Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          T4qcMZIP01NOvxHZoRtVx0Pd4lSrPMXZcpcPt7R4Jo8=
Subject key identifier:   09:C4:89:3E:A3:76:C7:03:B5:A6:D7:60:5B:97:DD:41:F5:39:82:A6
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       01935207A00DBFDB50CBF352AFD10C1BE0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          10AF
Signing time:             Fri 22 Nov 2024 04:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:51 +0000
Files and hashes:         1: AhoyAAKJAmZ57wAZFCst5Li0B8k.roa (hash: 6HldS76ad+8W+NPVAquxuYjj87FRBgxCEboSir6/wO8=)
                          2: UjqBYUezB4iRMCdJjcVV1A15AFI.roa (hash: 57kYDFNVVTCmUQVXc0Quzv7zHCcVM6YIWNyNIJdxfdQ=)
                          3: d4bynnLthwvgIITjnXpX_ZJ_pKw.roa (hash: JELXX0hEJbowY8FeevV9GY3Ayvj0Rud8kT3y9Vyz730=)
                          4: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: 9n4mjIn5leV8zbGowOqrZFBvM5OLgFcLBp9NBHCA8m0=)
                          5: kRqn1_ljoUrGliEST-iNa6x-p8Y.roa (hash: 2Vk+wW1ygz0v1eegSj0dZ8AZd3jGsF+yhciDKBmBv0Q=)
                          6: pX9VssUu1cEMqY00fgi0Eg94gPY.roa (hash: EjTxD+f6o16NKRn/fBc1xacFcc4tuOM1nf/GnQ3UzI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:a0:0d:bf:db:50:cb:f3:52:af:d1:0c:1b:e0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Nov 22 04:00:51 2024 GMT
            Not After : Nov 23 04:00:51 2024 GMT
        Subject: CN=09c4893ea376c703b5a6d7605b97dd41f53982a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:14:01:c5:73:11:61:bc:2b:c3:ee:85:ab:
                    db:5a:f5:80:f6:fa:ac:5a:50:7b:47:25:f7:a1:52:
                    b7:e1:eb:22:e5:03:fd:eb:01:55:16:90:93:91:58:
                    c0:30:7b:42:e6:5d:c2:98:20:8c:07:a8:bd:3b:ce:
                    a3:91:44:2c:25:b9:3d:3f:3e:45:b6:0f:b6:af:e0:
                    5f:95:8a:b6:9b:f5:93:b0:39:ba:2f:9e:bd:1d:07:
                    e0:39:6f:25:88:aa:d8:bc:74:f4:49:dd:f1:17:04:
                    aa:90:c5:72:cb:09:d7:d3:f7:19:61:63:b7:ca:92:
                    47:95:d6:4e:43:d0:a8:62:1f:89:ff:43:52:df:a8:
                    c3:3b:ce:d4:53:b8:c4:91:df:61:2a:ab:ad:99:01:
                    4e:49:ab:81:26:45:51:e1:c8:23:43:da:81:ef:b2:
                    9b:0c:9e:d1:91:ae:2e:cd:8e:7e:9f:79:17:e9:ef:
                    f1:62:8d:ef:27:44:23:a8:2e:ca:ac:5f:c9:1a:f7:
                    ab:90:98:2c:5a:57:b8:6b:be:90:90:15:8b:60:a9:
                    15:fd:37:cd:24:48:2b:2c:7f:25:3d:a0:f2:df:b7:
                    87:16:76:2c:c8:50:5a:65:98:17:83:09:98:f0:ca:
                    be:81:62:7b:dc:9d:ff:2f:1c:7e:81:27:4b:f2:ae:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:89:3E:A3:76:C7:03:B5:A6:D7:60:5B:97:DD:41:F5:39:82:A6
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:05:87:61:94:70:96:d4:64:e9:48:4f:96:b5:a4:90:64:
         fc:af:da:93:78:10:9c:9d:40:5c:cb:a6:a7:5d:e5:b5:74:16:
         7b:63:eb:c0:12:1b:46:0f:76:45:bc:a2:bf:ee:b7:38:d8:37:
         a4:49:bc:a3:a2:50:d2:42:57:3f:a3:41:92:f7:ed:2a:4e:79:
         76:a6:5c:c0:92:47:d1:3d:77:c7:e8:78:1a:06:a4:5c:ec:03:
         21:a4:73:0f:a7:25:18:ab:96:0a:5b:82:dc:eb:2a:67:fe:2b:
         5a:0c:1d:ae:17:7a:c6:eb:c2:96:6d:9f:5a:92:6d:bc:c5:5b:
         a8:a9:64:c5:c9:e4:25:b3:04:44:c1:99:96:58:d0:0a:40:a9:
         ea:3b:74:dc:f4:45:95:7a:6c:2a:9e:12:b9:4c:09:a6:22:65:
         f0:47:a9:1a:ff:ba:e3:a9:60:6c:a9:7f:a5:88:8e:8f:e2:b9:
         a0:86:e1:30:1c:22:ce:41:d8:71:7c:5c:47:67:03:a3:39:74:
         79:57:54:3b:1f:bd:cc:b3:fe:8f:ef:d1:66:9e:ec:c3:22:bf:
         87:c2:9a:5b:be:fa:57:f0:f6:26:24:7c:df:fa:34:f3:20:ec:
         ed:52:6c:2a:1f:d6:ee:f9:aa:2a:bf:69:d6:36:93:8c:eb:60:
         83:a8:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:43 2024 by rpki-client on console-ams.rpki-client.org