Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          2uYvupADKWuBWx/vUEDv1Z2ntutZOgcrE5JlL1/S3AU=
Subject key identifier:   73:84:40:1D:1E:7B:07:13:0B:41:1B:A3:70:26:D5:46:4F:A3:17:E8
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       019352079804DBE271AB304A67F52C91F0EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          01D3
Signing time:             Fri 22 Nov 2024 04:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:49 +0000
Files and hashes:         1: 1-iX0GJwceIxjjuUZV79-SGq7sZo.roa (hash: 2NAYyPszuUjgQie6DXLfMw7hLTuML0u5xByrmXU4LDI=)
                          2: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: PvJDre6xmz2arki4Ek8wO2chGx0jPVLhiRxNJK007NU=)
                          3: lKfx__R2QYNPbbhoq0HP45HLvDo.roa (hash: sdH5pYALwtj4PstZalPPUwJqKm+I236p0iQfn6MPOAc=)
                          4: zTzpcP9SFebe-jTgSV2xeENc_to.roa (hash: j+gP7tl+18lB+h4D34OJr1I7ANuQRw+Bu+rnGJHGBrY=)
                          5: zveIAmliZCuZLlqTX3KRtpX6Xms.roa (hash: ykw9VU++sUDKW3F7PxgKA9+MbUJmIwLgZCq98dGtH7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:98:04:db:e2:71:ab:30:4a:67:f5:2c:91:f0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Nov 22 04:00:49 2024 GMT
            Not After : Nov 23 04:00:49 2024 GMT
        Subject: CN=7384401d1e7b07130b411ba37026d5464fa317e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:2c:24:26:12:2e:9b:16:8d:d8:ba:b3:c2:
                    86:a5:e8:c9:b0:3b:e1:00:5c:eb:3c:7a:1a:c1:63:
                    14:fa:ec:04:bc:ff:f8:e7:5d:2a:48:b4:c3:8b:10:
                    d8:07:49:24:24:21:24:97:9b:68:2f:f0:d2:f5:eb:
                    19:cd:89:87:4b:45:92:fd:2b:81:4d:f2:5d:e2:3e:
                    44:46:57:ff:d0:57:8f:fe:dd:1d:5e:01:52:3a:cd:
                    d8:65:e0:fe:e7:7b:43:5b:df:4d:e4:28:49:69:a7:
                    29:b4:85:03:70:14:1c:a2:78:60:8a:ff:c7:4b:c4:
                    ce:72:1b:b8:33:2f:28:39:67:bd:67:c1:66:91:3c:
                    8a:b5:49:e8:3a:d4:68:d2:01:21:44:d9:71:7c:76:
                    8d:17:eb:0a:17:cf:aa:eb:71:ce:f9:2a:31:fc:3b:
                    02:1c:e4:0f:c6:1f:56:9c:f7:01:54:6a:b1:1c:8c:
                    a6:d6:05:bf:df:d2:ac:0f:bf:e9:69:43:63:44:9e:
                    3d:28:3d:80:f6:f7:4c:31:e6:26:09:a3:2a:a9:e8:
                    c7:66:cb:89:48:ec:15:8b:c1:e3:7d:8a:d0:14:a4:
                    cb:45:f4:cc:bd:0c:d6:e7:ff:68:0e:5d:e8:71:24:
                    38:71:9e:ec:c5:10:eb:58:82:aa:30:c1:c9:ab:5f:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:40:1D:1E:7B:07:13:0B:41:1B:A3:70:26:D5:46:4F:A3:17:E8
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:02:3d:f9:7b:db:d0:f7:64:31:df:8a:69:32:9f:4b:43:23:
         5b:7c:dc:48:70:73:d4:04:01:b6:2a:d1:64:03:5e:4f:6b:fc:
         cd:11:7e:b6:af:01:66:d2:8a:61:1f:c7:60:6f:9b:4f:8e:17:
         e3:fb:5b:c5:74:f6:48:d1:03:7b:86:f4:96:b1:73:e1:af:bf:
         b2:dc:63:da:f7:e2:df:98:e7:73:1f:67:20:ba:69:2c:cc:b4:
         49:2c:9b:a0:31:d7:aa:9f:c5:1b:75:29:27:0c:35:7f:8e:a8:
         63:ee:e7:7d:9e:b9:87:57:9d:e5:14:bf:9d:c8:a5:e5:c0:88:
         53:2a:41:3b:ad:7b:3c:f5:2b:4e:e2:b2:38:6d:86:f4:66:48:
         86:5e:b5:b8:8b:7d:88:17:30:90:74:b0:7f:64:5c:49:be:e2:
         df:ab:28:f9:b1:01:d7:be:4a:bd:48:72:48:f8:2b:4b:13:f5:
         98:be:da:cf:92:59:2b:f4:66:f5:4d:5e:0f:08:71:86:6a:b5:
         f3:b1:cc:16:b4:bc:17:fa:50:18:a8:e1:04:81:0e:67:48:47:
         20:25:8d:66:d7:6f:98:91:a7:af:80:13:eb:35:4d:04:de:d8:
         14:63:2e:90:61:39:b9:1f:02:88:bc:41:cd:91:da:36:bf:86:
         90:c9:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:03:36 2024 by rpki-client on console-ams.rpki-client.org