Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File:                     PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier:          7v7IjZ3Qs6bxVXJRJQKNboy7IKp9MBqShK2Qonm36sw=
Subject key identifier:   43:2B:BC:3B:B0:7E:03:F7:21:63:21:E0:FD:86:C9:F8:FC:D5:A9:BE
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer:       /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial:       01935A6757B783306F8D8ACAE849C24B412D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 19:02:22 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:22 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:22 +0000
Files and hashes:         1: 5URjvdjsP-F4HhuUnl-SBFt9JAs.roa (hash: e3XKCTU33fY5kbETVbV7/a5zfaDTPa+ty64eh0GP1iE=)
                          2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: bA8pREh/x5lL1y/h+tW8wnm1e1Zidcq9eF6t+phk14w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:57:b7:83:30:6f:8d:8a:ca:e8:49:c2:4b:41:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
        Validity
            Not Before: Nov 23 19:02:22 2024 GMT
            Not After : Nov 24 19:02:22 2024 GMT
        Subject: CN=432bbc3bb07e03f7216321e0fd86c9f8fcd5a9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:00:e0:48:ea:d4:bf:72:1a:06:4d:91:d7:
                    58:fa:37:64:41:8d:ed:a9:dc:2e:90:5d:25:1e:a0:
                    fc:56:bc:b8:5d:84:8b:4a:d8:0c:78:43:f9:4b:61:
                    90:e5:5d:04:2b:75:5e:5f:7c:e8:9c:d3:bd:4f:e1:
                    9f:7e:16:b8:4c:eb:6d:7a:29:cb:70:8e:e4:a0:72:
                    24:74:1c:14:ab:92:58:d3:7d:de:17:f5:20:a5:09:
                    6b:24:7d:d8:ad:0b:26:33:a2:89:5f:1d:42:e2:d0:
                    8d:1d:cd:94:73:1b:5f:a6:8c:30:5f:f9:14:80:13:
                    13:f7:ee:7b:51:84:38:fd:27:2c:7b:1b:3f:98:d1:
                    4c:de:9d:2d:4a:6e:ff:3a:a7:8b:a8:dd:8d:14:5d:
                    f8:bd:6e:91:55:88:f5:56:d0:8f:bc:74:3f:04:9a:
                    97:b7:5c:67:a8:13:35:29:f8:0c:ab:4a:00:b5:02:
                    1b:66:28:1a:81:72:13:99:1c:c7:d8:5d:59:04:40:
                    3b:ea:45:ca:9e:c7:dc:85:19:db:b1:7c:30:64:c8:
                    ff:49:5f:2c:36:52:c7:e3:cd:3a:0d:6c:f1:0a:fd:
                    8b:8e:a1:03:c0:ab:0d:31:af:8d:39:d9:7b:7a:5a:
                    95:59:37:b2:0f:b7:ab:2c:47:43:e8:f3:6a:3d:27:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2B:BC:3B:B0:7E:03:F7:21:63:21:E0:FD:86:C9:F8:FC:D5:A9:BE
            X509v3 Authority Key Identifier:
                keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:50:5c:aa:32:c0:6f:ba:3e:9e:55:e0:66:ca:ad:f4:53:3f:
         25:52:49:0b:0c:30:ae:1f:0d:4e:ca:ae:6a:d9:ed:ea:fa:49:
         3d:1b:2c:bd:7d:34:04:9f:b1:8a:ad:ce:79:cf:a8:ef:b6:99:
         7a:be:86:94:06:3e:63:91:0f:7d:11:b9:fc:d8:2f:94:a1:d5:
         29:ac:46:0d:4a:4b:d0:04:00:42:7c:df:a2:90:1e:84:08:b2:
         82:d7:dd:a2:da:2d:20:75:1e:02:00:ce:c5:f9:9d:9a:30:70:
         23:ae:57:3e:ae:3e:5a:9e:26:94:ca:15:d4:83:21:f8:d2:0d:
         0a:53:38:3c:35:16:02:8f:32:c9:1a:ae:52:ff:45:87:cc:15:
         b0:b7:2f:1e:bf:b1:bf:4c:10:b9:25:b0:fc:56:a0:5a:35:80:
         d1:96:a5:58:8f:0b:4b:b4:eb:b4:77:d6:9d:d3:bf:1c:74:25:
         66:49:e7:99:01:74:92:a9:46:39:1a:f1:3d:59:87:75:66:24:
         c6:48:77:c8:bc:21:6c:91:7d:b3:59:77:f1:4f:81:bb:d6:9c:
         f6:52:7f:eb:25:1e:d7:27:23:f3:26:2b:c2:86:49:c4:75:38:
         03:30:25:ea:2d:83:74:de:ef:55:b8:e2:db:76:b0:3b:05:42:
         43:6b:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:41:11 2024 by rpki-client on console-fra.rpki-client.org