Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File:                     iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier:          l6VaHt2ENu3N+tyYZQXdmrXLlMaf9MpQ3sVJ33ykpxg=
Subject key identifier:   41:59:5E:D4:A6:4B:DC:CF:9A:0E:8E:1D:5C:81:4D:6C:A2:82:52:64
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer:       /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial:       0193579B6B7C044B3BE29D8A8E4B296AA8FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number:          0CDC
Signing time:             Sat 23 Nov 2024 06:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:23 +0000
Files and hashes:         1: A-QT-jU-t7Jk8YNGwT4720rjYj4.roa (hash: e02JlFirOvYeuzZs5HFVLKnrHP6CoOqrgcY8xkF42zA=)
                          2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: +m6u/V5kt7mcD9Hk5hvx/vTISrTfxK/MZ2w5Aob1fDY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:6b:7c:04:4b:3b:e2:9d:8a:8e:4b:29:6a:a8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
        Validity
            Not Before: Nov 23 06:00:23 2024 GMT
            Not After : Nov 24 06:00:23 2024 GMT
        Subject: CN=41595ed4a64bdccf9a0e8e1d5c814d6ca2825264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:7f:38:74:b0:cd:ed:62:30:62:4c:ad:ed:
                    3f:43:8e:08:06:13:35:1b:ab:96:a8:56:04:f7:f4:
                    b0:88:06:af:d7:7d:54:9c:0e:c0:72:3e:82:30:fa:
                    2c:76:38:47:dd:67:b2:b1:5c:e1:b3:62:db:ea:64:
                    d4:ca:33:0f:65:db:bd:70:60:d9:18:4c:eb:62:b2:
                    48:c0:b2:1c:33:e9:72:16:3f:a0:c4:d1:0e:d5:64:
                    74:b3:ba:00:70:44:b0:ae:47:c3:4f:c5:d1:d0:18:
                    19:84:85:64:e9:21:07:72:c0:52:4c:be:28:cf:4d:
                    b2:7b:11:e0:3a:27:4f:4e:75:99:ca:de:fc:9b:1f:
                    7a:37:49:29:dc:d0:ac:cd:d1:67:52:d5:bd:34:c0:
                    b9:16:ec:07:1c:1b:fa:96:13:7b:38:78:42:ff:00:
                    2e:07:12:cf:d9:56:67:23:3e:25:e3:ea:f3:ae:e6:
                    f3:38:6e:1a:15:af:92:be:56:54:20:12:7b:32:52:
                    0d:e6:cb:87:b6:b1:97:fb:db:7b:bc:98:6c:ff:d9:
                    d4:e0:2e:dc:1a:52:0c:38:1a:b6:51:51:de:20:32:
                    8f:2f:76:15:29:32:74:a2:8d:4c:bd:3e:39:e4:33:
                    4a:86:e5:1c:aa:04:16:34:79:6e:10:50:7c:00:c7:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:59:5E:D4:A6:4B:DC:CF:9A:0E:8E:1D:5C:81:4D:6C:A2:82:52:64
            X509v3 Authority Key Identifier:
                keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d5:28:3e:47:29:e0:09:d4:09:25:0b:67:2c:50:e0:d4:8f:
         e6:44:cf:8f:d8:1a:cd:06:51:8b:f6:9a:0e:24:76:88:28:45:
         7f:60:59:88:be:58:ed:bb:8b:22:43:8c:f7:e9:7d:41:8d:97:
         f3:51:cc:c9:3a:20:6e:6d:5b:47:5e:a3:db:f5:ef:02:6c:d3:
         0a:f6:42:4f:71:7a:ca:1a:d3:48:eb:2f:0c:92:b2:5f:4b:89:
         fd:ed:5c:0e:8f:a4:db:55:e8:a6:0a:cf:9f:8b:83:8c:bd:fd:
         50:ff:4a:ac:ef:54:b1:8b:b6:36:88:22:76:f6:11:0d:28:0a:
         5a:c7:70:17:7c:1b:b6:9e:eb:bf:14:2a:a2:0d:d0:c2:0b:1b:
         5e:90:48:5a:6e:02:92:f7:31:31:76:6c:6b:c0:92:ad:99:bf:
         2e:da:9f:dd:dc:c8:83:5e:89:4c:36:89:f1:81:b5:5d:70:85:
         c7:a9:1d:af:4f:5f:33:7b:ab:fb:cd:58:88:65:7d:65:44:58:
         ef:c1:59:69:27:91:66:03:ed:eb:6c:85:dd:31:76:b1:8a:ee:
         36:91:7d:d3:71:b8:9f:81:26:af:3b:3b:64:bd:93:87:a8:db:
         1f:24:9f:93:cf:24:af:3c:c5:e5:32:f1:73:85:27:65:71:e4:
         d3:06:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:47 2024 by rpki-client on console-ams.rpki-client.org