Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          FSuCiiQgPTCJXQazZ+w3JpQpKCPySJy+KTL7DCeSX8k=
Subject key identifier:   AB:92:ED:FB:F6:EA:AF:3D:16:C8:80:1A:69:92:57:9C:5B:57:00:79
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       0193519959D6107C403B0DE56670E5443726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 02:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:24 +0000
Files and hashes:         1: 0NriJ9h0cAs5vCyI_I697FHjKsk.roa (hash: Nffm9wYof4sJJRiGmAEREvkYZN3EGRGZ+whhYyKUYfA=)
                          2: 1xTBfxfrxhFUKTLe2QfRWQ0RWnc.roa (hash: dvFB6ph2OYG0eoCqw0QLplN4A4snp9c5/N5j5sBz0Cw=)
                          3: VGV_PUxkXRDi4orq25h9QJWOgEg.roa (hash: 6v+HW6PRHck5TyUB/5/XfrY4xhbgeXn1deawSG0az58=)
                          4: g64_wG-rajknug_0utrVaOOCnLE.roa (hash: zeKqmZvuJ7VOlagrGJ0OtTw1XIWRj5lrKw99v910RGU=)
                          5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: GV5Aer1GakWRiqgcUkp43xWXFVmzwCghas4dtW/FrRo=)
                          6: t1q5GOJjyomTWOst5u-g3HEpKmo.roa (hash: 6FovB28Ejapz8zWHSXrtHPixhEuUH1H3Y0xg6dNzy2M=)
                          7: uMyIzznLTyREySqiTjtyza2V3Pk.roa (hash: iafG2eMd8vaLprLIQxJqIpw8p7uAZhUADbHxJDPDiZo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:59:d6:10:7c:40:3b:0d:e5:66:70:e5:44:37:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Nov 22 02:00:24 2024 GMT
            Not After : Nov 23 02:00:24 2024 GMT
        Subject: CN=ab92edfbf6eaaf3d16c8801a6992579c5b570079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:12:c1:53:54:ae:6c:3c:75:fa:6a:2b:e0:
                    4f:b7:ac:5d:f3:dc:30:dd:e8:b8:0c:94:db:7f:0b:
                    fb:fc:4b:56:1a:3a:a6:ba:7f:b2:9d:47:9c:4b:f1:
                    89:ee:6d:14:f6:c9:86:f8:d7:fe:4a:3c:83:50:28:
                    4a:fc:ff:df:80:20:4e:82:84:f5:1b:21:88:a7:6e:
                    2f:37:b6:f0:bb:56:dc:1c:31:2e:32:86:cb:68:72:
                    58:42:ed:9c:b6:a3:a1:d8:65:ce:9f:da:9a:f1:2a:
                    98:86:3e:97:bb:8f:45:f9:d3:d3:d5:65:58:40:01:
                    fd:76:7f:44:a7:ca:d1:aa:87:54:2e:ef:6c:fb:22:
                    42:f3:34:be:3f:ac:55:33:7f:b7:31:f2:e5:c2:12:
                    a4:97:7a:48:2a:fd:ca:71:ab:a8:c5:a3:52:49:b7:
                    af:b7:05:25:63:a7:17:90:1c:be:3e:71:13:19:0e:
                    ff:55:ba:0c:e0:ec:5b:5b:4d:99:87:f3:a8:c5:f6:
                    a0:3d:09:5f:6e:f2:8a:b8:ce:66:b6:da:e4:a7:cf:
                    32:8e:0c:49:f5:14:84:95:c4:da:62:2b:a0:65:02:
                    f3:02:99:02:fe:8d:67:7d:6a:b9:57:1c:77:80:dc:
                    c4:30:18:73:32:4f:d0:ef:69:4a:32:aa:0c:9a:31:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:92:ED:FB:F6:EA:AF:3D:16:C8:80:1A:69:92:57:9C:5B:57:00:79
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:39:69:c1:0b:b2:73:9d:97:11:47:9b:3b:e8:f6:b5:4a:
         38:35:58:72:26:14:8f:6c:74:ef:f0:c6:71:87:49:e8:7f:ef:
         6d:2b:0c:19:bd:81:ad:6d:0e:97:b3:5e:ee:35:c1:0d:f7:81:
         85:eb:c2:15:8a:23:77:de:74:73:94:62:a8:53:bf:80:45:4e:
         fe:50:98:7e:38:fc:d3:78:d2:e9:cf:75:9b:66:12:60:61:b2:
         f8:43:78:dc:96:50:47:36:80:e3:6e:d4:31:40:29:af:f0:e3:
         ed:da:4a:2b:c6:d4:bc:10:b8:09:57:a8:ac:09:04:a4:2e:eb:
         ec:a3:34:40:fb:e8:04:38:90:67:46:ee:b3:29:2f:05:c8:e1:
         97:67:a2:52:53:d1:d0:e2:31:e0:ea:26:82:53:b2:a3:8d:35:
         4f:f7:8c:7d:da:3f:de:93:18:4a:5c:fe:58:58:37:7e:1a:70:
         4e:f1:c3:dc:a6:1b:b4:59:38:ac:ec:17:6a:e4:84:f5:4b:f1:
         2f:e3:3f:6c:66:5d:79:06:bf:21:46:84:5b:b5:7f:3e:eb:ea:
         92:eb:14:0b:3c:13:39:bc:d9:92:31:2a:50:31:13:0e:10:e7:
         5c:d3:d8:46:d2:94:58:95:c6:da:59:41:b8:e0:7c:9b:f2:1e:
         69:71:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:51 2024 by rpki-client on console-fra.rpki-client.org