Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File:                     gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier:          6yMldo8SQh5R8Uo5jZo8MJAOV/+PFJTVP32rzKZ44xQ=
Subject key identifier:   8A:53:95:B9:D5:EC:79:E0:A9:65:91:9E:98:E1:35:9A:BA:BA:E6:A8
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer:       /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial:       01935162F10D3A3798B3E9A67C1A68569E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 01:00:58 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:58 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:58 +0000
Files and hashes:         1: 0mWpy6Heq7QjcTiLuTqq2Z0B0xo.roa (hash: zv8LrWvmdgGcggac2tX2H2fjcLB2taGUc9BGdk+2VIo=)
                          2: BFT3mzIFYbu0lFDdlKkjSuP_RxY.roa (hash: 1l8cCw5+OSabGpEEamt5IwLnWM3nK36VI2gHTmjR4NI=)
                          3: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: N6POc4oYJ+rpk4FwpmjWkq/3/eGGwAVg1uhnj8pV6Rg=)
                          4: jg08wEsXQ225GyfhVbbL0lj2dro.roa (hash: ETn+vqNcyYMPwZSk1mN1U7+a7en6NExuJihUnB/gXv4=)
                          5: l4yR9EhVfUl3qdhy44u3yZbj68c.roa (hash: k7WJopjdLC01t+BWKXyo2v6QT3D/9jFt0PnBU1nhUq4=)
                          6: mlMF-NM6zAlOnA6zsST8_eZxjio.roa (hash: MmFcv5RWiMl6+NT97iJhN/tGRpiu8FT2fDvNZCYT+b0=)
                          7: oXjm0DNen0jgUp68De2a-G8hDxE.roa (hash: OfFbNr5Vq3HJMn6E+72n4BkAGALkI1RDG/ffnbLVGd8=)
                          8: uCQrcfXgrSZk21T-UnS7GtypZ-4.roa (hash: 9wcOKcYiTq08IY/wUDpdVgSDMZjgh1torwqst0AloyA=)
                          9: xxaH20AWVy7ndpGZgtvrasP59BY.roa (hash: Wqvg2uarzy/JuB9sjObsL0BBM3IAVRCsEKmiRzArDb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:f1:0d:3a:37:98:b3:e9:a6:7c:1a:68:56:9e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
        Validity
            Not Before: Nov 22 01:00:58 2024 GMT
            Not After : Nov 23 01:00:58 2024 GMT
        Subject: CN=8a5395b9d5ec79e0a965919e98e1359ababae6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:e3:42:03:ef:7e:a4:37:bf:a5:cf:d5:24:
                    4d:4f:66:0d:f9:04:62:d4:fa:b9:f1:ac:8c:8e:19:
                    bb:b4:25:9d:67:40:aa:8d:01:a4:3e:c8:6c:ee:a9:
                    e5:58:8a:8d:e4:8f:90:f2:65:ad:25:5b:fb:75:f6:
                    65:6a:02:83:d0:08:6a:fc:bb:40:a7:de:2b:64:0c:
                    64:a4:31:0e:d5:7d:a8:25:42:26:10:81:50:70:98:
                    3c:87:a8:a7:62:b5:a6:48:be:f3:af:08:70:fe:59:
                    31:b6:e8:d6:99:b7:99:b4:6b:f2:7d:76:09:fb:aa:
                    8c:79:72:ab:00:e3:cf:dd:82:7b:bd:3d:28:0d:0c:
                    c9:c4:9c:24:d8:a3:6e:4d:80:02:6a:f2:28:89:39:
                    12:ad:74:1a:f4:f6:92:79:92:2f:2e:b6:7c:17:b6:
                    b8:60:65:52:f2:e2:8c:f2:f0:55:07:b0:69:6a:f6:
                    26:98:36:63:df:3d:d4:86:47:04:01:c5:db:53:97:
                    c7:57:fc:71:3c:b1:7a:9f:62:0f:7a:02:3b:72:6c:
                    72:27:7f:a4:04:19:31:71:b3:6a:31:03:ac:54:af:
                    f6:d7:98:ca:bb:cb:b3:a3:44:a1:ef:e3:f6:37:f3:
                    0c:e1:aa:d8:04:e2:e8:94:64:c1:ad:de:84:c3:b8:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:95:B9:D5:EC:79:E0:A9:65:91:9E:98:E1:35:9A:BA:BA:E6:A8
            X509v3 Authority Key Identifier:
                keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:cf:3f:2e:6e:dd:d6:fe:cd:bc:50:79:98:e1:66:db:9c:
         36:3c:11:00:e2:e7:09:8a:b3:35:2a:e7:67:a9:74:5d:07:02:
         b1:e0:fe:83:42:bf:4c:b2:27:46:8d:c3:d5:f5:4d:8c:06:55:
         ca:b7:28:7b:fd:bf:47:f3:98:58:cb:f7:3e:80:f2:e9:91:c6:
         4d:4b:95:20:91:da:78:4e:45:fd:22:74:6c:bc:21:cc:3e:08:
         15:5a:0b:c9:e2:9d:43:27:1e:f7:2f:37:16:66:1b:2e:0c:a2:
         50:b0:74:fd:24:56:2f:47:26:69:8e:f5:41:75:bb:00:73:91:
         b9:41:1e:01:d6:04:e2:eb:25:4c:e4:0d:e8:8f:70:48:34:5d:
         d9:6c:bb:ed:10:c8:f0:20:42:56:07:1c:2a:ac:8e:fe:17:25:
         25:c6:b5:28:a3:a4:d4:bf:b1:94:a3:7c:5e:48:03:f7:c0:db:
         0b:81:41:ec:44:7a:c8:51:be:7e:49:4e:95:8e:a2:80:be:37:
         fd:d4:6a:0d:d0:3a:1d:27:c0:ba:d0:d6:9b:21:b4:fb:16:9c:
         73:ae:6e:01:4c:4f:17:b9:ff:bf:78:3b:b1:6e:10:6b:be:3e:
         90:1d:38:32:f0:77:b5:bb:8d:9f:27:e9:a0:c6:90:ce:40:96:
         5f:57:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:13 2024 by rpki-client on console-ams.rpki-client.org