Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
File:                     IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json)
Hash identifier:          Nw3E8HpyXd8LUfej4b5C0FfMfBGtbByN4ky719aruW8=
Subject key identifier:   FC:FD:D9:4C:42:2F:22:AF:27:47:D4:8C:23:66:4E:63:CF:88:88:B0
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Certificate issuer:       /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial:       019351993F53A531FA725B660D7B1B1049D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
Manifest number:          0ED5
Signing time:             Fri 22 Nov 2024 02:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:17 +0000
Files and hashes:         1: 7jr3BSouL6p0bCOfnQx8Ub_W8lo.roa (hash: nygseVdeefhRUdqx0dxYvVLXYbVaiYJXMsb4MCg/0Uk=)
                          2: CRav-kAnaTCSWjonIP6cOo_clU4.roa (hash: Od07L82YLZboYvPIM3RWhbqLX4NNecCludMb4S+wlGM=)
                          3: Cmjqxtw5xzvhyUNdHCiwzU8qpu8.roa (hash: lw4pDy0L4CEYwanQ2NA5xRRYslDOBeS5Utei4Pj3ddU=)
                          4: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: bxhaVdVsA0cwA+hmsscSQ6kF7t7Z4DG3n1JnTV5ec/g=)
                          5: OkWsPpCY9cmp0n7on3mOCdxKZeE.roa (hash: AKVMJaAbXj4vjL/+WnwKx6S5l/ISR1qmL0qXph50h7Y=)
                          6: QILwz7PCysFKM0haafF1QoFZCb4.roa (hash: Qk1oPbRRu/Vb6AcRWacIaivj+lAETgaPx5zZDbkrTbw=)
                          7: QjxY-zm0fSHZLRAWGzMxFHHCc2I.roa (hash: NLXkhGYYczPj0jMwZ1XN2FRCwAhugwT8dlfvCT9vPyM=)
                          8: WAXfaCwq8gy5fzYsBVRDCJvR0uM.roa (hash: B8nMb7XC6UZowviWps22dmdyOLfKfGCFUe4dR5/X0+4=)
                          9: ZqB00BJh1bL0az3KA6LZS1ukKYY.roa (hash: oQve/lHQi97wxeVWOHPyWJe+6JbnB6sE1Yb/2lWCU6I=)
                          10: auhedlG9t5zzptcI9wpQtDWJ-oY.roa (hash: yFhLuVIRM55NBCT6jkxoB5RbQLO1vwt3bztwB5VGXtM=)
                          11: bHVOMthf0lO4uN9jv8qG-V0HHHE.roa (hash: owW35FMdmv87KhZK0wuGoTiuBQrNvwHmPnj4lJfz2ds=)
                          12: c-WV5CtI-578BdHxv0y_yqWiG0U.roa (hash: YVNpqPU/l1eLU/2WHyF7P6RCa/29XSuIiMYJk8cQYZw=)
                          13: c30csS6JK4s9MoQXsamjG5S5mQY.roa (hash: lVQXJ67RyqpidXoEAZ7j7+rNp3Q3lOFHrXyCzDWq548=)
                          14: e9FiSR-si3ZZIIh7m3ucedBhmmU.roa (hash: FAPlBpcRcLl1kbfthVbKlhuFOhWyKbXM9jmK9JQeeh8=)
                          15: enUwcWlT1mgHHpWZpXxbhR7C9JA.roa (hash: iHSKblwRHPSBIQbWCRf6CCOt8RNC9FkpQvAIQDcpzHc=)
                          16: hCmnb5a1bG-SSw-lxAZazyqNkVQ.roa (hash: ALvRbQisUAukYzcwf9cgpHPgQuw64zhen3GsUjne7ZM=)
                          17: hxUYqrWVKAOMWD_6pCrGH0A3jVk.roa (hash: O63z7HBnWoql9o6l8WaWVYwbugnAyu2kF8egfDAIAIM=)
                          18: ofccGEsA-SEdFvLGfPfjeIfP77Q.roa (hash: BGXKRA39vq6rFiW7IhKvitmTS0tEmkbu9EDcRH2rAnc=)
