Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          ESNIHm8Lhu4X1sFmnwl5uHVRYGeRq2b+tnLsHYsjc7Q=
Subject key identifier:   4F:EA:C3:05:AD:E4:D1:95:0A:DA:D5:FE:D9:1D:F2:4C:4A:25:A8:D0
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       01935689302814F91AC45536748203808A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          1378
Signing time:             Sat 23 Nov 2024 01:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:51 +0000
Files and hashes:         1: DPkoyJm-5BRG46XjO_pD173zs-o.roa (hash: p+gatfWrluhT5cvP6VCTe+uyl2d7Tb7Iji6Xd2d6zAc=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: V1ypoB5c5xUoBrXwnnXpSQVZ2cZO3ihVK8qPKzIxteY=)
                          3: GX0cE2F4912LsRvT-4QWUEO6BPI.roa (hash: x0apLtHbpD5gXHtCthRE2Xn/XT/4PWpbR2DOWgyBWVs=)
                          4: IoeNxdA1GjOTGgmctWo6Cigts-k.roa (hash: LKPJFemfNIP/d3N7CBxclNB0gfL01GhfhiibDg5EpXA=)
                          5: h4mMXHtY4N4VSFDO44H_mPzfjJU.roa (hash: slJy7wxdSX8PxZzpE8UDiin3b+TAN2+q5+rxuTuvGnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:30:28:14:f9:1a:c4:55:36:74:82:03:80:8a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Nov 23 01:00:51 2024 GMT
            Not After : Nov 24 01:00:51 2024 GMT
        Subject: CN=4feac305ade4d1950adad5fed91df24c4a25a8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:ae:3c:07:24:e0:08:0f:46:58:d2:78:03:
                    d5:e2:15:9f:05:cf:8a:c8:01:73:7e:be:c7:bb:f4:
                    8e:b5:11:a0:8a:bb:9a:52:27:49:89:7c:33:d9:0a:
                    8c:28:d6:9b:72:6d:6c:76:88:01:ce:23:5c:b5:48:
                    63:c3:ec:ce:63:a6:2c:5d:a4:ad:e6:7b:a4:a7:0b:
                    c6:2a:d2:be:b5:02:85:b4:42:20:b2:56:7a:b2:2c:
                    ab:2f:6a:27:24:70:25:37:f7:c2:40:70:82:00:ab:
                    1f:56:66:a9:61:88:8a:1e:cd:b4:cb:7a:48:d2:7d:
                    a2:6f:b2:d6:18:cb:b6:77:c2:11:18:90:c6:cb:d4:
                    15:b7:45:87:10:f9:fc:84:ef:0e:bd:cc:af:14:8f:
                    73:de:c2:fa:7a:31:e0:92:9a:2b:58:67:67:db:3b:
                    14:c7:0a:ac:38:25:10:fb:eb:2b:f5:20:2f:3f:1e:
                    fd:2a:0b:c0:b8:18:7b:a7:c6:ea:c6:b8:19:b8:b0:
                    12:d2:5b:20:0d:d4:21:ac:46:bb:59:af:9e:85:68:
                    d6:68:c7:07:d1:66:e2:c6:55:9b:19:95:63:b3:7e:
                    a7:bf:4e:a2:31:52:8e:d5:59:d0:0e:47:65:f5:ff:
                    57:b7:37:67:07:f6:07:67:20:12:57:f9:e6:ef:ef:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:C3:05:AD:E4:D1:95:0A:DA:D5:FE:D9:1D:F2:4C:4A:25:A8:D0
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:9f:e7:82:12:00:05:29:f7:98:04:18:6c:da:bb:d2:80:
         4f:e1:52:92:4c:ca:d3:d3:58:a8:cd:52:e7:10:bf:36:75:a9:
         1d:6a:4c:01:6d:eb:e5:96:4a:e6:21:4f:0f:6c:b6:18:fa:6e:
         ca:ba:fe:be:ef:a4:d5:35:bd:2f:bd:7a:6a:9c:db:6d:7b:03:
         51:d8:e8:76:19:53:c9:22:70:fa:d7:86:b5:f8:f9:06:d4:71:
         7d:2c:33:1d:d0:04:51:8b:12:44:04:9b:41:1c:5c:46:cf:e5:
         3c:e6:e1:75:17:2e:62:61:dd:01:4b:af:ab:ec:1a:bc:67:96:
         91:6e:d1:69:e7:f4:81:91:6c:d8:5d:b3:a5:b2:52:16:ac:3b:
         31:72:29:53:23:b4:87:ee:ec:3f:57:06:1b:7f:f4:71:58:06:
         db:1d:fe:a5:07:11:40:1b:00:70:74:94:eb:07:78:9d:0f:72:
         a3:6f:3c:25:27:a8:47:b2:74:a3:cc:b3:07:b6:1e:c4:f3:96:
         de:83:c8:04:f0:dd:73:35:d9:e9:9e:b9:bd:e3:c1:1b:ee:ab:
         01:ca:53:d0:40:9a:e5:44:4b:fc:a4:57:b0:b2:d2:c5:15:1f:
         63:85:98:39:81:16:17:e1:aa:13:a6:52:3c:79:28:e9:14:77:
         f5:cf:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:59 2024 by rpki-client on console-ams.rpki-client.org