Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File:                     hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier:          q7fYCmPCLqG5YK6rzOK6todpFjni/nhi4hBN3x38vv8=
Subject key identifier:   43:1F:8B:E4:BF:CD:00:47:26:25:95:9E:E1:7B:38:12:8C:B9:6A:BD
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer:       /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial:       019352ACF4BB6BDC5D168D086290B88B80CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 07:01:26 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:26 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:26 +0000
Files and hashes:         1: SWC57OqRIOpV2yhCCx9NLVFaXJ8.roa (hash: 9Eu+9eUM9a9QcpNTP3oLmuVLtNJ9Ny8d0KInYIk7tiI=)
                          2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: a4nFS7k4eRNpQjAIllz6hVUde8gYS6qgNHyHWGexR/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:f4:bb:6b:dc:5d:16:8d:08:62:90:b8:8b:80:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
        Validity
            Not Before: Nov 22 07:01:26 2024 GMT
            Not After : Nov 23 07:01:26 2024 GMT
        Subject: CN=431f8be4bfcd00472625959ee17b38128cb96abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:29:7c:06:80:05:b3:f6:c2:d4:53:bd:05:
                    b1:62:ad:45:6c:96:df:e7:f7:a7:13:e7:3f:5a:1e:
                    c4:b5:ba:bc:30:5c:b3:f4:c1:53:38:3c:84:77:42:
                    25:02:9b:e2:d5:f5:24:50:32:19:3e:bb:a7:a9:69:
                    29:0e:0d:1b:33:b7:03:4d:81:e2:ce:1e:ca:43:d0:
                    4f:41:8d:eb:02:41:2e:7b:bb:41:f9:18:a6:25:78:
                    4d:cb:24:64:f1:f4:77:8e:d1:73:e8:08:f3:f0:16:
                    52:03:f5:40:b8:a1:2e:a9:2a:5e:0f:9d:7d:b9:ed:
                    d9:66:7c:85:d7:ed:71:d2:a6:4d:95:9f:d3:ea:f8:
                    51:40:92:4d:bf:ca:f5:de:62:8f:68:97:0b:1f:0f:
                    55:c0:59:06:8b:33:97:a4:a4:dc:dd:98:cb:4a:ae:
                    ef:d2:24:43:b9:e1:1b:15:73:83:66:f2:9e:51:2c:
                    e1:3a:71:7c:89:9c:d1:96:4e:5b:e7:fc:3c:21:06:
                    3c:15:b1:83:38:3d:8c:de:02:35:34:1c:a7:d4:59:
                    f8:cc:d2:5b:66:b3:f9:8b:93:8e:c9:b7:40:90:77:
                    51:d0:9d:2e:9c:a2:bf:92:7c:bb:f5:e7:33:c8:a0:
                    43:a1:75:d1:39:6f:4b:50:87:4c:40:b4:f5:b7:06:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:8B:E4:BF:CD:00:47:26:25:95:9E:E1:7B:38:12:8C:B9:6A:BD
            X509v3 Authority Key Identifier:
                keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:d7:93:40:9a:28:3a:aa:50:62:d1:1c:e4:66:69:ef:f2:
         4a:70:d3:91:6c:6e:57:7d:59:11:be:8e:7e:b5:d5:fc:74:0b:
         3d:27:50:ee:54:2b:68:62:02:4c:6e:52:4f:ed:25:25:ab:47:
         6e:e3:85:43:a2:c4:42:c3:7b:57:29:83:13:2d:86:ab:23:8a:
         16:f2:79:0f:12:b9:2c:ba:69:a6:fa:db:db:42:77:28:be:af:
         4b:5c:23:e5:ac:2a:12:e1:9c:c7:18:4b:8c:df:66:44:b2:53:
         9b:62:a2:e7:fc:e0:63:25:ac:96:e2:29:c3:d6:10:b3:1d:66:
         00:af:52:97:36:3d:f9:0e:0b:b4:43:8a:e6:b0:48:7a:ce:9b:
         dc:2a:df:d5:2e:01:db:5f:9a:d7:46:95:26:33:2e:d3:6b:62:
         97:ca:79:da:f4:af:59:e5:9c:cd:9b:53:35:c4:56:29:c7:11:
         98:7b:7b:0e:f7:91:f7:59:a0:a1:e0:2c:a0:bd:f3:22:00:28:
         6e:1d:d2:2c:79:ec:c4:9f:cc:3e:66:42:e4:e2:e0:ba:b7:a2:
         cf:d9:1e:9a:5c:f3:45:83:9e:7f:12:94:25:58:26:cc:1c:0b:
         d0:18:18:81:72:28:5d:49:94:f8:2d:8f:51:95:ab:9b:ed:fb:
         1c:d5:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:48:14 2024 by rpki-client on console-ams.rpki-client.org