Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File:                     H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier:          cCrNoSR48zQCc8DHWDaZWvwKOauav4N0M5E3AU00pbI=
Subject key identifier:   5D:08:5C:25:38:F0:28:68:2F:E4:E4:91:4D:A4:74:8D:19:10:9E:0F
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer:       /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial:       0193572DA5D71779AB69C26FE22157F79421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 04:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:29 +0000
Files and hashes:         1: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: Z1cyLOBUvwKVLKfqmAnF+SGhAIfSw3dn3irAl1eBHJc=)
                          2: yeMtsV-1QyCOcuxsxSTNqhbigso.roa (hash: qGZfp2jczBrGFtQL4XbO7v6ZlVUStk7JSwLvYxt6B3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a5:d7:17:79:ab:69:c2:6f:e2:21:57:f7:94:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
        Validity
            Not Before: Nov 23 04:00:29 2024 GMT
            Not After : Nov 24 04:00:29 2024 GMT
        Subject: CN=5d085c2538f028682fe4e4914da4748d19109e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:1f:2d:a6:27:48:f9:6c:d5:25:95:89:dc:
                    00:f1:64:0f:8e:ac:fd:a2:16:43:fe:d0:82:84:30:
                    20:0a:b5:58:28:43:32:3c:4f:51:32:42:f1:fb:fd:
                    40:96:f7:0d:95:63:3c:7f:32:f5:b5:f4:d1:36:aa:
                    74:9c:2a:3f:a4:ef:8d:55:e6:71:4a:80:c3:53:f9:
                    e7:81:bf:3f:dd:54:69:d3:1b:6d:ee:ea:a3:3a:75:
                    14:01:07:bb:ee:0f:d3:01:c2:b9:50:d8:00:a4:bd:
                    67:80:ef:3e:53:e8:a9:f5:9d:bf:c0:7f:56:a5:f2:
                    aa:2f:40:3e:d9:21:b8:a2:bf:94:ff:c5:5f:7f:f9:
                    f3:56:19:20:5c:78:d4:86:b2:9f:fd:a8:eb:26:98:
                    de:f7:00:4a:04:42:4d:b3:18:0e:37:93:78:b9:bc:
                    18:24:0a:12:ba:48:7d:60:54:14:8f:75:f9:79:34:
                    8f:56:c1:c2:71:b4:0f:7b:06:c2:84:86:da:d3:62:
                    c9:58:6f:14:42:de:40:23:6c:fa:aa:d7:dd:5f:1f:
                    d9:c8:f0:f4:6a:89:70:4d:e4:f3:09:dc:76:a9:c7:
                    1e:53:87:49:ac:35:ec:0e:8a:33:9b:c8:f7:cb:a1:
                    63:a3:5c:3d:9d:15:6e:ca:1a:c8:e8:7b:57:f6:67:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:08:5C:25:38:F0:28:68:2F:E4:E4:91:4D:A4:74:8D:19:10:9E:0F
            X509v3 Authority Key Identifier:
                keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:86:e9:20:4d:13:a5:65:8a:c9:46:1e:27:90:33:20:4e:
         7f:8e:ee:85:65:66:51:7d:fb:d7:20:a1:16:1d:ab:25:4f:a0:
         58:c7:a7:af:a2:52:ce:c4:55:b7:d3:d7:da:b5:32:8e:76:07:
         99:31:ea:96:36:d7:bc:15:05:12:c6:81:7b:ac:75:ac:57:7b:
         e4:dd:87:1a:ce:e1:35:fc:9e:58:74:c7:0f:d2:98:ad:ff:4d:
         34:17:6f:bb:b7:e8:72:fa:09:33:80:50:61:ec:5e:ab:81:77:
         1b:8a:e4:1a:52:39:d3:c0:46:b2:b7:e1:35:80:97:04:42:0f:
         8a:83:c0:6d:e4:bd:24:d1:0d:f5:ab:c3:ff:08:1a:19:c9:92:
         4e:b5:bf:99:54:08:e6:35:15:e5:80:f3:13:5a:9b:43:2c:d6:
         f8:7a:08:29:7d:85:6a:f8:be:43:c9:b7:cb:f4:83:fd:81:f0:
         31:a0:1b:49:b7:65:55:d3:e3:50:cf:64:73:56:31:a5:67:b1:
         8f:59:c4:f6:d7:49:a3:c0:82:18:7d:83:0f:5c:c5:42:42:00:
         83:b8:c1:23:ae:f5:c6:33:9f:e4:10:b6:88:33:eb:56:0c:78:
         6d:75:83:6a:50:e6:ed:e7:45:14:29:dc:95:17:0c:d8:5b:0d:
         c3:80:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:14 2024 by rpki-client on console-ams.rpki-client.org