Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File:                     rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier:          aPITKJjzTBHMU6tayEheBlyB8z3Kw4NoQjSBZOSpZvg=
Subject key identifier:   28:04:FB:94:5D:5F:1E:B7:51:01:B6:5E:C9:28:EA:F0:35:3B:3C:1B
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer:       /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial:       019369341348430A9C2F4C836D988C5A0A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number:          0BEE
Signing time:             Tue 26 Nov 2024 16:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:40 +0000
Files and hashes:         1: lZPpOwuR1IDr7KQsvcKgQVXmJPk.roa (hash: TaDtz8ab4MmySPq+i1DKtTCAAKcTyrbTLt04jWDE3BA=)
                          2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: gfl8F7KyrslHCMEccgvCdbI9VU4MGXfuPsjLZsxS4Ss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:13:48:43:0a:9c:2f:4c:83:6d:98:8c:5a:0a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
        Validity
            Not Before: Nov 26 16:00:40 2024 GMT
            Not After : Nov 27 16:00:40 2024 GMT
        Subject: CN=2804fb945d5f1eb75101b65ec928eaf0353b3c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:45:59:e9:ae:d8:42:a3:8a:08:09:5e:e9:2f:
                    65:8e:7b:57:0d:d1:4f:16:9e:69:fa:6b:e8:71:54:
                    42:fe:e7:c2:04:1a:49:f0:4d:dc:9c:b9:06:1b:6f:
                    1a:8a:2a:b0:3d:79:6d:fb:6f:a9:2f:cd:d9:cd:2a:
                    ae:3c:7c:25:cc:5a:fb:e0:bf:f3:e2:f0:b8:16:af:
                    61:f2:43:d1:88:0e:9b:f4:dc:3c:8c:5c:e5:f2:0b:
                    eb:50:78:5d:d6:fc:fb:d1:90:ff:b7:15:11:61:4b:
                    72:ae:5f:b5:e3:01:82:b3:2b:28:62:a7:7d:1d:00:
                    a5:9e:5d:ec:d5:2b:36:0e:59:6f:2b:55:d1:b6:be:
                    ae:b0:fc:d4:60:8c:40:ef:02:4f:65:eb:14:9e:0c:
                    11:81:c9:f8:db:5c:83:56:3f:e8:a7:09:f0:44:3e:
                    4e:4a:e2:c6:09:7f:c8:a7:1a:f9:48:72:12:f6:48:
                    e9:91:04:1c:2b:19:52:c3:a4:f0:90:32:eb:33:34:
                    7e:7c:33:69:70:2b:15:1e:7e:36:fa:f2:2e:d9:32:
                    68:85:de:14:21:d7:39:f7:85:b1:66:2b:61:85:7c:
                    1c:04:c6:a0:d8:1c:74:62:ae:bd:3f:fc:b8:42:b4:
                    9d:69:25:86:31:92:a3:c7:10:43:9f:59:65:7d:ac:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:FB:94:5D:5F:1E:B7:51:01:B6:5E:C9:28:EA:F0:35:3B:3C:1B
            X509v3 Authority Key Identifier:
                keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:36:9b:9d:c4:51:31:56:62:32:03:37:fd:2a:12:0a:59:43:
         ad:59:7d:7d:02:0d:47:1c:61:16:d6:58:1a:b1:a1:99:f4:f2:
         26:24:1b:59:3b:6c:0d:7a:51:bc:f6:55:66:2c:4a:c0:c1:95:
         ed:ed:7a:2f:87:e8:39:d6:cc:75:b0:57:e7:ae:b4:bc:2a:6d:
         c8:6b:4b:81:e0:8d:4c:0f:ab:c6:34:d5:a6:af:94:ab:b5:1f:
         10:35:66:c6:34:bf:08:05:9a:41:75:11:b5:ba:da:d2:b7:60:
         57:29:4d:5e:be:62:6b:1b:e9:73:80:ba:af:75:fc:25:f7:1b:
         66:59:9a:4f:33:05:d4:69:a6:bb:a6:dd:a7:c4:86:64:a7:2b:
         00:25:19:ec:3a:25:29:c9:e6:df:b4:7f:55:05:d5:5c:b7:c1:
         60:be:c5:d4:c4:d8:85:88:f5:13:1c:cc:e9:3d:2d:2f:39:12:
         37:14:c4:ac:2d:56:ce:52:40:e2:9b:ef:f7:76:9a:50:5d:54:
         70:7d:52:0c:64:b0:4f:4f:80:5a:63:04:bc:c1:7e:fa:0a:41:
         83:8a:9e:56:35:c9:f3:08:a0:de:2c:b7:79:42:71:cb:c0:8c:
         68:63:0b:c6:ce:2c:cb:be:4a:f5:ad:31:f6:fa:72:62:5a:d5:
         e0:a6:22:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:13 2024 by rpki-client on console-ams.rpki-client.org