Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          EglRpg91BPVaQamwfxtLwSZUd3vlRtr2OYej2IJ4MYo=
Subject key identifier:   31:35:FF:C8:9D:DB:43:D8:50:40:C1:3D:A4:37:27:23:E2:5C:2A:82
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       0193587922960829D337C740DB508A1A5764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          120F
Signing time:             Sat 23 Nov 2024 10:02:33 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:33 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:33 +0000
Files and hashes:         1: I76f7S0N88ky3FTnvwxMVR7WZBs.roa (hash: FBI3JSml9oNScQTMFrcjENxEJblIVVlNa13WWnu9Yqk=)
                          2: e6-nmfSxRyrIL_jT-ZY1blFVqhs.roa (hash: cuInoOYuRGwnKdQ+pk1txyCf8m/Naz8Duwwm8NRK+KU=)
                          3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: HHwobLc6tf580RMnCnBy3ApItoTx6MYI/QKHbY8+JxE=)
                          4: scNiKgHJlOUFNyS1K8ZoUeSqIo8.roa (hash: mTayRmeegLVpCOzKY/TP5KBxnoMR4zgRNJAhKIm2qHk=)
                          5: vCR5VKGEqYUoMLLsgO7m6_uApfQ.roa (hash: wovBXfDd1YlQOITaWG/zungYc9x+r0GJlxd0uusKFdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:22:96:08:29:d3:37:c7:40:db:50:8a:1a:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Nov 23 10:02:33 2024 GMT
            Not After : Nov 24 10:02:33 2024 GMT
        Subject: CN=3135ffc89ddb43d85040c13da4372723e25c2a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:d3:a9:1a:a1:f7:64:5b:15:77:77:87:10:
                    f6:56:c0:b1:c6:76:ee:61:a2:92:ba:d9:8e:72:74:
                    ae:e3:0c:de:b3:49:b1:99:0d:2b:ff:3a:72:cc:bd:
                    4f:f4:0a:1d:8d:96:dd:19:0c:9c:da:12:91:5a:56:
                    ba:6c:41:4b:58:9e:c7:b2:53:6c:7a:e1:41:c0:33:
                    6b:3b:63:25:2c:3b:dd:7d:b1:17:38:38:1d:cb:30:
                    1c:25:0e:fc:43:ac:13:20:a5:08:32:38:fe:18:09:
                    fc:7e:3f:28:e9:1c:13:6a:83:c3:de:8f:14:5e:7c:
                    cd:e2:ff:b0:ba:36:f2:f6:67:d8:65:17:c4:56:f0:
                    4d:64:b0:db:9f:26:dc:f1:3d:26:d4:57:aa:65:d6:
                    c8:cc:b1:93:d9:18:4d:c4:e0:40:b9:59:54:f2:f5:
                    92:fe:f1:29:46:8d:a8:ea:46:1e:b3:78:ff:ab:42:
                    12:e0:a6:c8:db:8d:db:e0:72:fb:f4:fd:fe:a5:29:
                    c2:4f:f4:b6:7d:85:a6:12:8f:54:9c:af:9f:40:f1:
                    a2:87:4c:08:9a:49:21:ae:a7:7a:15:e7:6b:b2:e6:
                    67:f8:51:2f:0d:72:e9:87:c9:74:ed:1b:e0:3f:ef:
                    fc:1c:5a:07:2b:37:ad:83:d3:4b:a4:88:2b:64:ab:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:35:FF:C8:9D:DB:43:D8:50:40:C1:3D:A4:37:27:23:E2:5C:2A:82
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:d4:67:f4:5f:b8:90:fa:cd:7f:07:b5:36:b6:95:df:ed:
         16:c1:e3:4a:1e:f6:be:ee:9e:a8:29:30:bc:dc:e2:74:ce:a4:
         78:7b:e6:cc:f6:ea:88:3f:89:93:69:8c:5c:9b:ed:1f:a9:2c:
         8a:e8:94:73:57:0c:ca:16:66:cf:d2:a0:69:83:a0:2a:a2:c7:
         a5:82:64:37:38:da:ef:cc:7b:04:5d:d5:57:35:cf:81:7a:2f:
         e4:f6:d4:c8:d4:e1:2e:41:8e:34:04:14:3c:3c:38:77:13:f1:
         80:0e:07:77:67:28:f8:bb:8f:ab:6a:51:d6:08:ea:94:67:4e:
         47:5d:04:63:2e:78:d4:d5:b4:b9:5c:b2:c5:11:19:1f:15:37:
         a7:7b:d4:1d:67:38:3c:59:28:8f:ce:6f:fe:6c:8c:9a:ba:68:
         af:94:6a:b1:82:be:dc:5e:ea:33:0a:f1:ea:ae:2d:10:0f:76:
         de:8c:32:d4:39:e1:34:8f:11:26:14:60:37:e3:51:95:72:a3:
         69:78:af:e8:87:55:53:51:72:60:c8:35:51:f0:51:6e:01:08:
         3b:8d:69:b7:d5:d0:44:a7:4f:fa:34:e2:be:45:73:66:13:cc:
         c1:0c:8f:c6:70:a3:b3:19:bf:8d:c3:6b:32:97:15:98:c3:0b:
         19:f0:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:47 2024 by rpki-client on console-ams.rpki-client.org