                          19: z8Ug_SbeObB3ODb0f9ErXY44QAg.roa (hash: xoHgZTS2AVGE4gKwu1+lP1Qtl7ZhhaCE5iIcibvj8tY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:3f:53:a5:31:fa:72:5b:66:0d:7b:1b:10:49:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
        Validity
            Not Before: Nov 22 02:00:17 2024 GMT
            Not After : Nov 23 02:00:17 2024 GMT
        Subject: CN=fcfdd94c422f22af2747d48c23664e63cf8888b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:e1:b9:83:8e:8d:dc:26:77:8d:1d:55:e5:
                    6e:7d:ba:60:14:f4:fb:69:f6:33:13:ee:75:99:cf:
                    24:a0:c5:d7:5b:f2:4e:d5:19:5f:51:c0:3c:e8:ce:
                    04:be:e8:70:c7:1c:49:e8:8e:b4:8a:04:55:64:8a:
                    3a:08:20:33:e6:32:b9:86:5e:93:5f:d1:ff:43:60:
                    13:c2:05:07:c8:04:41:00:e3:03:cd:30:07:65:08:
                    68:83:54:a4:ee:35:2b:f2:a9:3a:3d:a8:7b:93:6c:
                    00:8d:2d:ad:7f:37:c3:a8:ec:b3:3b:8a:e4:4b:fe:
                    d9:89:62:7c:5a:f0:aa:11:87:4e:15:5f:e5:fd:26:
                    40:38:62:e9:c5:28:f2:3f:66:f4:47:78:4d:1f:fd:
                    90:45:a9:9b:bd:99:fc:68:7e:03:62:15:91:e7:13:
                    8e:bb:89:9c:06:95:93:dd:d2:21:2e:00:e9:9d:61:
                    77:a7:ad:89:83:0f:7d:79:3b:1f:0c:a2:84:92:1d:
                    1e:ce:07:8e:b5:56:23:81:96:cd:6b:8d:f6:e4:30:
                    a1:02:f3:5d:b7:21:91:7b:7d:36:16:69:f7:5c:c0:
                    63:80:ae:cf:00:0a:72:87:9e:3c:46:e4:c8:ca:e5:
                    38:ad:7a:1e:83:ad:5d:89:64:02:c5:d4:d9:e0:82:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:D9:4C:42:2F:22:AF:27:47:D4:8C:23:66:4E:63:CF:88:88:B0
            X509v3 Authority Key Identifier:
                keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:3d:a7:62:eb:1c:40:de:0b:73:21:cc:f2:40:92:a1:ee:
         cb:f1:c3:f8:1d:52:16:f8:00:58:41:c4:ff:91:36:25:50:e8:
         11:4a:72:ec:0e:aa:42:d5:a4:f0:d7:19:18:3c:79:e1:33:09:
         32:47:e5:46:40:c6:f5:27:f5:46:25:b6:18:35:ae:a9:a0:d1:
         5d:05:82:f3:43:81:37:5d:3b:c4:f8:f8:3e:ad:bf:6d:24:b3:
         d2:8b:d9:d6:34:9b:2a:cf:eb:9a:64:25:c0:5d:a6:d9:66:eb:
         37:94:da:da:27:68:50:bf:d8:a1:db:e6:5d:cd:68:60:4b:c6:
         5d:16:b8:65:e6:fe:5e:47:0a:bc:33:48:cf:71:c6:26:9e:8f:
         80:ea:95:8e:9e:80:68:42:b4:e8:41:52:d7:fe:2b:c1:bb:2e:
         24:b0:cd:b5:9b:45:24:50:40:89:47:14:4a:b2:00:bd:b2:31:
         1b:eb:5f:d3:ab:0f:06:27:3d:11:a2:e9:71:51:b6:c9:a9:63:
         15:1e:e9:02:c3:30:79:dd:9f:fe:da:a7:db:b0:85:08:42:78:
         6f:7a:3a:e3:e2:3f:64:bc:9b:1d:97:ad:4a:75:15:0b:86:4e:
         10:c1:d6:83:11:5a:be:3f:d2:ec:59:45:84:1e:0f:3a:2f:29:
         82:ab:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:21 2024 by rpki-client on console-ams.rpki-client.org