Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
File:                     x9uZhsBTq3lIoSw9DITO65Om1j0.mft (raw, json)
Hash identifier:          WYtuV88Bkjn985OEDYJK7h/7OnqIbnum4VmV/1slOHs=
Subject key identifier:   A2:6F:6D:08:03:3D:AF:57:4D:DC:F5:E1:61:90:40:61:81:B2:49:4A
Authority key identifier: C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
Certificate issuer:       /CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Certificate serial:       019369D8AF6452CD0DD1CC40A23CB1FB4316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:28 +0000
Files and hashes:         1: bKM847KQ-cBykRHJ2tjYiNgwFjo.roa (hash: NIitYzSKa+VmBkQFgAfFE/CLkMIol9pDDvPei8LxxzU=)
                          2: x9uZhsBTq3lIoSw9DITO65Om1j0.crl (hash: vHhDVhofYy9Oj04wwmaDwpZAdGdL5chY28yEB3Gr+R8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:af:64:52:cd:0d:d1:cc:40:a2:3c:b1:fb:43:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
        Validity
            Not Before: Nov 26 19:00:28 2024 GMT
            Not After : Nov 27 19:00:28 2024 GMT
        Subject: CN=a26f6d08033daf574ddcf5e16190406181b2494a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:f4:ba:98:fb:65:ba:05:63:aa:e6:66:de:
                    52:6d:71:7f:02:fb:33:6c:43:f3:79:c7:8d:c5:7b:
                    17:50:b7:1b:c5:eb:21:1a:fb:ba:f9:15:e7:d0:66:
                    02:c9:c4:48:ab:04:01:52:a6:32:6a:f4:12:7c:3c:
                    2f:b4:99:1d:c8:01:7f:cb:44:43:f8:85:a4:a9:db:
                    6a:ad:b4:2e:12:9b:14:7d:98:5f:e7:aa:40:4d:4e:
                    d8:16:2d:f6:8d:c0:2c:bd:e4:45:bc:96:b2:6f:fc:
                    82:0d:b4:64:c5:d5:a1:27:ef:c8:ef:a4:23:c3:e1:
                    dc:18:ea:ee:87:f1:78:05:39:86:94:b1:63:65:09:
                    9c:aa:18:89:27:f8:5f:90:08:90:73:4c:76:c7:11:
                    f5:06:f2:18:a4:43:d8:34:86:af:97:93:d2:36:1b:
                    8f:3e:c6:80:66:e6:0e:c0:12:e2:10:73:8b:51:d5:
                    92:22:0d:7e:a0:94:1b:01:a5:cb:26:70:2a:a9:6e:
                    6d:e7:db:cc:04:04:3d:80:7e:3f:2b:2b:a3:fb:1a:
                    9e:ec:41:2a:46:46:87:6d:43:a1:10:52:91:74:0b:
                    89:07:6d:7f:06:07:db:ef:67:57:7f:8d:c4:04:bc:
                    b2:b9:fc:7f:cc:3b:1a:6d:bd:c5:bb:04:d6:82:08:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:6D:08:03:3D:AF:57:4D:DC:F5:E1:61:90:40:61:81:B2:49:4A
            X509v3 Authority Key Identifier:
                keyid:C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:19:e6:7f:49:c3:82:67:79:fb:5b:e7:87:27:fa:59:59:
         71:ee:65:4f:6a:90:33:26:4d:e4:b5:bf:81:53:64:21:da:b7:
         e6:03:9d:89:3f:3f:1d:1c:7a:78:63:e6:28:20:6f:1f:5a:4f:
         d4:c4:4a:e5:2c:67:3d:0b:00:60:c2:5e:14:95:58:0a:95:1d:
         3a:67:76:f7:4b:eb:65:22:e1:6c:a1:c4:e6:ec:e6:f5:99:59:
         d5:73:32:a3:99:f4:14:de:73:2f:2f:a3:d4:5f:e6:f6:0b:7e:
         49:47:3c:34:f6:32:b5:39:d5:46:f8:9c:7e:b3:2e:20:cc:3b:
         32:f4:33:a5:2c:98:7b:13:15:f9:8a:e5:c6:8a:16:0a:f8:3b:
         4e:52:45:4c:b0:a2:b1:8d:5d:8e:35:54:ae:2c:40:a5:98:89:
         85:5a:b1:de:30:94:26:84:89:fe:03:60:ef:e0:3a:b9:6e:cd:
         a8:70:fb:57:66:b9:93:cc:7c:eb:b6:d2:42:f6:74:5d:d3:dd:
         d7:36:4b:02:b5:87:9e:32:76:e5:2c:ab:df:7e:d8:a7:2a:e1:
         b9:11:37:55:a2:fd:b5:37:7f:25:4e:a1:70:85:8f:b4:71:70:
         d3:38:60:0d:01:9d:ee:cb:bc:47:21:b8:ca:5c:02:93:2c:8e:
         65:ad:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:24:06 2024 by rpki-client on console-ams.rpki-client.org