Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File:                     IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier:          gBteDovAe2APGNuuyfL3V2sN7DjPVTWdqzZfa8Nh9kc=
Subject key identifier:   2D:0F:28:31:87:57:A2:BB:BB:F5:17:55:40:C1:80:91:62:D8:F1:F2
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer:       /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial:       0193512B95A06A553BEFCE7E1AFA652FDF4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number:          0694
Signing time:             Fri 22 Nov 2024 00:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:30 +0000
Files and hashes:         1: 2s1gde1NvcjzB4v2l9eHjERkAbc.roa (hash: pLFs+wE++qmlgNekJfy131OAkNxUPdQQ+oX3UqrEwKw=)
                          2: 4tOKlP1T3bDrTqkAmVV6UQsvOIw.roa (hash: fbyIrovjz2LFUWdgFAe/c/Tjvv1l2c8mcyiOkk7SOcI=)
                          3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: 1LB/lrgubIzTyGe0TFbd1Pe8g9AyGUuI3FQb0cGF6nE=)
                          4: ku9ZZmOrkwWoOcsnmmUNDY8RlZQ.roa (hash: QPTgQtplxi6SCeez9icbnzTMeALf4M1ECkGqLCOzDQ8=)
                          5: sffX-nYGq99DvgVYzMMwhSdH-b0.roa (hash: qJpJb8/UgUaxOOKEDKlYdODRBedcDN+AFM16u72dA0w=)
                          6: umrrdDgmKLn7ngVsQ1-cE9eWkLg.roa (hash: u0DGWapdVwki01vtckAF5EchE6aFKJ9HZWFWe6ptSyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:95:a0:6a:55:3b:ef:ce:7e:1a:fa:65:2f:df:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
        Validity
            Not Before: Nov 22 00:00:30 2024 GMT
            Not After : Nov 23 00:00:30 2024 GMT
        Subject: CN=2d0f28318757a2bbbbf5175540c1809162d8f1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:35:4e:e6:ca:d3:f9:7d:7d:77:9f:36:3d:
                    06:8d:d6:b0:17:a7:e5:72:b4:f0:c7:cc:f8:d6:38:
                    9b:ea:c3:75:29:ee:1f:47:b2:70:63:e4:ee:05:a2:
                    34:b8:87:8e:3d:73:5b:d8:8a:e1:6b:06:94:55:37:
                    fb:4e:a5:1b:b5:e8:39:70:d2:e5:3d:ba:16:c1:bd:
                    44:45:70:56:68:cf:cb:48:e7:dd:1c:48:80:1c:5c:
                    8e:88:3a:61:8e:20:b6:bc:33:5f:f4:82:31:b6:32:
                    a1:89:ff:fc:90:5d:ab:15:2e:4d:47:3a:e1:38:1d:
                    9a:e3:4e:7d:6f:df:f3:45:6e:33:95:77:3f:bc:4e:
                    f5:34:f5:df:86:b2:fc:1d:aa:5e:71:6b:8a:49:86:
                    81:2d:d4:80:4b:bd:61:05:92:08:12:bf:c1:c6:b6:
                    49:0e:06:b5:f2:34:02:53:e7:5c:b5:8c:85:dc:e3:
                    d5:29:39:a2:45:3c:2a:47:1c:5e:ec:e3:76:78:0f:
                    14:d4:16:4e:b6:bd:17:04:2a:8e:87:e6:df:fa:58:
                    8e:b0:83:79:9b:42:8e:28:28:35:61:95:b4:df:e3:
                    a0:7d:d0:cc:de:fe:5e:58:02:4c:db:16:ed:d1:a5:
                    80:1c:9e:13:ac:d9:21:94:65:72:d5:32:44:ac:a5:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0F:28:31:87:57:A2:BB:BB:F5:17:55:40:C1:80:91:62:D8:F1:F2
            X509v3 Authority Key Identifier:
                keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0a:0e:88:cc:16:be:38:c1:be:bb:9f:b3:58:3d:b5:68:1c:
         4f:a1:a4:7b:7b:48:40:9b:a3:30:4c:a9:5c:0e:89:cb:e9:aa:
         4b:22:d3:7f:a5:1e:77:a9:ef:93:ef:a4:d8:67:f9:cb:26:3b:
         01:f5:25:d6:45:65:a4:02:57:2d:cd:da:0f:3c:2e:30:20:cb:
         17:dd:18:db:57:69:07:7f:12:82:de:d2:47:88:04:61:f7:ef:
         99:38:7b:24:5a:45:69:1d:e6:8f:7c:fd:e5:35:a3:63:af:96:
         5a:0c:10:3b:99:98:86:39:8d:1f:a1:4c:63:15:53:b5:5b:ce:
         20:73:57:8c:9e:32:00:22:d3:6e:f7:c3:d4:a5:96:1e:6c:ef:
         bf:73:9f:57:41:16:86:38:43:71:07:4c:8d:a8:34:df:57:49:
         9e:a2:e6:fa:05:55:d0:1c:d9:23:a7:bf:09:11:da:dc:cd:ad:
         43:a2:c7:7e:51:56:d4:25:c2:ac:0c:28:8e:71:af:93:23:d8:
         65:28:2d:86:57:ee:5a:ed:22:14:d1:b7:40:84:66:b6:fa:42:
         1f:bb:c7:4c:49:a7:c4:9d:37:c1:f3:d0:16:a2:00:34:57:0a:
         a9:d6:6a:25:28:56:48:57:d4:83:35:98:eb:77:6e:31:ce:d8:
         be:6e:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:26:40 2024 by rpki-client on console-ams.rpki-client.org