Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
File:                     csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft (raw, json)
Hash identifier:          QO0demd6VYCY6qEjEk+3rRX+BzasbC27TBoSUB+FTwg=
Subject key identifier:   99:7E:42:87:4D:2C:74:5A:66:3B:B7:E7:44:50:E5:E4:12:5F:EB:6D
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       019355E478C05889813053ADDC494AB14D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 22:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:56 +0000
Files and hashes:         1: 4s3bxaC31b5ZUw2F_u9Yx4hBnGE.roa (hash: bTGG3yXAoYWSjygHnx4rX/B/HFcR8oPJfxeqG1nOxbE=)
                          2: HnNefyMmDDQOC3VaHFmtRD7oeBc.roa (hash: v70MDvPCN6bs1yTeKB+Wk1qGMYTJ4uKhui6eOH8VUYc=)
                          3: WIDm3PPjv4BfL9mlLDSqy7LaiQs.roa (hash: g2ssmiqwGQuGyAi3l4HzDEXnN4mTTAuAFrlyy5sWSWo=)
                          4: csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl (hash: mKozhuuVTmV1M3W8H/aeeWEBYB7M0I8vadf0tm2ofnA=)
                          5: yOIJfnfQdFpLX5h90srBKksV-w0.roa (hash: aI41zLiaG5Jhq2185ePoxz0yYe+cW4VCyvkqvnrM/eA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:78:c0:58:89:81:30:53:ad:dc:49:4a:b1:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Nov 22 22:00:56 2024 GMT
            Not After : Nov 23 22:00:56 2024 GMT
        Subject: CN=997e42874d2c745a663bb7e74450e5e4125feb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:2b:7b:e3:7e:31:9d:85:bd:db:d2:7e:a7:
                    08:80:54:55:bf:bb:8d:3e:6a:a7:9a:88:7f:62:e9:
                    cb:42:c3:a6:76:4e:03:85:13:27:4c:79:de:b1:5b:
                    a6:7f:07:2f:c9:41:32:11:5c:5e:5c:ee:3e:19:9e:
                    d0:05:ae:b2:5b:96:92:2e:94:ac:dd:b1:ad:64:69:
                    ac:3f:1f:0e:3f:e6:94:d3:0e:72:1f:59:b0:93:8a:
                    f8:cc:93:df:ae:5c:56:17:b3:cb:23:da:b2:a1:06:
                    1f:86:57:50:92:cb:12:74:04:48:f2:b1:dc:c3:15:
                    36:a4:19:61:e1:6a:a0:22:c0:3d:c2:16:10:75:20:
                    8b:19:09:df:d6:23:7f:79:3a:a4:34:57:68:34:59:
                    48:f1:9a:3f:1d:eb:3c:97:2c:9b:24:e9:c5:3c:ce:
                    f1:c2:d6:cc:b7:42:9a:2c:b2:a6:1d:32:db:16:44:
                    94:1a:16:43:d8:c0:77:8d:02:4d:3f:24:26:3c:23:
                    87:fa:13:b4:f3:26:b2:d1:4e:8a:35:fe:61:d9:bd:
                    b6:41:48:87:59:24:c6:48:51:f5:f3:f1:f5:1d:3b:
                    c7:89:ab:ac:da:38:20:27:98:1f:28:94:ea:9e:57:
                    61:5f:2e:4a:7a:3a:b2:59:be:d2:5a:2f:d6:d5:3c:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:42:87:4D:2C:74:5A:66:3B:B7:E7:44:50:E5:E4:12:5F:EB:6D
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3e:8c:7e:38:dd:76:f9:d7:2b:a9:de:5e:b0:02:3e:f2:9d:
         36:da:34:35:b7:08:7e:f7:75:e5:d4:4b:81:b8:59:29:67:d2:
         e5:a3:63:f9:10:4d:08:33:e9:df:0c:3c:c0:1e:d1:85:a8:50:
         27:e0:89:7c:e8:02:54:05:82:00:42:bc:9f:0f:97:08:07:24:
         1e:ec:2d:ed:cb:02:e9:fc:cf:0f:cc:f9:b6:13:ca:45:0f:55:
         db:e7:5b:6b:a1:32:df:0e:bc:a3:41:02:6b:ef:19:fb:fd:e0:
         e0:04:eb:75:a1:a7:26:2e:99:c0:c2:88:6e:32:07:3c:81:d7:
         2c:47:3d:7c:79:23:1c:47:ea:33:b8:e4:18:3a:24:90:4c:1c:
         4e:eb:f4:a0:bc:5f:b5:eb:ab:dc:2b:b2:db:8a:c0:10:7e:e1:
         c0:b2:c2:55:99:59:4a:90:fa:80:d5:1f:26:71:48:0a:bf:34:
         cb:56:37:94:59:cb:55:58:19:9d:3d:4a:62:15:ed:1b:03:0f:
         9f:ad:93:87:f2:c6:71:20:33:aa:e8:f5:aa:b5:f0:10:7a:59:
         08:66:5f:73:70:39:27:4a:2b:c3:03:eb:95:0f:64:3b:74:57:
         d2:3e:7a:73:f2:cf:f0:71:d2:9c:37:f7:17:85:ce:a7:24:25:
         13:f9:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:41:57 2024 by rpki-client on console-fra.rpki-client.org