Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File:                     mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier:          Bw4p0vIoxRAE/vHNvTSg1TPv9HyDBTFdu61g+JIE0Y8=
Subject key identifier:   EA:10:02:53:0A:D0:2F:41:41:98:D0:8F:D8:7A:70:BC:0C:8F:92:ED
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer:       /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial:       019352E2C8C8B109341E6CE7D7CCE873E15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number:          0D1B
Signing time:             Fri 22 Nov 2024 08:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:14 +0000
Files and hashes:         1: G8P8Up3iwBNuY6VX8xHlV2xw_Sc.roa (hash: DPZTUR8SEgFuO3IeipECn6P1+JwvZA2wEW1lrp3T8B8=)
                          2: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: PqKaPy+oqF2l6po2R8vyV5EnyWElvzsk7EX1+k8vNmU=)
                          3: wRqIibDxIzrYoN4yJEwme2GC6mg.roa (hash: MqiDqNe6KNcMmpCYXz+9U6b1l37S0AhZ/HldXj6afko=)
                          4: xuzrMo_agJx_-mkfGh9wk4WWqc4.roa (hash: 4lhIHrmPfakgDmOmqy3ZFfcNta+xxnDtxZDYX3rN55U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:c8:c8:b1:09:34:1e:6c:e7:d7:cc:e8:73:e1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
        Validity
            Not Before: Nov 22 08:00:14 2024 GMT
            Not After : Nov 23 08:00:14 2024 GMT
        Subject: CN=ea1002530ad02f414198d08fd87a70bc0c8f92ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:82:4d:43:fa:30:aa:06:d4:9c:00:f8:50:
                    99:a9:0a:cc:f7:ef:3d:15:0d:f7:d6:aa:83:8e:e7:
                    22:07:d1:7a:0b:6f:d5:56:cf:cd:cd:08:7f:1e:b1:
                    1b:28:f7:40:54:f1:da:33:1a:18:39:f5:21:4f:3e:
                    2c:cd:7b:e3:25:85:2b:98:cc:f1:80:cf:4c:2b:5c:
                    01:1c:5c:4e:cb:b0:48:ab:bb:5a:7e:8e:94:48:66:
                    d9:25:4e:41:f1:53:b1:c1:3a:74:3c:2d:5b:10:76:
                    0f:4e:2d:69:45:43:29:4b:74:ce:c9:03:1c:4b:ee:
                    ce:df:d5:0e:84:57:86:f1:ea:98:92:77:6f:5b:2f:
                    52:a8:1c:db:ee:15:63:28:2d:e4:2f:86:32:bc:ac:
                    e5:aa:33:04:db:b1:76:3c:cc:5b:f1:a0:87:b0:f5:
                    54:36:c9:c8:32:47:40:d5:8d:b3:29:01:d8:82:c4:
                    3d:51:68:e1:73:11:a3:93:da:61:f5:fe:c2:87:e1:
                    37:5c:52:4b:75:65:35:5d:4f:bf:66:c5:2e:da:2d:
                    43:e7:7b:07:5b:5e:f0:70:f9:fb:53:d0:be:15:cf:
                    d6:1a:b3:9e:da:10:86:7d:5e:f7:92:a5:18:d2:cb:
                    74:a5:33:57:50:10:82:e1:d9:c9:6a:30:24:0b:59:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:02:53:0A:D0:2F:41:41:98:D0:8F:D8:7A:70:BC:0C:8F:92:ED
            X509v3 Authority Key Identifier:
                keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:4d:07:d5:6b:76:c1:41:92:c8:66:a0:5d:fa:14:e3:97:
         a1:94:1b:6a:eb:5d:9e:3f:b7:ab:06:75:d8:84:61:f0:93:9a:
         aa:05:83:34:78:81:a2:b7:fd:00:ac:d0:aa:66:0c:a3:46:1d:
         3e:2a:89:12:48:3b:43:bf:f5:b5:11:f4:03:11:b8:fd:9f:ad:
         47:05:61:9c:b1:50:02:52:1a:3d:85:44:77:db:65:9a:87:93:
         2a:34:b6:b2:8f:36:87:b7:34:ab:ad:25:87:16:de:d5:fd:b5:
         1a:92:ef:de:d8:7c:c6:63:43:1b:60:9f:5b:29:68:39:10:9e:
         7d:70:ac:a4:26:ba:84:f7:c8:44:73:57:ae:1d:71:45:c1:2c:
         e7:36:a7:f1:1f:e8:57:47:6d:56:78:fb:8d:45:66:0e:f4:31:
         55:06:51:5b:9d:f0:d4:27:f2:af:86:47:d5:83:5c:65:73:66:
         fd:da:68:2f:47:03:b0:92:46:bb:2c:62:6c:e6:1e:24:ca:09:
         0b:e1:04:73:d8:b4:c4:54:53:60:8d:55:f9:f9:99:61:8e:03:
         f5:06:9d:45:81:a8:00:b9:29:08:e2:4f:35:7d:25:65:17:4e:
         46:28:d9:e3:73:1c:2c:b1:a6:85:73:56:82:d2:c2:6e:c3:6c:
         78:ef:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:15 2024 by rpki-client on console-ams.rpki-client.org