Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File:                     F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier:          HXMDvQZXdCq6v2Q3iLNY+63GG7PZ7ofcKgNQQQFxBSc=
Subject key identifier:   BF:07:EE:F8:22:31:32:05:CF:52:12:C9:81:83:27:97:68:5F:FE:82
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer:       /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial:       019354D1414903477C242E942D18DE448FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 17:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:20 +0000
Files and hashes:         1: 7GmhVqN9jht0nkm1X0yHwhbC6YU.roa (hash: JIMlgFu76yYnzDUPkAcJZEO5SET9Rg5p2+U1wW/T49g=)
                          2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: hZqMbEHbtAWWKK6phB79D8ShhUklcpdB65cTzwsfJEY=)
                          3: aw9D8gOmqlHhxqIPqqHsK5Ps57U.roa (hash: VL3dJgidTCaevIW/myvYI3TSZmsEBJQ40SQntKGxios=)
                          4: kf6U-9GDRNG13A4BYlHRDYG0-h0.roa (hash: fnhBimJuFaaDjG2mIrJubR3JWZFaoH8UULirQr46i6I=)
                          5: x9gT3xJFOfS4Vk8M8fvDhykjouI.roa (hash: 0GSWeew2Stdv7Kj1W2S3rC+Kf4/urU7WWBkYMbHYW6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:41:49:03:47:7c:24:2e:94:2d:18:de:44:8f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
        Validity
            Not Before: Nov 22 17:00:20 2024 GMT
            Not After : Nov 23 17:00:20 2024 GMT
        Subject: CN=bf07eef822313205cf5212c981832797685ffe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:fe:9a:66:7b:8e:b0:63:3b:dc:33:83:7c:
                    69:37:00:bb:30:bf:2a:a7:42:2a:43:f0:6b:50:ed:
                    fc:88:59:4e:23:71:ac:25:e7:77:26:1c:4d:34:51:
                    f8:16:43:b2:7e:59:88:64:97:df:10:ab:13:f4:70:
                    24:69:43:f8:5e:6b:06:ec:50:df:81:ff:f1:a9:54:
                    7c:f6:09:94:ee:db:01:fe:85:a0:b1:bd:19:59:1f:
                    15:1a:2c:1a:5b:a4:d1:4c:43:dd:1d:f2:90:ad:40:
                    55:39:2f:cf:45:fa:50:02:05:a7:96:13:5f:3f:8f:
                    f2:ea:27:26:8d:ef:e0:0e:a7:3d:d7:8b:12:61:f3:
                    85:c2:ad:50:11:3a:43:c0:fe:f2:30:80:f1:2b:fe:
                    74:0a:fb:ea:42:06:b1:de:ae:4b:53:f6:4d:da:ae:
                    54:cc:7f:ed:de:bf:63:68:d7:a4:36:de:41:ee:5d:
                    1c:73:8c:57:1d:6c:4f:2a:bb:a1:eb:9f:1c:53:af:
                    0e:04:d9:8c:21:ef:e8:08:86:bb:94:e4:8a:d4:72:
                    54:31:4e:76:5d:eb:37:ff:cd:92:16:a8:02:1e:c5:
                    64:85:2d:98:37:85:26:5d:4b:b7:32:82:07:46:21:
                    46:13:be:b7:59:da:69:3d:af:3f:11:eb:46:3c:3b:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:07:EE:F8:22:31:32:05:CF:52:12:C9:81:83:27:97:68:5F:FE:82
            X509v3 Authority Key Identifier:
                keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:91:0a:c8:f3:1e:9e:4e:5b:ce:f6:c7:87:cb:74:74:eb:
         38:6c:0f:ca:dc:b4:bf:a3:7a:7e:8f:64:20:8c:78:ea:eb:dc:
         65:d5:f8:fc:69:ab:b3:8a:1b:bd:6f:b7:a5:d1:23:1a:7d:6c:
         c8:f4:92:02:ef:86:cd:5d:43:9c:99:fd:f3:c2:15:85:59:f8:
         bc:eb:a5:da:c9:e0:76:71:6e:2c:7b:cb:78:20:49:e0:c6:1f:
         8d:d1:45:31:16:59:54:d7:c2:ee:93:a9:df:42:b2:5a:96:5f:
         0d:ac:78:5d:b4:59:49:a1:78:26:82:d0:4a:cd:a5:a9:3b:75:
         43:23:ce:14:76:2f:d9:71:22:c0:75:48:70:cc:75:25:f5:31:
         2b:84:34:15:b9:f3:db:b4:00:3c:38:30:9b:ef:2c:71:05:29:
         00:ff:68:e8:cb:e9:0f:bf:32:9e:72:0e:4f:b6:0b:59:68:78:
         03:2b:6a:5a:ff:96:71:7d:7d:5a:ef:3a:b8:fe:cd:5d:e0:1a:
         72:53:ae:2b:94:c8:27:bb:09:82:2d:dd:58:d2:88:3a:b0:f7:
         25:44:67:25:47:5f:c0:1b:ce:2a:10:06:7b:cf:04:18:01:d8:
         08:bd:b8:53:2f:42:3e:68:fc:42:6a:e8:60:f2:74:a6:c7:b2:
         3f:6f:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:32 2024 by rpki-client on console-ams.rpki-client.org