Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File:                     FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier:          8/yFtVNHTX/zjqpUzbaV69QbkY61xhmAvrW43bShGmM=
Subject key identifier:   B4:D1:0A:17:9F:BD:34:6E:4F:C2:09:F7:F3:A5:41:D7:25:C6:4D:DF
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       0193523E0CB17159AE240691E33D88F13F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number:          0DDE
Signing time:             Fri 22 Nov 2024 05:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:18 +0000
Files and hashes:         1: 1-DdPgP6Sx1Ed0LVhVsH8-nRLgMA.roa (hash: AxM3S445DV6qTCjUef+yiWHVVwWZ60ih+fADoFtoFTU=)
                          2: 1B9YsFsqyWrY8VttMS7VDJRaMy8.roa (hash: 0t2DKxWDa5RYtGvDUVSvaTKmOaCfwRAyhDb6rosn51Y=)
                          3: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: WXxWexCjx8XO4szZ0RmYzEn+DcRjF5dL3mdEbBbe68Q=)
                          4: d10r-L_GGsZxsk1wVrBzlwaJU8Q.roa (hash: 6UV7APpH4aUwH6A4i2FmcejMtTqnTG+IaU3iKCD7amc=)
                          5: xWZU2EAQiMGfadgtdrDov6uewR0.roa (hash: iMhPq3o3DPvUeqH/qIy+tnxnWYJskfRDdmKMssZ1vyU=)
                          6: zbF9iBDlM6Sl-WEqS_yr5e3Hqc0.roa (hash: gX09Gx5AalSkonjzItgCo1RG2Lxb0z3w7CN8tzlNScE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:0c:b1:71:59:ae:24:06:91:e3:3d:88:f1:3f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Nov 22 05:00:18 2024 GMT
            Not After : Nov 23 05:00:18 2024 GMT
        Subject: CN=b4d10a179fbd346e4fc209f7f3a541d725c64ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:2c:48:f0:a9:e9:ba:ba:d2:76:b7:ef:4a:
                    09:74:93:6f:df:a9:99:51:20:e5:fd:c7:e9:d3:22:
                    21:e9:86:49:21:ab:65:9b:a8:e7:7e:8e:42:cc:58:
                    67:e8:1f:16:41:dd:1e:a7:fa:bd:ef:a7:aa:0e:18:
                    34:32:28:af:eb:82:aa:1a:53:50:9c:4f:29:56:40:
                    46:6d:08:5a:50:7d:ca:1d:a9:95:f6:93:d4:eb:97:
                    92:bb:16:2c:fb:b4:f5:d8:55:d3:4c:3e:a5:61:aa:
                    5e:46:e8:46:31:c9:7b:16:64:52:a1:1e:67:7c:62:
                    dd:f6:c1:cf:98:a9:1e:43:ae:66:73:b2:b4:88:b2:
                    2a:6f:e4:91:b2:72:3e:96:be:31:3e:de:8b:15:a9:
                    94:d7:68:99:ec:65:c4:63:fe:84:4a:3b:87:e9:07:
                    9b:05:a2:63:ce:74:ea:07:64:42:77:5c:05:ce:40:
                    8d:a1:50:ee:72:81:7f:82:39:8c:96:44:a4:17:a5:
                    c4:6b:fc:62:d0:56:b5:65:f9:11:ad:ed:46:e2:4d:
                    40:44:ec:2d:78:ec:61:48:b3:35:90:c8:89:e3:c5:
                    c6:ee:c2:27:cd:5a:d9:fb:54:19:98:8f:fd:1c:e1:
                    d8:7d:d3:d3:4b:8a:f3:90:07:7b:38:fb:ba:2b:2a:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D1:0A:17:9F:BD:34:6E:4F:C2:09:F7:F3:A5:41:D7:25:C6:4D:DF
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0b:a5:68:3a:77:8e:82:28:ce:d2:e9:01:3d:4f:78:a9:87:
         40:fb:61:16:99:72:25:6b:fa:25:31:ae:6c:37:af:6e:e9:9c:
         80:5e:17:0d:29:0f:a0:37:18:5d:70:1e:88:9e:e3:1a:f7:f8:
         d8:ea:7b:54:a6:59:15:80:4e:79:51:8f:46:34:29:ff:01:ed:
         50:10:27:99:c3:08:04:34:18:1b:18:11:5f:cd:7c:5e:5e:fa:
         98:f7:66:f7:c3:f5:dc:4b:62:f3:4d:aa:52:98:54:c5:97:1d:
         38:85:e8:38:1c:2c:d8:5f:27:0f:cc:2d:62:02:18:d4:75:b2:
         4e:83:4c:c6:0f:a3:97:15:e0:65:01:80:2c:c5:ce:bf:da:9e:
         5b:cc:2b:b5:5c:43:b3:94:bd:19:65:9a:3d:4a:7e:f0:a8:ec:
         65:5d:50:6e:16:6f:a7:4c:7f:ee:8c:b9:23:3f:e4:c1:79:be:
         ac:84:57:f0:5a:42:8f:6e:59:44:d9:13:b5:42:f3:7b:a1:00:
         7a:e2:a4:1f:fb:7f:d6:46:f2:a3:a2:b3:8b:ac:ad:2f:7d:b5:
         51:1e:26:ff:3d:8e:e1:a8:da:88:61:2a:c5:d0:5a:af:4f:ba:
         69:70:f3:00:12:ac:57:19:f2:22:f3:42:88:1b:e2:db:c7:b1:
         30:63:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:04 2024 by rpki-client on console-fra.rpki-client.org