Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File:                     dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier:          lAd5gNBvsSVhislGu/vWuX82Yh0rz9drf7CWgdiKJfY=
Subject key identifier:   41:E7:01:10:7C:0E:47:43:06:B2:04:06:4C:3C:FC:4A:3F:18:0E:9E
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer:       /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial:       01935764D0FCAE584FECE7CC37B7EB6584BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number:          0342
Signing time:             Sat 23 Nov 2024 05:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:44 +0000
Files and hashes:         1: HC7GX5VKiAMLgr7Bp_tXCjnfwq0.roa (hash: k8El59LjN1wBLnovGyiouNcfZk/D7s5HKkbN/D39QEs=)
                          2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: 1OYx7EJNembjAHUNal8p3hP/N8jmnqUmMThFjXkqHJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:d0:fc:ae:58:4f:ec:e7:cc:37:b7:eb:65:84:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
        Validity
            Not Before: Nov 23 05:00:44 2024 GMT
            Not After : Nov 24 05:00:44 2024 GMT
        Subject: CN=41e701107c0e474306b204064c3cfc4a3f180e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:4c:5f:31:06:dd:b3:d7:f8:1e:0b:6b:4b:
                    8f:bc:42:18:b4:38:8e:2d:9f:ce:d8:c3:fc:38:3d:
                    a3:bf:38:b3:1d:fc:db:84:31:67:25:31:49:87:f9:
                    5c:f4:cc:7b:5b:dc:91:3d:c2:5a:9a:8c:d5:a3:8c:
                    99:ed:3d:ed:aa:36:3b:79:d8:15:9c:c4:16:03:c0:
                    93:ba:ca:cf:2a:0a:2e:2e:1e:09:11:35:fd:88:c4:
                    3a:c9:4f:87:d0:7d:42:d2:ee:06:a4:e2:54:75:3d:
                    10:9f:60:b8:cb:6e:25:4b:01:22:9f:10:2b:60:a8:
                    b8:bc:fd:fb:0a:fc:88:83:ef:e8:e7:7c:29:6d:49:
                    84:c0:93:e8:31:f5:8d:2d:2d:89:af:e0:6f:7d:4a:
                    91:e2:92:e9:b5:ab:1c:1e:b4:b5:f5:87:f4:45:ac:
                    8b:06:fb:5d:e0:47:d3:7b:4b:6b:97:3f:75:a9:e0:
                    a9:c0:dc:10:1e:12:a4:07:c1:57:27:a3:f0:8f:1f:
                    d0:fd:33:43:0e:3b:e4:e4:87:cb:c4:43:df:8e:f3:
                    da:89:d6:c2:a5:be:4b:06:dc:4d:f4:db:2f:4e:60:
                    07:10:a0:de:2f:3c:00:a2:68:1f:04:8d:8f:30:90:
                    d0:0f:d8:96:98:b0:d4:65:dd:74:8d:6c:a2:57:3b:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E7:01:10:7C:0E:47:43:06:B2:04:06:4C:3C:FC:4A:3F:18:0E:9E
            X509v3 Authority Key Identifier:
                keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:10:ca:13:35:7b:f9:9e:91:3a:4b:59:0e:80:67:62:50:20:
         de:26:91:f2:8d:19:c7:81:d7:17:80:52:07:ff:85:c8:f6:e5:
         dc:99:bb:e6:11:a5:1a:3c:c4:79:cf:7d:3e:6a:74:c9:ae:4e:
         49:28:47:75:24:dc:20:fa:4d:31:f2:67:4d:de:3d:68:a4:a1:
         7b:b2:2b:93:8e:6a:4c:2f:38:2e:65:94:2c:83:06:14:30:fd:
         6f:61:4f:8d:e1:d4:ad:7b:7f:30:55:40:56:5e:f7:05:95:1a:
         bd:26:5b:c3:b1:51:eb:96:1b:a5:62:01:ca:d4:40:0f:48:5e:
         0f:05:c7:fe:21:fd:3e:bc:e4:f9:3d:ef:82:ab:65:dd:b6:2e:
         c5:3c:6a:31:7e:03:1a:dc:5f:1e:34:d2:bc:6e:0a:39:d2:32:
         69:7b:b1:9f:a6:95:13:a5:fd:01:e8:ec:2d:f0:be:4e:2b:e2:
         85:4b:41:5e:30:9b:45:73:6a:95:0c:64:51:cf:2b:4f:f1:21:
         b8:7e:4c:0d:d2:3f:60:1d:0d:39:7c:5f:52:67:b8:03:a5:3d:
         ff:11:20:8c:cc:be:25:98:90:16:86:3b:46:ba:bd:81:f6:3b:
         99:5a:a7:31:f9:9d:bf:b9:0c:b1:d6:f0:37:79:61:40:fc:4d:
         f7:c4:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:30 2024 by rpki-client on console-ams.rpki-client.org