Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
File:                     Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft (raw, json)
Hash identifier:          YvjhLS6e/oQhO9Pg8TimoCkUHrxVElr2LIyvXACrSXs=
Subject key identifier:   FC:CF:E2:77:32:B1:7F:D5:10:B9:E2:D2:09:0E:DB:EF:09:97:7D:F8
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       0193523DED18E778159384AE648F0B4DBFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
Manifest number:          1260
Signing time:             Fri 22 Nov 2024 05:00:10 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:10 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:10 +0000
Files and hashes:         1: 8nrmtvqjbhpzGLhDUUGaEie_jYU.roa (hash: bn2G5zvgbfgmoPibvoG3yOr3sPXJoX5UWeYVFdJnNPY=)
                          2: Hc_YVklU2zPwGl5bZo3q64axD_U.roa (hash: +FGcmFM6BJgT6vxU8W3908zudHf5YTewSNOcLBrz604=)
                          3: Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl (hash: Rt5uD6LuyNdTtHaoGS7VflpfjOBJglvZU55dNU+dZ84=)
                          4: WZOkdQeycDmfsZHytZyXqfGJ-jo.roa (hash: ft2foDSN4IYvYzT/L85VM02q3w19jXEzk1HU7cimUNs=)
                          5: dU-bYGcwmOrB1zeAi7zO9oJVuhE.roa (hash: +P7aaMev+MF0oM8DOVa/FyFKFPaanwokhu9pbNWCIto=)
                          6: k2RVmMw4dTjE-E7Uc5HM8pps6L4.roa (hash: MA+oigHJbuNq/V3cBqh3wlOrDhlwgij4sZbn8b5+NbA=)
                          7: op-w-6hes_W1WhU7XyFre595OIA.roa (hash: 1SIUH6pubNDLrthi10aeVBHLSsh6il7tFJ5HrtRKTaU=)
                          8: rHgHaIdKOkbf6WYxs3m2wWkJTNs.roa (hash: ZH9aoy62Ts/KQX0bH9yiK/enq8IEQ9yB25YxaGVvrFk=)
                          9: w7cMBuiDzA_z6f8d_1czaOT3RNc.roa (hash: q3HOTDDFZfIwOAPdp9f9vbkD3PTTHQtKkTTxI34dzMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3d:ed:18:e7:78:15:93:84:ae:64:8f:0b:4d:bf:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Nov 22 05:00:10 2024 GMT
            Not After : Nov 23 05:00:10 2024 GMT
        Subject: CN=fccfe27732b17fd510b9e2d2090edbef09977df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:60:d4:5b:0a:c7:3f:04:26:59:e6:4e:7b:
                    05:33:d3:00:ae:2b:cc:2e:51:40:f0:94:b5:9e:b8:
                    56:77:18:96:f8:92:b4:6d:d5:d6:f0:ff:ac:7c:95:
                    db:e0:74:a1:5d:5d:73:f0:75:ba:0a:9d:bb:ae:86:
                    41:34:eb:06:1b:7c:45:2a:3d:a7:1d:53:e0:71:42:
                    1b:5e:c7:b1:1a:a7:37:f9:39:2d:a7:bd:87:71:6f:
                    d9:25:3f:62:a6:55:b0:85:db:ef:3c:83:10:f4:84:
                    4e:4a:0e:87:64:3e:cd:55:68:4e:28:35:ee:6b:b8:
                    e0:6b:1c:df:74:ee:c8:65:93:72:36:25:35:7f:e4:
                    11:b0:92:af:cc:d9:e3:49:34:88:06:04:ba:80:6f:
                    60:7d:36:ce:8f:0a:c0:6e:f7:01:0e:33:7f:df:6d:
                    1d:bb:ae:a9:22:d8:33:13:a7:7a:c9:bf:9d:2f:49:
                    ab:8f:9d:33:30:d3:0e:40:f0:97:52:2a:0a:31:d6:
                    f7:90:7d:86:9b:d3:e6:61:06:cf:34:bf:47:75:aa:
                    36:9a:72:1c:45:3a:9b:bc:b4:1a:07:24:15:88:4f:
                    8e:d8:ea:6a:86:d8:f9:93:c2:d4:8a:e4:11:10:8d:
                    b5:a4:6c:10:47:71:a1:11:44:17:81:86:6b:87:c6:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CF:E2:77:32:B1:7F:D5:10:B9:E2:D2:09:0E:DB:EF:09:97:7D:F8
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:df:9d:b6:f3:ff:1a:9f:97:41:c6:c8:ba:76:36:ff:48:07:
         9d:a9:b2:c9:52:3d:08:01:e5:01:3c:d2:3b:10:5e:83:9e:58:
         9c:3d:8f:b0:11:f7:5d:f4:b1:c2:ad:c1:3f:e5:43:64:db:45:
         b2:f5:d6:dd:5f:70:a4:ac:db:d5:5c:b1:81:aa:e6:86:6e:c2:
         b5:05:91:f3:1c:07:87:4d:bb:34:5a:c4:2a:d9:cb:7d:a9:b3:
         8c:40:5c:91:87:62:c9:1e:6c:51:10:67:40:3b:cf:1e:ca:31:
         c1:87:ca:15:d8:07:88:42:4d:f9:45:fc:e3:68:97:7c:97:05:
         64:a8:79:f0:59:b2:ee:d0:37:19:e4:e0:32:22:47:71:f6:fb:
         1f:25:ab:8b:a6:8d:0e:f3:1d:09:b6:df:14:91:09:04:b2:50:
         30:fe:71:c4:c9:0a:77:2d:a1:1c:9c:7d:10:2a:5a:31:a5:6b:
         c3:33:13:66:f4:e2:a1:26:36:1a:75:a7:2a:ad:42:47:7f:e2:
         a0:81:8b:43:b8:f3:6a:80:f4:9a:b0:0c:a1:44:b6:26:24:1b:
         4d:13:44:0e:db:e4:61:00:5d:69:48:f9:70:de:ba:28:b6:d1:
         5f:44:58:10:04:46:b7:b7:2f:28:6c:2d:f0:d3:0f:8b:57:97:
         bd:2e:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:45 2024 by rpki-client on console-fra.rpki-client.org