Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          FDj14c6+Rs24Qntpm/yQlwXucwUjZeAJuGqW9lQBwhs=
Subject key identifier:   97:EA:06:A8:DD:8B:73:04:17:31:12:19:04:D0:A8:0B:0C:67:34:0B
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       01935387A05CB023263D012D4BDD198B1743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          0F40
Signing time:             Fri 22 Nov 2024 11:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:17 +0000
Files and hashes:         1: 0AbbJ9iFdNVeZK44K9UADNLHetQ.roa (hash: 7rqKyESIyvvpj20vbYseLFDGL4sFYb7f8jyYda6YIcI=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: q3lpxk6wZeHQy+bso1aI+kxZvRt+mjTBhnIMSlF96Vk=)
                          3: rZVc5_3K_1-jGrhdm9YkbN63AsM.roa (hash: gVFfmk3tu5vaxJnLtzUpqcTmymQLUqZSyLTw56IirNc=)
                          4: vapu5C4V0tmAwvLONdAgp6O8e3c.roa (hash: Tnzubylrjm2ap5KcX4R3tELnV5BO1WVvmEhMK3nKlmk=)
                          5: yV9drke-h1uIjboH88NUXVHY4Bo.roa (hash: fZOpqsTt4fGdRAb7/U5hRZPCKjKIF+PcrH+P0L033DI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:a0:5c:b0:23:26:3d:01:2d:4b:dd:19:8b:17:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Nov 22 11:00:17 2024 GMT
            Not After : Nov 23 11:00:17 2024 GMT
        Subject: CN=97ea06a8dd8b73041731121904d0a80b0c67340b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:f5:9a:1a:74:8f:ef:56:11:a3:52:86:aa:
                    d0:92:c2:ab:56:d5:7c:1f:bc:bd:09:b3:65:d6:c8:
                    41:04:ab:c6:ef:66:8a:b0:13:4f:14:47:f6:b2:a2:
                    c4:8f:81:d8:56:11:60:4b:63:9f:c7:46:d7:8a:bf:
                    d2:24:ac:ad:6f:38:e6:9d:89:a2:45:99:7f:51:23:
                    30:c7:62:8c:b5:53:4f:ad:ff:73:d1:49:78:64:61:
                    95:d7:9f:a4:7e:86:53:1c:62:15:cd:dd:c7:91:7a:
                    7a:87:e1:de:05:d5:2c:39:dd:49:c5:43:03:a7:ef:
                    40:89:fc:a6:ae:56:1f:82:c3:28:df:ef:60:a8:96:
                    b9:ea:48:0e:51:1b:a5:f7:7e:f8:06:a6:df:07:1a:
                    ac:6d:97:3f:a9:d6:08:99:86:88:31:f6:56:1f:e9:
                    a4:31:aa:dd:24:3e:23:35:b1:d2:a2:0c:0f:5b:ba:
                    ef:a5:62:08:ac:6d:63:07:28:ca:5e:4f:0a:3b:89:
                    8e:4b:7b:89:ce:91:1d:d1:b8:29:c1:f6:bc:7e:f2:
                    3f:7b:a0:08:9d:df:83:44:cd:d3:8d:2c:5c:d9:b4:
                    70:0f:82:31:2b:52:7f:c0:d4:b5:9d:fb:70:46:d6:
                    e7:b0:e1:79:40:df:ae:5d:38:9f:82:02:56:bf:11:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:06:A8:DD:8B:73:04:17:31:12:19:04:D0:A8:0B:0C:67:34:0B
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:dc:3b:49:de:6c:fd:5c:9b:6f:ee:50:ff:9b:c5:35:78:
         67:2b:0b:4c:f9:2e:ab:39:a3:7b:40:0e:53:f3:55:d0:ed:fe:
         13:eb:27:16:1b:f1:bf:fb:3a:40:68:c6:3d:1c:ec:55:d2:dc:
         5f:64:99:d8:b5:43:92:54:6e:ae:c7:c3:03:5a:65:0d:d8:c7:
         0b:4e:01:88:36:c4:dd:d6:69:dc:62:9d:be:0a:0c:ad:29:a8:
         91:83:47:43:3e:35:97:a9:89:f6:a8:c1:ae:aa:05:3a:c9:b6:
         f3:ee:b7:2f:a0:fb:63:b8:27:f2:22:60:1c:63:73:93:24:7e:
         5f:9a:75:0f:b2:76:98:aa:c3:b9:c4:c1:2e:db:d5:eb:14:98:
         3a:8c:51:da:8a:3c:9f:ef:69:d1:03:67:22:19:21:a7:a5:44:
         90:98:0c:a7:31:0c:57:1d:5e:87:e4:54:cf:b0:d3:5a:06:05:
         7d:f3:6e:91:e4:4f:20:f2:bb:dc:04:36:81:88:bf:bc:bd:5f:
         df:f5:19:11:aa:1c:94:79:70:c0:86:e4:fb:dc:66:00:a4:a1:
         9b:58:9f:ec:78:b6:a8:5b:68:81:0b:05:23:42:90:4f:eb:00:
         68:87:7b:e0:65:ef:33:0e:01:3b:14:f1:f0:c0:98:50:37:46:
         da:4f:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:45 2024 by rpki-client on console-ams.rpki-client.org