Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
File:                     cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json)
Hash identifier:          bR/Gb0auqwTS3MQAUHvyV8jbEg7atrEzSwjyHhhtnhc=
Subject key identifier:   51:1C:B7:C2:74:73:F1:C5:B6:4C:E3:C0:9B:59:94:9C:AB:0D:AC:2E
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Certificate issuer:       /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial:       019356892B15A608A7DE74E4F8631F10EDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:50 +0000
Files and hashes:         1: MV5NL6H-6oZXTsEalmSaR7jDyrE.roa (hash: WLLPFrQiVOzRSxqz1s0aCqM+ltm8wfxZWijsc+FtHPI=)
                          2: R47rWq-lJktblM4-Zobc7-VVZHs.roa (hash: EcmbMdiKNOxAPl/oY2Gtx+JPJJxJqfyKbu7fUpKdlVA=)
                          3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: Fjt7BPglWe7BvXqz1E4rfHZhE+idohcYJSEkLsZxt0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:2b:15:a6:08:a7:de:74:e4:f8:63:1f:10:ed:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
        Validity
            Not Before: Nov 23 01:00:50 2024 GMT
            Not After : Nov 24 01:00:50 2024 GMT
        Subject: CN=511cb7c27473f1c5b64ce3c09b59949cab0dac2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:a8:f3:7e:0e:cd:4a:d9:fc:30:cc:bc:f2:
                    aa:ff:4f:61:12:83:b6:b8:dd:11:f1:94:50:e7:ce:
                    67:eb:a7:bb:37:ab:bb:4f:08:59:4d:c0:2a:63:ca:
                    b7:e7:f0:b0:7b:60:56:6b:ec:7a:0b:49:7b:6b:e4:
                    f9:b7:1a:6b:b9:84:97:40:8d:bc:24:a7:4c:92:27:
                    3e:d7:fd:a6:b7:e5:d0:54:2c:10:63:97:fc:26:dc:
                    68:10:87:0b:58:7d:5a:3e:62:ad:65:35:36:a1:b4:
                    d0:bd:bd:b0:27:00:ca:5f:7c:c4:41:8a:93:53:9a:
                    90:72:b5:c7:b5:1a:76:3c:47:08:41:92:88:ba:c3:
                    1f:b0:05:1d:36:18:77:f4:2d:6e:15:f7:6b:7c:d1:
                    e0:d7:ca:e9:f4:a9:f6:5e:87:4f:07:49:23:16:ee:
                    14:ff:a3:44:6e:41:d2:3d:d2:be:34:c1:41:bd:7d:
                    ee:04:8c:ed:6a:af:73:62:05:55:8b:5f:6a:7a:53:
                    22:34:c6:d0:c8:19:73:96:99:e5:9d:16:e3:9a:f0:
                    d6:a1:27:10:34:ae:d4:ea:61:dd:38:8e:49:81:50:
                    d6:de:39:77:01:9a:9f:c4:ad:2b:00:b8:70:f7:e0:
                    c5:f5:f6:2f:fc:62:e1:b9:38:b3:73:e2:29:52:96:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1C:B7:C2:74:73:F1:C5:B6:4C:E3:C0:9B:59:94:9C:AB:0D:AC:2E
            X509v3 Authority Key Identifier:
                keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:88:61:1e:9c:3d:bc:37:cb:05:8e:98:34:42:47:d8:a1:95:
         1e:79:ca:4e:bd:5b:2b:bc:26:4a:a1:e3:ca:a2:5a:35:80:2a:
         d8:6a:06:d6:79:b9:31:d3:81:ec:bd:cc:84:66:60:7e:f2:51:
         2b:de:be:41:1c:e2:21:26:48:b4:b1:23:b7:b3:1b:a9:cc:17:
         62:c0:fa:b2:3a:20:73:5e:ae:4d:dc:06:d1:40:3c:c0:59:64:
         20:62:8b:53:d7:ac:30:77:79:a3:4b:c6:c7:97:c2:ba:08:f3:
         8d:43:4f:de:10:ea:e6:9c:76:84:e1:4a:da:84:e3:5c:64:a5:
         50:1f:53:1f:36:08:03:fc:d1:61:35:de:d8:cb:c2:58:c2:fb:
         f2:e9:ba:f6:85:fd:4b:1c:ad:3d:05:cb:22:74:77:1d:8f:ea:
         df:8d:9a:34:d9:f2:09:2e:86:09:5f:57:7e:6d:b4:f9:4f:aa:
         07:b1:72:83:49:96:d8:79:a5:26:a0:7a:97:58:b8:6a:89:f3:
         c2:09:ab:8b:06:f7:5f:b6:a1:9e:f0:4a:ae:28:ac:52:7a:b2:
         2a:39:42:7b:ad:89:85:2f:65:0c:85:cd:8b:b1:f2:1e:c3:9d:
         d3:eb:80:6f:84:03:06:a0:c6:ae:4f:cc:8c:b9:f5:df:03:02:
         23:0d:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:01 2024 by rpki-client on console-fra.rpki-client.org