Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
File:                     G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json)
Hash identifier:          wpUFDqhqy9QJHUVZLyzCmmdV/04J8TsQ4+HePoEpsto=
Subject key identifier:   6D:8C:44:31:70:5A:8D:48:23:76:A5:47:3D:CC:46:86:37:E1:14:81
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Certificate issuer:       /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial:       019351623735EC9A60D8B9E818DFAF8DF314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
Manifest number:          0E4D
Signing time:             Fri 22 Nov 2024 01:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:11 +0000
Files and hashes:         1: 1qYTN_wDHrjUeD-rRp5Pv9Kmh-w.roa (hash: 7A2/V1rFRQM/cUQaD6Hq6Q/iJqb0/iaIWIrI4i1rFQg=)
                          2: DUcXS28ANkGw_Z3ZV2VKweuQvzE.roa (hash: jsgxM6NBtPCdHC6RGcefNMCs3JWfel2yzFMJ176B4Zc=)
                          3: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: bkF+RcybTIy1iS7H4HpbZZZCOnV+UiyguKt6nHtHmt4=)
                          4: a1bvuYGbC7o5KebnAPFfLCZNR_Y.roa (hash: sk4VXsJ6ola7deyGgxnKsUn5hNEK8npKXdaxTOJ3EIs=)
                          5: sQO5RoXs508ZEhLdGf27TnOAZOg.roa (hash: iPyzbHTvR7ZHD1pNmuWYstSA3j4HkRErAhnx1Z+lNFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:37:35:ec:9a:60:d8:b9:e8:18:df:af:8d:f3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
        Validity
            Not Before: Nov 22 01:00:11 2024 GMT
            Not After : Nov 23 01:00:11 2024 GMT
        Subject: CN=6d8c4431705a8d482376a5473dcc468637e11481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:91:9f:83:45:86:5e:15:1b:cf:d5:5d:d0:
                    da:dd:7a:ef:9a:92:c4:0e:d2:48:39:2e:66:e1:32:
                    27:20:24:93:1c:f6:b1:a1:ea:c3:80:bd:38:2e:bb:
                    65:3e:6b:bd:04:17:da:ca:1b:1b:6d:4d:bb:14:10:
                    6a:c3:05:f3:d2:0a:aa:65:fb:48:d9:42:16:ab:f3:
                    3b:e3:33:f2:64:6b:36:32:21:de:7c:3d:b2:07:8a:
                    fe:33:c8:d1:43:4c:35:44:ea:b9:5d:2e:8b:2f:0a:
                    b2:1b:30:a9:f3:f4:45:c8:6b:b5:7d:6d:d5:da:08:
                    08:fb:15:29:49:44:89:ed:a0:01:a4:df:cf:c5:64:
                    dd:84:71:eb:cb:f8:b6:db:cd:41:29:3f:3c:0a:25:
                    5d:8f:be:02:da:a5:0c:f9:3d:37:e7:d0:f5:30:3f:
                    87:ad:cc:1b:74:07:f8:6b:54:1e:17:3a:bf:ca:d4:
                    c4:b7:6c:d4:a2:b6:c9:4d:9e:30:5f:2e:29:59:fe:
                    2a:b3:ff:e8:d5:c5:f0:5b:30:56:38:83:b4:65:9a:
                    3a:ec:17:79:60:53:56:65:55:2a:5b:47:a6:f4:64:
                    9a:ef:00:29:68:73:ae:68:9e:5b:de:0b:19:0d:da:
                    bb:59:f3:63:09:9f:6b:27:4f:cb:1f:7b:1b:61:7d:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8C:44:31:70:5A:8D:48:23:76:A5:47:3D:CC:46:86:37:E1:14:81
            X509v3 Authority Key Identifier:
                keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cc:9e:8a:6e:e3:af:3e:51:ec:c6:a0:6b:a7:5a:b8:17:61:
         05:c5:21:cd:20:0d:d9:a3:85:9b:21:12:5a:1c:d5:2a:c4:6b:
         fc:3c:aa:d0:fc:b1:f4:14:53:35:6b:55:af:ce:d0:ae:21:fd:
         1e:b0:9c:ee:fd:e9:16:eb:47:68:74:b0:1d:86:07:fb:1b:60:
         bb:9e:3b:21:84:8b:67:b3:c9:4e:2d:7e:46:e3:18:1c:3f:ef:
         b8:4f:18:23:8d:ae:05:3c:17:f7:c9:5b:68:25:d5:f8:4c:a2:
         26:12:d6:b0:74:9a:36:7c:d4:9f:64:29:6c:19:09:f9:6a:42:
         7a:9c:9d:7a:03:e6:9f:9e:f6:f5:57:e0:1a:eb:40:ed:d9:ec:
         d4:c1:27:39:5c:bb:c7:de:23:12:34:1a:62:29:2d:9e:62:35:
         1e:78:5e:f4:37:96:bc:28:f3:0d:98:97:91:fc:b5:af:7e:74:
         06:0f:16:b2:d7:38:6c:b9:15:af:7c:a5:96:49:06:d3:14:a0:
         0a:39:0c:4d:34:1a:51:0e:7c:0a:c2:6b:43:7e:44:44:92:dc:
         99:9f:de:90:73:a7:d9:15:3e:8f:73:ca:cb:c9:2d:7e:98:27:
         d6:d5:aa:10:63:17:13:b1:d8:a0:28:72:c9:b4:3f:5e:b7:b5:
         94:c6:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:04 2024 by rpki-client on console-ams.rpki-client.org