Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          Cq32tgd2AVBYj/O/wOxZ7Pl1pOctL8xcX/tqKtW/Gbk=
Subject key identifier:   0E:EE:B6:90:27:45:FA:3B:86:2B:D6:E3:CB:D5:75:B2:07:B2:3A:53
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       01935199C88BBEBD59AA2694A2DFF51E8AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          042A
Signing time:             Fri 22 Nov 2024 02:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:53 +0000
Files and hashes:         1: FcXfTxFxWBdvphakfc-_9776o70.roa (hash: Q6Evz6/w58rY6wpIzJ1/jfH2CUAhIfdS4zo5WUygnIk=)
                          2: Pm0HwHimauIuq0kqy9dMFnqsPVI.roa (hash: azAdm7MStDPRkq71Cfa0Vp8bl7XpfwjpZJRIxKgwYYI=)
                          3: aVCsauyo4mlb1Kjj82AHm7Q9d_Q.roa (hash: namnQuN4iNkkBdjKAPi9Hw8ECpLbS7KfoxAEN6LDBSM=)
                          4: cGj4ygMcRyWK7U5PtW67h12uirI.roa (hash: eqUqJ2xFOHKtPwvzIgpFuVaqWO7s+lnfxGdis2NAupE=)
                          5: e0yKkVnQQAr1fLBRFN8P3A2Miuc.roa (hash: 6gy02xZ5nKFVh9CdTHXczmL6zVq+FU3q+ZoH2G/9Np0=)
                          6: lzrHoDKe-xHdlgd5xindVPhLI7U.roa (hash: MjNG037jJHN2UrVqTSCHAEnFIPibquA4gJXPa5dSVVU=)
                          7: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: GVwG6ow/FPtz9IZD7lvdJMiVSr48K6Eu/XfTveDwcUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:c8:8b:be:bd:59:aa:26:94:a2:df:f5:1e:8a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Nov 22 02:00:53 2024 GMT
            Not After : Nov 23 02:00:53 2024 GMT
        Subject: CN=0eeeb6902745fa3b862bd6e3cbd575b207b23a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:dc:e5:41:93:61:4d:63:a4:9f:df:d0:ca:
                    25:a5:91:67:f4:96:e1:a6:b6:f4:32:66:1b:8c:3d:
                    ff:34:55:79:a2:dc:91:b4:ba:d9:6e:fb:9f:41:a3:
                    5b:26:61:9a:6e:d3:ee:d5:db:f4:79:24:9b:5c:8b:
                    1d:45:fd:b2:9c:61:f7:95:c4:4e:9d:85:5f:32:a6:
                    35:a2:52:59:a5:1a:c4:78:a0:1e:f5:4c:c6:02:62:
                    42:e1:00:63:c8:f0:fb:2a:2b:85:81:fc:a2:22:f3:
                    b0:3a:3b:94:43:be:76:23:81:77:57:af:cc:04:41:
                    b1:39:bb:2c:89:5e:60:b2:d8:19:37:75:94:06:5e:
                    dc:2c:4f:57:86:78:92:b1:b8:51:c9:23:16:b7:a1:
                    ba:ae:58:74:c9:87:af:7e:bf:ee:dd:93:83:72:15:
                    bc:f5:3f:62:9c:82:d4:2e:a2:b1:d4:95:dd:96:a5:
                    f5:96:58:6b:a9:12:37:09:9e:18:e6:e9:d9:bb:b4:
                    14:bc:56:97:75:49:ba:3e:95:22:6c:94:bf:03:49:
                    f7:ae:b8:71:ed:5e:c6:19:4a:fb:34:ee:86:32:cf:
                    71:07:ac:0b:99:4b:0d:2f:d2:ff:b6:cd:bd:bc:14:
                    33:17:93:27:cf:fc:05:c9:ca:49:c3:31:06:8e:f6:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EE:B6:90:27:45:FA:3B:86:2B:D6:E3:CB:D5:75:B2:07:B2:3A:53
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:2a:f4:11:37:aa:90:f4:5b:3f:21:e3:4a:e9:30:d5:ec:c5:
         d8:fb:56:d5:d6:61:c9:e0:ba:51:a7:c5:01:15:f0:98:a7:e2:
         62:1b:8f:50:14:2a:b4:68:6f:64:4e:6f:e7:41:48:dd:3c:94:
         09:fe:a6:02:25:36:96:ff:c9:31:e9:59:1c:a2:a2:81:4c:c5:
         7b:de:2a:af:0c:00:07:be:19:69:1b:bc:58:cd:f9:56:14:a8:
         18:1a:90:09:e6:84:0c:f3:94:5b:e3:35:2b:93:87:44:1f:0e:
         bb:23:4f:c1:4b:5d:d0:ab:41:95:17:bd:a8:0c:ef:78:d2:1f:
         8f:35:b3:cf:6e:a7:f8:50:03:3f:11:d1:c3:00:87:6b:c7:84:
         85:a4:f9:07:ef:81:de:55:88:1b:25:a6:e4:fd:71:5a:55:3a:
         b2:84:ef:3f:ea:7a:37:55:30:92:bc:49:e6:0c:2a:cc:39:8d:
         2e:ba:22:17:2e:08:70:91:9c:e4:b2:a2:d5:29:34:80:df:e7:
         ff:0e:81:84:4f:f6:81:5f:14:4d:9c:83:02:32:ea:06:94:57:
         4a:a6:46:ef:37:0a:34:22:ad:bf:a5:05:99:91:42:61:44:b3:
         1d:50:9c:d0:1f:e6:39:ea:ff:e3:12:91:c6:a2:1b:88:c5:0d:
         8f:f5:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:59 2024 by rpki-client on console-ams.rpki-client.org