Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File:                     tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier:          jUWQjohAin7lo7a6OlIbTUDEW9Sbju+u+ff9BP4UHIQ=
Subject key identifier:   4D:C0:46:F0:C6:1E:3C:F2:19:85:AF:7C:E9:17:7D:4F:22:3B:19:83
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer:       /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial:       019355AD672B082884F254C3F7C722C1A85F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 21:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:47 +0000
Files and hashes:         1: YRJyPi3-8d1Eb0U-Dtz2-baff88.roa (hash: EVsNZiVUsHmY+4zLTMqXTDDLsUAMPA9Dun3CUsDfG+0=)
                          2: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: rWqabO6wyLjTlFN9KsHklKpz2eTwLbfZxRrwEWS/8f4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:67:2b:08:28:84:f2:54:c3:f7:c7:22:c1:a8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
        Validity
            Not Before: Nov 22 21:00:47 2024 GMT
            Not After : Nov 23 21:00:47 2024 GMT
        Subject: CN=4dc046f0c61e3cf21985af7ce9177d4f223b1983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:37:1c:c8:b1:cf:6e:8e:a3:8c:37:dc:b9:
                    b2:6d:84:22:05:7e:14:cc:4d:14:4e:0f:a0:bb:ee:
                    2c:68:0a:af:e2:c8:8e:6a:5e:05:ba:91:39:c7:11:
                    86:66:32:66:8a:d1:18:64:30:dd:67:78:02:8c:a0:
                    12:47:ad:cc:f4:88:06:fd:f5:93:e6:f6:7e:0f:29:
                    a8:2c:de:54:24:57:c1:6a:51:d5:8b:3a:9a:4b:09:
                    c5:93:9c:7a:3a:a7:1b:74:14:7f:41:5c:10:bd:f5:
                    8d:cc:7e:32:84:b4:5d:00:52:cb:5e:c4:e0:4d:49:
                    f3:95:7a:65:ea:25:f6:96:e4:20:e2:e4:38:ce:94:
                    9d:cb:2e:3f:db:f0:3f:7d:15:64:1f:27:16:d9:3a:
                    bb:24:b4:7a:c4:86:70:4b:19:5f:96:a3:cd:de:9a:
                    ee:31:92:12:65:d5:cf:8a:f0:26:1e:1e:89:be:2b:
                    b0:1d:31:55:5b:d6:7a:15:9d:1e:16:90:2a:b1:15:
                    d6:5a:f6:7f:cd:28:1a:0a:40:99:ab:c7:f5:32:4b:
                    b6:73:02:8c:03:82:d2:ed:4e:ec:db:ca:93:a6:68:
                    bf:bd:d3:5f:2f:46:7b:e0:b2:9b:36:31:a4:41:56:
                    fc:3f:9c:d5:a4:b8:62:51:b4:13:93:11:5f:71:5e:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C0:46:F0:C6:1E:3C:F2:19:85:AF:7C:E9:17:7D:4F:22:3B:19:83
            X509v3 Authority Key Identifier:
                keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f1:27:69:ad:10:d7:b1:6f:c4:bb:d0:92:dc:4b:e7:ab:0f:
         30:06:41:b6:63:3b:61:5a:a0:90:c2:36:37:21:3e:e5:0f:1f:
         0c:ce:64:93:76:0a:ca:a2:2a:9b:4b:f8:db:b1:78:d8:bc:63:
         2c:62:57:c7:f2:8a:98:a0:ce:37:eb:a4:f3:72:25:ce:a9:14:
         fc:66:92:5b:5d:d9:84:b0:fb:df:d2:0d:5d:e3:90:ba:2e:67:
         5a:6d:8b:f2:28:00:59:41:10:a8:77:3f:e5:6f:68:92:99:25:
         70:57:c3:9a:f1:6f:f6:42:1c:93:fe:60:b6:da:8d:16:c7:60:
         ae:eb:eb:bc:5d:c7:e4:a2:9a:09:28:11:50:91:30:63:b1:3b:
         60:64:05:35:c0:2c:99:35:47:6c:7a:51:54:31:53:be:f4:29:
         71:c3:c6:2f:9d:93:ca:e3:66:55:38:73:08:f3:31:5a:7c:4c:
         03:99:1b:cf:28:e1:61:d7:7b:94:2b:b7:8d:dd:c6:c2:c1:cc:
         b8:30:d3:41:83:83:eb:d1:5e:42:58:a6:f6:77:ee:90:ad:43:
         5b:fd:f4:86:73:b0:0c:55:a7:b8:d8:3f:25:98:c7:40:c1:e3:
         00:39:32:c1:3b:28:25:57:07:02:5a:cb:d4:2b:0c:54:b9:06:
         6e:e6:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:48 2024 by rpki-client on console-ams.rpki-client.org