Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File:                     aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier:          jrhvjbaJzLTLPD2/Mqez4dEgEWdBcvOYBDGZL1/uStM=
Subject key identifier:   52:9E:A4:49:54:65:66:3F:75:8A:EC:C9:E0:87:9A:B4:22:5F:7D:DE
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer:       /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial:       019352ADF34AFDCEF58E591BA4368735A910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number:          065D
Signing time:             Fri 22 Nov 2024 07:02:31 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:31 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:31 +0000
Files and hashes:         1: 6LA2BcDlwm5RqpYztK2K5Ox4SRM.roa (hash: BGzeVn8+xkAaAjte9METmx2/8BTkDDFsBQIMSP9amc0=)
                          2: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: wTjrYlZo5hJNrGWYW1xhD0aKSgIhv5/2kFM5yFjDS+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:f3:4a:fd:ce:f5:8e:59:1b:a4:36:87:35:a9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
        Validity
            Not Before: Nov 22 07:02:31 2024 GMT
            Not After : Nov 23 07:02:31 2024 GMT
        Subject: CN=529ea4495465663f758aecc9e0879ab4225f7dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:a0:d5:0a:71:23:b4:d3:3e:ec:19:5f:88:
                    ef:e1:32:d6:d9:73:9d:83:20:97:57:f2:4d:b2:f6:
                    8a:38:2d:d9:d2:7d:92:ef:16:b7:42:6a:32:9c:f2:
                    b5:67:7f:62:64:bb:f5:80:33:94:e7:ee:fa:5b:63:
                    fc:d4:b9:c8:6d:82:63:00:33:f7:ac:fb:23:e7:53:
                    3f:66:37:23:c2:c4:4c:2a:fa:e6:2a:3e:4a:63:35:
                    f0:b0:4b:fa:41:e2:1b:d2:f1:a1:38:47:fc:82:32:
                    39:fb:3f:ed:d9:98:4c:c5:94:8d:7d:f3:32:9b:3c:
                    67:52:ba:6f:ca:56:d8:d3:4a:5a:40:13:f0:ac:47:
                    17:8e:b7:b8:09:87:8a:4b:62:ff:db:72:e4:e7:74:
                    81:cd:2a:0d:f1:80:74:c1:58:1d:fe:07:d5:97:86:
                    b2:02:98:97:e7:c9:f8:4c:e9:30:07:7b:30:b3:1b:
                    c1:43:15:21:a5:fe:59:09:fb:9e:a8:03:a1:27:f5:
                    a5:86:a2:12:b6:a0:5a:ca:5c:15:01:f2:8e:04:c0:
                    87:f1:2e:c3:84:91:bd:5c:e1:c2:be:95:65:59:a1:
                    d8:f3:b2:95:a9:a6:3a:80:44:17:83:5d:48:ed:2d:
                    a5:ab:ab:9f:34:e7:5d:e9:a2:de:95:7c:31:0d:e6:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9E:A4:49:54:65:66:3F:75:8A:EC:C9:E0:87:9A:B4:22:5F:7D:DE
            X509v3 Authority Key Identifier:
                keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:63:9a:b3:c6:1d:fb:da:71:5a:f0:6b:b1:d0:16:02:91:
         21:64:e3:3e:d6:ba:5e:d3:be:3d:31:1f:91:8c:4f:cb:d7:47:
         90:be:d5:aa:04:02:60:92:fc:9d:c8:c0:4d:63:98:2a:a5:a6:
         80:19:7c:ac:75:68:86:4d:c7:96:e2:31:42:3a:d9:75:d5:fb:
         f8:a4:9a:0e:32:b3:e6:86:a9:be:4a:01:57:e1:4f:ea:9c:c1:
         da:4e:c0:95:e0:14:eb:21:7b:32:34:51:66:bc:6f:8b:50:8c:
         e7:a2:9b:df:d0:f6:96:c4:f2:6f:9e:c4:d1:d5:6a:70:58:a8:
         27:75:55:31:15:1f:e7:4a:8d:47:c9:ad:4b:d2:fb:ee:cb:98:
         5f:9b:e6:ea:e7:a3:da:04:cb:32:99:74:e2:7b:32:ce:a7:bb:
         23:35:28:5d:1e:bd:8e:11:33:98:a1:d2:4b:9b:60:e6:f0:4c:
         3d:fb:1f:30:06:ee:87:4d:c0:83:24:2e:71:0d:d2:af:f7:b6:
         e1:fd:e0:bc:ea:29:ba:15:44:b7:54:a7:02:b3:4d:a9:59:a7:
         f7:34:93:74:93:39:53:fb:ea:52:22:1e:fd:d1:9b:96:82:44:
         31:a0:f3:c8:5c:22:8c:94:bd:32:93:ad:f0:2e:fe:db:1b:60:
         7f:93:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:15 2024 by rpki-client on console-fra.rpki-client.org