Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File:                     hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier:          YKJe05jac7s2NYzB1YePrS2os9Ev9gtPGvo6lAGP+4c=
Subject key identifier:   DB:F9:C5:13:44:48:22:34:25:77:38:4B:1F:2F:02:4A:0A:D5:EB:4E
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer:       /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial:       0193587987768E5B8C03A8E7533151D379B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:02:59 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:59 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:59 +0000
Files and hashes:         1: 4hjTK9t80-M4MSMOPKAQ4cHAMyA.roa (hash: zrs2R3lvYCjBBe+S8a00r+YasywPDi8h2a2i9F6l/uY=)
                          2: bVOYoYY4kLtFcWCOQBT8OJMEsLw.roa (hash: HEY7oQmlr4VRcp8jdMagOVRTFXuphMM4418OBnIr4dg=)
                          3: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: /0pPKZulyNjgi8WiWWIxHNN1LnG2UH7ItFlRPTTjY7Q=)
                          4: rTvw0iFsazeCFb0CogbUj3xy4Aw.roa (hash: WOcK2x7p3vznuIYgPkTrJD3DL0lp1k2/SRuiTDOul/Y=)
                          5: sMSHQnk2JNxEHm8sjpMx-G2kK9M.roa (hash: kwqlk6FinezJB904OSl+xjSqZxmsM6u4ZlOzD9FXK+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:87:76:8e:5b:8c:03:a8:e7:53:31:51:d3:79:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
        Validity
            Not Before: Nov 23 10:02:59 2024 GMT
            Not After : Nov 24 10:02:59 2024 GMT
        Subject: CN=dbf9c513444822342577384b1f2f024a0ad5eb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:50:1c:ed:77:d3:d2:78:5f:55:b9:30:a1:
                    77:09:78:38:44:80:40:2b:3e:94:ec:0c:ef:f2:b6:
                    2d:61:cb:d6:6a:b3:77:8c:dd:3e:4b:cb:35:19:54:
                    c7:21:35:92:84:2e:dd:d5:8d:53:f9:6c:d7:d8:27:
                    8a:74:c6:54:3f:d3:78:52:dc:3a:6c:31:e7:40:fa:
                    fc:53:0f:e5:07:09:e7:b6:0d:c6:0b:b7:9f:01:f3:
                    82:b7:a9:43:81:ff:f2:d3:d4:c2:97:ed:49:ad:72:
                    90:9a:02:fd:b3:34:d0:80:bd:90:cd:93:91:b0:58:
                    72:c0:0b:71:13:09:36:1b:6a:06:64:16:0d:6d:48:
                    f7:cd:1b:d8:03:3e:9b:5f:53:cc:0e:0c:f8:d2:43:
                    d7:77:32:8a:d2:ef:1e:83:61:23:98:ff:c9:e1:54:
                    10:8d:cc:d1:8e:22:fb:1a:8f:e0:72:51:fc:9f:58:
                    6a:82:91:db:e4:c7:ad:48:a5:f4:a8:c1:1d:11:40:
                    b9:1d:c7:ba:2c:74:93:4b:82:8f:c9:99:8b:28:ba:
                    0c:a6:f6:4c:49:a6:d9:7b:bd:2d:49:05:ca:02:cd:
                    d8:b2:24:53:d7:0e:6f:de:83:b7:79:4d:2b:a0:09:
                    f3:2f:7e:83:64:62:ad:ed:db:95:99:4e:e9:9c:1f:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:C5:13:44:48:22:34:25:77:38:4B:1F:2F:02:4A:0A:D5:EB:4E
            X509v3 Authority Key Identifier:
                keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:42:e2:4e:ed:77:66:a6:9f:3a:33:a4:ba:9e:6b:36:29:
         b1:03:02:8c:90:2d:41:2c:90:41:a6:d8:06:e4:d0:32:0f:97:
         7e:a8:c5:e0:1b:c6:97:83:c9:9e:8a:c8:24:ca:28:78:2c:f5:
         7e:99:34:be:a2:30:75:ec:0c:79:b5:16:77:4e:39:bd:83:b5:
         12:3c:1a:52:86:54:9e:80:9e:61:c8:c8:4d:c9:98:6c:ac:ff:
         29:7e:ec:2d:b2:02:00:4f:77:cc:30:32:e3:b5:d9:80:59:9b:
         c7:26:31:f9:fe:d1:08:3f:38:43:08:04:55:c3:51:06:d5:11:
         25:4d:8c:59:30:0b:b6:04:56:c7:52:92:2b:8a:2d:c7:ef:1a:
         96:5e:ef:06:87:06:e6:23:47:6f:fe:92:1f:6d:c6:db:18:99:
         e8:3c:91:c9:18:f3:bb:3b:ca:57:36:72:92:da:49:22:dc:ee:
         44:13:ae:ca:81:5c:28:7e:da:4f:46:2e:1e:6a:c6:26:61:c3:
         ae:70:5f:71:12:b5:bd:a7:b2:9d:66:ef:8c:9a:46:9e:46:b4:
         35:2f:87:c3:f9:96:4e:c9:1d:73:2f:4c:47:da:10:96:87:b9:
         2b:4d:91:83:5e:2a:c7:98:1d:e9:90:0a:50:21:c7:d9:f4:e4:
         bf:43:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:16 2024 by rpki-client on console-fra.rpki-client.org