Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          w3Tk4uQyL416WM6/dsupmIs3nQsJJ289PyNvp2Tzq5g=
Subject key identifier:   26:DD:73:44:35:9C:CF:63:89:9D:17:79:00:E0:2E:80:88:FF:D3:0F
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       0193568A66DC101C0F60C285AA06F4F857D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          08FB
Signing time:             Sat 23 Nov 2024 01:02:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:11 +0000
Files and hashes:         1: 0FhsPuCjLVv5W8-ZAtM-U6DTz2Q.roa (hash: es9JFy4tRXGpYAaG6J+JkDD/XZ6ehU0vaZuD8CPzPTM=)
                          2: 6Im1MQa2KOn_5FJw_Y5sT1kcOo4.roa (hash: Uw397wxKNNCs0ZGjg90HETEVz3LYpQadtmLnR1AiBIw=)
                          3: dbND3yVE0f5VWYwdtyX8OGm0v2c.roa (hash: aj6eX+XmZWlTiHabqSvMVfiOCoSamWPxHjbSblIh0ug=)
                          4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: FDg+g0H82mIshwhaZE8HEBHW+W9gW3Du/7Wanw0z2FE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:66:dc:10:1c:0f:60:c2:85:aa:06:f4:f8:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Nov 23 01:02:11 2024 GMT
            Not After : Nov 24 01:02:11 2024 GMT
        Subject: CN=26dd7344359ccf63899d177900e02e8088ffd30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:eb:b6:23:b3:66:bc:e2:6f:a2:bc:22:bc:
                    f6:b8:ff:a1:ed:23:4b:19:b4:e7:ef:e7:f3:70:ae:
                    9e:25:da:cc:8d:23:6c:af:90:59:83:27:0b:21:32:
                    c4:8e:7e:2f:ad:df:c5:56:83:33:18:ac:41:55:4c:
                    7f:cb:38:16:4f:11:d2:40:a5:62:8b:2e:af:6c:24:
                    0f:2b:ba:af:0e:c1:25:fd:80:67:e4:38:9a:52:01:
                    d7:30:8c:b6:a0:66:06:50:1a:32:9f:c2:3a:12:fa:
                    99:65:25:3c:82:f7:83:3a:14:12:6b:52:32:ac:d5:
                    a3:39:94:f5:2b:7b:01:57:40:fa:3f:ed:0e:45:d9:
                    6c:3d:b1:6c:08:60:12:6c:47:bc:9e:23:9e:25:74:
                    0b:ca:61:53:f1:df:80:47:2f:3f:c9:ed:bc:1e:b1:
                    65:e9:c5:3c:cb:3c:22:0c:62:57:73:5a:e1:85:9f:
                    40:b4:56:ee:f3:58:98:88:bd:e1:87:c3:0e:a3:57:
                    32:67:03:e2:5c:78:bb:8f:9c:d1:d4:a2:47:e7:1c:
                    24:70:66:35:a0:92:fb:d3:2b:e5:f1:90:6b:bb:60:
                    26:f2:c9:0c:b4:03:cb:56:72:bd:f8:4e:3f:c2:12:
                    f9:42:95:d5:27:8d:c2:39:df:6e:92:6f:35:0c:ed:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:73:44:35:9C:CF:63:89:9D:17:79:00:E0:2E:80:88:FF:D3:0F
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3a:0b:b2:ff:16:80:b9:00:6f:53:ec:d1:e6:4c:5a:71:ba:
         74:0a:0a:4b:81:6c:f5:bf:66:bc:44:96:03:04:e1:99:ec:68:
         d3:36:bb:93:59:81:7a:41:8b:b7:1d:46:f9:ca:06:eb:8d:4f:
         46:55:00:69:7c:8c:1c:36:e7:be:a9:02:f0:e5:62:29:32:b4:
         c1:db:45:f3:ca:2a:56:76:f8:be:13:ac:7a:71:d3:27:da:83:
         41:0c:fb:31:1f:75:d0:eb:0f:c6:ba:e6:83:f2:d4:25:02:d5:
         1b:07:d7:dd:c4:bb:fb:7b:a5:66:c7:10:24:24:17:2b:c8:3f:
         2b:70:fb:80:c4:18:bd:96:b5:fa:67:d3:75:dd:a4:75:1c:38:
         1d:c7:1a:85:11:bd:80:e4:77:b2:78:7e:3e:f9:22:c9:c4:12:
         2c:84:bf:2c:2a:59:a0:2f:ec:ea:ea:e4:bd:45:1f:d9:d2:c2:
         81:30:56:47:89:a6:99:4b:23:b5:53:e2:05:3e:15:ce:9c:a8:
         c4:84:7a:2f:79:3e:3d:89:32:e6:35:58:85:9e:93:78:03:2b:
         a4:28:31:2d:52:31:56:71:83:da:35:4e:84:79:26:f4:7a:a9:
         d9:99:46:f1:53:d2:c2:89:db:0e:c6:af:36:3e:f0:08:c6:44:
         40:a2:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:13 2024 by rpki-client on console-fra.rpki-client.org