Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File:                     1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier:          /SW2DngIBNF870LvynMKV0L2EfIs8l06UrLR4ybm6mk=
Subject key identifier:   CB:9B:88:93:00:A0:47:11:EB:E6:C0:4B:21:F5:D0:7D:2A:59:07:F7
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer:       /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial:       0193587873CA0A5D7A4B8B8605D664147706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:01:49 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:49 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:49 +0000
Files and hashes:         1: 06ZTRcUUos6xWKJidzAN4oy0nkE.roa (hash: DUNawh6fZ9X1j86oHmC7DcXNiuw7SeuNE51iJg9dWUk=)
                          2: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: JMu0NoFcl196f0+IWXx8iXwLxrT4usQeDeJOdQU3iic=)
                          3: 9bhI8g2M1shvKcy_IOoHpaYqQ_c.roa (hash: ZaQi+C49hS3IE5yFsoTFOwg42wrEIOALwh1YHtOtY+8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:73:ca:0a:5d:7a:4b:8b:86:05:d6:64:14:77:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
        Validity
            Not Before: Nov 23 10:01:49 2024 GMT
            Not After : Nov 24 10:01:49 2024 GMT
        Subject: CN=cb9b889300a04711ebe6c04b21f5d07d2a5907f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:37:61:bc:9f:06:80:a4:d2:59:97:7c:43:d1:
                    bb:45:0b:00:58:89:a6:e9:2c:bb:a8:ab:8e:5d:b0:
                    99:36:34:94:8b:01:68:26:7f:7f:57:0f:1a:be:06:
                    3b:e1:02:c9:48:c8:54:a2:1c:20:38:21:00:44:cf:
                    62:36:7e:d8:53:35:94:f7:31:93:f1:90:58:27:59:
                    24:bc:1a:06:08:c3:76:01:11:51:a1:1c:43:2d:01:
                    d9:43:b2:2b:89:13:44:4f:0c:2f:b0:aa:96:a5:20:
                    40:38:47:ce:be:d7:a4:e1:0c:37:6e:38:c8:2b:8b:
                    54:33:37:c7:d1:13:12:37:56:07:43:eb:8e:66:cc:
                    40:f4:08:d9:cf:97:71:db:3d:81:18:96:82:d8:39:
                    63:d6:92:17:6b:a4:57:56:04:6e:3b:62:d0:0a:7e:
                    c8:e9:6f:9b:e7:47:61:a9:bc:12:80:07:bd:39:2c:
                    06:7e:71:7f:cc:f3:77:82:95:97:46:40:e9:72:9e:
                    14:c8:4c:75:47:d1:fd:3d:2e:4d:07:ea:ab:08:10:
                    42:ed:4c:31:f9:5d:94:96:27:e8:f5:57:b3:58:15:
                    a7:e0:b7:b9:68:ef:40:31:bc:0b:0b:f2:67:f8:94:
                    55:ca:c2:db:25:d8:be:52:06:f2:ca:3d:7e:14:7d:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:88:93:00:A0:47:11:EB:E6:C0:4B:21:F5:D0:7D:2A:59:07:F7
            X509v3 Authority Key Identifier:
                keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5b:9d:75:72:83:6d:86:cf:c7:1d:54:bf:49:a4:34:11:9d:
         27:30:4c:7e:d3:fb:07:d2:e6:8f:91:f5:cb:0b:9f:91:87:b6:
         00:d8:22:75:e8:dc:e9:42:ad:32:85:78:77:db:5a:48:48:91:
         25:1b:38:08:ee:92:a8:0a:cd:87:77:90:5e:6f:20:ab:27:7a:
         83:ca:b8:28:5a:9b:c3:3f:78:8a:31:90:0c:7e:7b:24:b8:61:
         5a:c1:bd:1e:84:58:77:bf:a0:d1:72:32:83:a3:b5:06:fe:25:
         36:6c:28:dd:b0:07:af:b9:3c:5b:62:bc:97:4f:b8:95:ba:2c:
         12:9e:d3:1f:e4:7d:f8:81:59:a7:21:bb:64:98:84:ee:36:9c:
         f5:61:0c:b1:f5:03:87:01:84:2f:76:54:d7:91:4b:3c:28:e2:
         91:da:cb:a9:b9:46:68:ac:ad:f5:bc:d7:3f:91:f5:43:e7:7a:
         7d:9f:87:3b:d5:63:aa:2b:d3:4c:f2:f3:37:98:fc:fd:25:ad:
         87:f9:38:42:4b:b5:61:e1:f6:6e:ae:91:59:52:cf:e3:83:25:
         0e:89:94:d1:3a:f1:e2:1b:2b:13:f0:90:63:8d:ca:95:aa:4f:
         f3:99:0c:66:61:14:0c:aa:b4:dd:d0:8d:18:d6:fe:10:16:4c:
         4b:88:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:13 2024 by rpki-client on console-ams.rpki-client.org