0a:77:63:52:21:1f:c9:3c:b3:d4:79:7d:
                    9f:94:db:d2:48:e1:78:fb:19:a6:1f:37:f5:84:cf:
                    e6:72:8e:a0:b8:f2:64:fc:1d:8a:c6:94:bf:50:57:
                    a8:b1:b9:89:eb:60:d1:f4:90:22:75:eb:94:9e:33:
                    a0:37:18:02:ab:85:62:e2:68:19:b6:c9:9a:d6:21:
                    cb:88:45:ee:a2:02:37:d5:56:fa:c0:e8:ef:16:95:
                    f8:bb:3f:f5:c0:46:34:b6:83:ce:f6:5c:ce:9e:75:
                    ab:56:ca:18:09:8c:7b:30:a9:08:32:a2:7a:a1:37:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F2:55:1A:7C:9A:1B:3F:1B:E5:3E:06:F7:44:4D:89:89:34:B7:1C
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:49:0c:bc:ef:ca:f0:dc:7d:86:84:d8:d0:50:4b:df:09:5d:
         5f:3d:ea:6c:28:f4:15:4e:77:bd:98:9e:af:08:c5:0c:86:9d:
         34:4e:4b:54:0a:2e:1d:ff:95:7d:97:9b:49:07:79:33:bb:48:
         32:ff:65:e6:ef:65:c7:b3:96:d6:df:d1:48:94:6b:33:54:9b:
         f3:da:38:1d:ca:9a:33:c5:0f:79:ac:0b:56:97:44:bc:8c:1a:
         1e:d5:f1:8f:ec:14:5a:89:8c:d7:0e:4e:ba:ed:82:d6:b1:c5:
         80:e3:2d:6c:73:38:4f:06:74:90:5a:e6:f5:f6:c5:10:52:b7:
         92:f0:48:8f:61:2e:e0:c6:49:a8:e2:88:f8:60:53:be:e2:5f:
         8c:d2:96:59:5b:2a:94:fe:9f:fe:58:f6:44:d2:05:9e:c2:65:
         cb:15:e2:33:39:64:53:04:1c:ba:c3:84:8e:04:f1:11:30:55:
         a0:a5:7d:20:bc:2a:23:ca:fe:43:c7:0d:8e:f4:09:6e:88:06:
         5d:b8:be:05:7c:f4:14:c0:39:c7:74:e8:ca:30:bf:85:17:18:
         4d:77:d5:39:68:67:da:72:fc:bf:83:74:0e:70:c6:72:9c:49:
         fe:17:e7:43:a0:8a:93:60:42:aa:ac:b0:41:ab:17:f9:fb:65:
         7a:3d:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:31 2024 by rpki-client on console-fra.rpki-client.org