Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
File:                     nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json)
Hash identifier:          KpU5msJ7n8JaNe8A3WfuSvbv729Db8EK40tGlXLxvQw=
Subject key identifier:   81:1C:CF:73:50:F3:98:C2:FC:3B:BA:2E:9C:64:3C:97:58:11:04:3C
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Certificate issuer:       /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial:       0193568A969F45D7352A0DD91D61E85CF350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:02:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:23 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:23 +0000
Files and hashes:         1: 1-nyupKjJONGvb2Uy1IcCULIZ_us.roa (hash: cieqDJzHpEZywdTqDx6jnYy3G1XC3zDN6vWU5dIY49s=)
                          2: 1qFPAwQ3C6YKvLn1MWbtcOhKF2s.roa (hash: gF1OCAp00qZP6/pKRw1PYTyGiCEnfcVSN47yExfnQx0=)
                          3: BCkd2wOiyZuYHD-GuWVlv9LzhxE.roa (hash: wXo7x0TDu1WZwM20SbRog45Swn8QJtDNi8CTD7dgi1E=)
                          4: BJY5nkQi2ZVPKrScZRYd1DXS7RU.roa (hash: hCAEZs99ixNItN0roBuNkVK0PEwuKDgMtabn9qjWG0U=)
                          5: CDWaU0U4NScwvf8Iw5TZhAGaLjw.roa (hash: ewf0Nlh+RCnGcSWJO3WWf9dLmyceQct6xY5rUZRttlw=)
                          6: KnMDCSnVzz-d32WYK6W9g1rQNok.roa (hash: p177D3eKzDqkQOXp5Bl69f774McxEJuTMF9J69IbsSQ=)
                          7: To4vD-m1o8vBoWLYx5nt4YtOq_Y.roa (hash: lK86af65+E4tS0Rrtcc3q0r71IWQgKx5iOTP1GCPfUw=)
                          8: XOfpYlMNP-A4VtuLZkm1D3_jIAE.roa (hash: P9GMDa18vpj6HisktGvqaXvbJ1CWykttrX7qRD8A5iQ=)
                          9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: AU/chSfh5h1fZUaopU4EVf/YLcLxp0QTnDX+c8Fgiyc=)
                          10: xk3ZhmH2hBE4Xk3qwDC1JpFadAI.roa (hash: ktuHpF0ZerpwSJwW2DMMvfUcyKGegIl2ni3odeBpluk=)
                          11: z0Ko0qIMATu-HmtjRkS2cybANpM.roa (hash: p87jVhDdV2HsUsjZanVGXpLPeY2la/CnwKVXeF4XECg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:96:9f:45:d7:35:2a:0d:d9:1d:61:e8:5c:f3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
        Validity
            Not Before: Nov 23 01:02:23 2024 GMT
            Not After : Nov 24 01:02:23 2024 GMT
        Subject: CN=811ccf7350f398c2fc3bba2e9c643c975811043c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:fb:ca:05:9b:3f:94:4c:99:4b:91:52:f9:
                    79:6a:d5:45:7a:05:39:6a:ff:f3:6d:8b:bb:b5:ad:
                    d2:a6:66:cf:c2:ef:be:56:d2:e4:1a:f0:54:7a:b4:
                    6b:2c:01:fd:bd:b9:26:64:f3:d2:4a:09:61:9b:be:
                    d7:b8:c2:e4:db:a1:4e:c0:9e:35:7a:dc:19:7d:63:
                    d4:24:49:03:eb:af:c0:f0:0c:85:d8:3b:76:15:8b:
                    2f:c9:95:51:f3:ac:7b:db:48:02:e5:f6:71:06:ed:
                    cb:b2:a8:49:02:e1:ce:08:67:c4:6d:e4:ec:05:27:
                    51:38:02:ea:6e:ca:ac:51:12:c4:76:51:bc:01:50:
                    ea:b2:79:7d:a5:be:54:0d:1a:47:a9:93:69:8b:17:
                    bc:9f:a3:be:39:74:c6:de:f6:8a:01:b0:5e:6d:10:
                    6d:94:33:3a:fd:9f:f9:09:af:6d:09:66:32:6e:8b:
                    41:54:26:f0:0b:33:83:78:eb:26:bd:91:51:3f:00:
                    05:fa:08:fb:a4:b0:13:e3:27:dc:93:6e:07:f6:3e:
                    b0:65:a4:89:12:7a:13:66:e8:e0:03:be:40:2d:50:
                    47:5f:97:e9:77:b7:66:e6:f6:86:57:d0:6b:ee:32:
                    54:eb:39:01:70:52:dd:9d:44:14:54:b1:e9:44:6b:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1C:CF:73:50:F3:98:C2:FC:3B:BA:2E:9C:64:3C:97:58:11:04:3C
            X509v3 Authority Key Identifier:
                keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:24:32:52:a2:0b:61:9c:b2:ee:ea:0f:a6:59:03:19:92:
         db:8c:72:51:2f:0f:87:84:7d:61:35:5d:69:70:b0:55:de:16:
         c1:6a:a0:3a:a3:f8:0c:5a:72:52:46:6a:51:90:b9:3e:e4:dc:
         3b:c7:8c:88:40:7e:c0:7e:05:f2:49:79:28:db:5f:6c:a9:a4:
         42:2d:c5:da:44:1e:c8:d6:2d:54:ea:0d:db:b7:57:e8:ba:8c:
         9c:43:8c:2c:11:d9:91:67:47:dd:64:a2:4d:9f:69:e5:27:0e:
         ae:72:8e:c4:7e:59:51:fb:08:a5:60:00:be:26:d0:c1:bd:d3:
         5f:43:b7:c1:32:99:31:f5:3c:08:17:76:98:f4:0f:bd:87:e4:
         0b:bd:7e:58:91:5e:30:f0:7f:22:2d:c1:13:18:b3:f5:ff:ac:
         71:43:26:7b:37:15:ea:d8:29:eb:03:5c:e6:31:19:e4:c2:53:
         70:31:79:43:b0:e2:59:8c:cc:01:69:d5:1f:bc:7f:8f:91:28:
         af:ae:1c:16:bf:26:f6:26:17:1e:0d:72:96:ea:0c:d7:34:82:
         83:1d:87:d7:14:07:4b:50:06:9c:a3:fd:32:10:c0:17:3f:e3:
         08:a8:26:10:0f:59:19:eb:ab:7d:02:bf:4e:90:fa:03:05:ed:
         9e:cb:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:57 2024 by rpki-client on console-fra.rpki-client.org