Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File:                     iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier:          0gSX294OqYXbWVs6E8asgOQ7Zhi+McFShKI/smaLgek=
Subject key identifier:   62:A8:F0:02:73:BF:2B:14:CF:51:FF:90:A7:6A:64:29:C8:0E:F3:8B
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer:       /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial:       019358403EFE11423268CB67A7A3310F895A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number:          1131
Signing time:             Sat 23 Nov 2024 09:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:25 +0000
Files and hashes:         1: Odi4WYes3OXwXlLTUd9x8p-ZMOA.roa (hash: dxZRYMNsGRsO7KFuuFOoy1iL1cFO4rYgNwEHsF2RNhc=)
                          2: TefcPc1n23Pt79m9zWLDng8_Fbw.roa (hash: BtZgQ+rmgXVLyoeiWuOclY8kxQ5/BhtwIROa7t4CSxM=)
                          3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: DS/w29psJFoAy/+MtBMQRclHKuWWFuXoP3gNqoOxe3M=)
                          4: rpJlFKHX0bvrtrRh069h-O8gnn8.roa (hash: Pans5HqmYp31XmbbkDXi0mMO4VX3DUqSP+1xGLRTTNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:3e:fe:11:42:32:68:cb:67:a7:a3:31:0f:89:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
        Validity
            Not Before: Nov 23 09:00:25 2024 GMT
            Not After : Nov 24 09:00:25 2024 GMT
        Subject: CN=62a8f00273bf2b14cf51ff90a76a6429c80ef38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:ad:85:c2:a7:ff:8e:c2:0b:3d:9f:77:b3:
                    4a:80:76:98:f7:0d:53:72:8c:0a:9b:d4:5a:5e:a6:
                    e7:d7:2a:10:1e:7d:02:6b:9c:a0:28:b0:0d:b3:da:
                    92:f6:cc:15:71:a7:43:1e:d4:a8:e3:7d:cd:68:f2:
                    b0:a2:f6:80:45:00:90:21:6b:e1:e4:20:6d:aa:ca:
                    8f:da:67:01:d1:b2:0f:5a:86:f2:87:51:05:1b:da:
                    b2:d9:09:6d:b2:37:c4:0e:09:46:d2:d4:23:b8:eb:
                    a6:9f:30:ee:ae:1d:a1:b5:0d:d7:9b:3b:0b:57:d8:
                    de:00:4c:9b:d6:93:b9:47:b0:2c:24:ff:c5:e9:4a:
                    86:38:8e:f1:bf:21:a8:70:17:a2:49:b9:61:64:05:
                    95:e9:54:23:fa:35:5e:0f:e7:db:b6:00:7a:83:1d:
                    12:bc:3f:1e:68:4e:94:12:1b:d2:c3:ab:ca:54:c5:
                    a0:e6:18:9d:8b:f2:b9:54:c6:10:11:8c:be:f7:95:
                    f4:a6:d7:89:19:90:c2:37:dd:ae:2f:65:ae:86:1a:
                    05:22:04:f7:37:7e:5a:b3:ca:44:96:64:cc:4d:ed:
                    72:94:18:da:b7:90:4f:ae:7c:db:6f:2b:91:f5:42:
                    5c:a7:d2:3b:64:42:d0:b4:4d:df:f9:16:82:17:ce:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A8:F0:02:73:BF:2B:14:CF:51:FF:90:A7:6A:64:29:C8:0E:F3:8B
            X509v3 Authority Key Identifier:
                keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:2c:35:46:2e:31:a1:0f:d0:85:ab:4d:8c:25:d5:88:29:
         8a:45:33:b0:12:c4:c8:0e:db:93:74:66:8a:e8:e2:a0:be:7a:
         4b:c1:c1:5c:de:7c:b0:16:45:51:cf:4b:c9:47:eb:17:fd:4d:
         75:ba:80:64:13:56:37:f3:73:ae:42:30:9e:d3:4f:eb:01:88:
         f7:c7:9c:fb:2b:63:34:4c:6d:0c:df:cd:27:51:ab:d0:e8:86:
         82:01:52:02:62:31:e1:73:f8:40:df:24:eb:94:de:07:45:e3:
         71:15:31:ac:77:28:35:2d:64:55:e5:09:7f:e9:e3:a7:ad:aa:
         b6:f1:15:a7:97:ba:11:1f:1f:c8:8c:21:ae:0f:c2:fc:96:36:
         b9:a8:2b:6d:cf:d7:5a:1c:bd:2d:8c:88:ce:7f:21:0f:f9:af:
         cb:82:14:a9:e5:f6:87:02:77:64:16:09:64:95:db:09:c3:da:
         2e:f2:83:1b:eb:90:29:6f:b4:b1:57:8c:c8:c0:21:74:be:6d:
         67:5a:c4:47:ea:c3:b6:ef:bf:f3:85:54:ae:23:db:5f:7e:ce:
         cc:2c:1b:a0:6a:fb:f8:00:4b:1f:a8:a0:e3:87:73:cc:6f:64:
         18:19:2d:d9:88:08:fe:63:77:d2:a3:28:cb:4a:a7:e5:78:db:
         cc:b6:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:16 2024 by rpki-client on console-fra.rpki-client.org