Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File:                     U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier:          IGnw63MCsHLPac1WyBZcp6E0SSZ1EztpGzCP0C62mqs=
Subject key identifier:   DD:46:04:D2:3B:80:C6:FA:E0:00:40:8A:EF:FB:C7:68:EA:2C:56:D7
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer:       /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial:       0193561ACC0332CF9099058A5A3A803848CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number:          1380
Signing time:             Fri 22 Nov 2024 23:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:16 +0000
Files and hashes:         1: 5PlgxSo8NYhaiwbB8WaanD9hxMA.roa (hash: x/fB/X21dq4x417vEWa5WCn0QB5F67TSatkt7+cyXZI=)
                          2: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: 09f+qsxxkB4Fu1bB3rxTNjfRshxqMHNX7iuDRYRtrms=)
                          3: dycx85GWYDhfsVMZvxX1YKC-1gk.roa (hash: i9bfdnILAXMZ4zmh8lBJHkzy4rdo3pA9MSRN7cL5IwA=)
                          4: i4KZ-otmpRbNPfYqpmhb0iZI4Ys.roa (hash: P+hkAJB0dydkqMkRKi2MiojfBO+OyabH8RrqBCwtrDE=)
                          5: nBnDZW3QgjIP38rT8hhQ_IMGoPw.roa (hash: qRrXWGUP9+F63PG0VBslXeIw6Z8H4TK8XiM5vVtvmBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:cc:03:32:cf:90:99:05:8a:5a:3a:80:38:48:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
        Validity
            Not Before: Nov 22 23:00:16 2024 GMT
            Not After : Nov 23 23:00:16 2024 GMT
        Subject: CN=dd4604d23b80c6fae000408aeffbc768ea2c56d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:aa:a0:63:82:8e:f5:a7:24:a8:4f:92:9e:
                    19:70:ea:93:cf:6b:73:45:02:98:81:11:2e:15:2c:
                    1c:33:00:95:94:c6:5d:38:1f:8e:2e:30:a4:ee:78:
                    c9:aa:dc:3c:36:59:ef:1f:03:d4:ec:36:59:90:dd:
                    fe:0e:f4:2f:fb:b7:23:f6:2b:b1:ff:ac:4d:62:21:
                    dc:79:6b:b2:e3:41:b1:76:90:10:c9:9d:1b:10:0d:
                    8d:03:e0:a7:d6:a5:a7:3a:cc:9f:44:16:8e:92:b7:
                    39:60:61:33:35:a1:c5:7b:99:88:f8:e3:39:61:3a:
                    4a:35:5c:30:01:3c:5b:75:e1:8b:9f:a8:48:8a:72:
                    a3:69:92:38:31:0b:4b:36:14:26:28:dd:fa:40:96:
                    2d:8c:a3:85:ed:bc:03:b6:67:e9:55:1e:8d:da:e0:
                    c1:1c:00:5a:91:bc:30:1a:c1:7c:1c:38:1d:aa:38:
                    48:e8:5c:0a:8a:65:e2:0d:ec:d5:4b:98:72:66:74:
                    d9:aa:60:21:67:b3:3e:f8:01:40:de:7c:18:58:d5:
                    86:5a:b5:1a:80:f5:1e:32:33:98:bc:f4:e6:ea:11:
                    f4:49:7d:fc:15:3f:9f:7c:e8:92:c9:f0:93:5f:bc:
                    62:15:d2:74:fd:e1:e3:d9:31:d0:3a:90:45:26:4d:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:46:04:D2:3B:80:C6:FA:E0:00:40:8A:EF:FB:C7:68:EA:2C:56:D7
            X509v3 Authority Key Identifier:
                keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:34:3c:31:3e:19:5b:65:9c:5b:aa:6f:b4:5d:98:b2:c9:22:
         2f:e1:5a:af:1a:d9:15:1c:92:18:b9:7d:80:9d:42:1b:cd:e1:
         7c:24:f2:80:93:a8:6d:07:c1:e4:ac:24:7f:94:22:a9:97:c6:
         ff:44:f5:49:33:7e:b1:82:d5:72:eb:df:21:c5:ea:94:fb:dc:
         8a:63:6a:09:7f:f4:d7:bf:c6:3b:ef:50:0a:35:40:b5:e6:bf:
         cd:70:62:a4:36:08:fc:61:6d:98:1a:7f:12:e0:6b:47:d6:63:
         4c:eb:bd:20:71:f6:2a:74:22:b0:9e:62:52:4f:cf:8e:c4:f0:
         f5:e7:95:99:b5:1a:e9:28:93:78:99:ec:f1:c3:73:c7:fd:07:
         2f:45:ae:f4:89:bc:db:28:35:09:08:24:3b:fa:ad:fe:10:43:
         58:1d:54:f3:51:64:69:b2:8e:44:ea:78:14:4f:f1:15:e7:83:
         e5:44:26:78:f6:03:cf:ca:30:29:68:c1:67:1a:5e:b1:83:a8:
         b8:35:58:fa:2a:07:e2:6b:ce:10:43:06:ea:a4:b4:f2:9b:5a:
         b3:64:47:d1:99:77:6c:e8:0c:8d:10:74:2e:01:1a:48:4b:d0:
         be:62:6f:92:ad:c8:2b:92:e4:99:d0:40:02:a1:41:28:76:90:
         13:c3:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:37 2024 by rpki-client on console-ams.rpki-client.org