Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File:                     hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier:          vN1hPoxi5ReRqLRJ3iLiJ9dxfTCXxF3SzPcuIw6KAm8=
Subject key identifier:   DF:CB:67:AD:11:FE:C2:C9:B4:2D:8E:77:11:26:D5:02:EC:4E:69:5E
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer:       /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial:       0193568B4AD4B71266DA152FFAFD298D492E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number:          04C4
Signing time:             Sat 23 Nov 2024 01:03:09 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:09 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:09 +0000
Files and hashes:         1: Yi73awUfNeeD2qULm-KB47t1eWs.roa (hash: ylHyQvumKVd2KGOFcPgDrQXCjT5j4DEroVaZHln2sgY=)
                          2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: ErkexcK6hHCkezCVSCWvCUlkNlDfbM1n3Por5s0S8qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:4a:d4:b7:12:66:da:15:2f:fa:fd:29:8d:49:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
        Validity
            Not Before: Nov 23 01:03:09 2024 GMT
            Not After : Nov 24 01:03:09 2024 GMT
        Subject: CN=dfcb67ad11fec2c9b42d8e771126d502ec4e695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:32:3d:40:4d:24:7c:0d:8e:a9:c4:24:5d:
                    0b:09:71:69:dc:38:54:72:98:58:ab:bb:08:6b:86:
                    b3:cf:36:9d:ef:a2:db:18:97:9c:5a:9f:fb:99:c2:
                    6c:b7:20:f2:f2:3d:4c:ed:78:54:4a:74:3d:3c:22:
                    47:74:49:4d:31:80:ea:e9:aa:5e:24:62:27:70:e4:
                    97:f9:8d:85:4b:f1:0c:e4:ac:ea:01:f2:9b:d5:37:
                    be:8f:6a:3c:dd:7a:b8:eb:ea:de:4d:5a:72:64:ea:
                    0a:fe:e0:b2:38:9a:dd:ee:72:bc:62:6d:74:3f:d2:
                    1d:f7:bc:f1:7f:5e:5f:4d:a5:62:7d:0d:db:10:fa:
                    f5:90:36:72:4d:69:b7:e5:b2:09:cb:cd:e9:d4:f3:
                    8f:c0:09:c6:89:63:bd:31:68:78:9f:43:03:82:c2:
                    05:d0:61:ef:4b:eb:f1:81:de:00:6a:3c:ae:97:14:
                    f8:48:0c:5b:36:cd:5c:63:ae:65:3b:bd:fb:fe:83:
                    a8:b3:f7:fb:a4:3b:6c:d2:ce:58:b0:45:53:e7:96:
                    d0:87:30:55:e1:ff:ba:b2:bc:2b:cf:1d:57:06:d3:
                    a1:92:30:6e:1d:fa:87:c1:4f:8d:27:17:b9:e8:f1:
                    29:38:07:2a:1d:0a:a6:9a:e0:91:91:6c:6c:fd:6b:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CB:67:AD:11:FE:C2:C9:B4:2D:8E:77:11:26:D5:02:EC:4E:69:5E
            X509v3 Authority Key Identifier:
                keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:b5:8f:a3:37:ea:1e:63:a4:fa:6d:b7:5f:18:b8:41:7f:
         74:e2:2f:7a:28:52:f3:69:8c:19:85:f7:7d:c8:51:5b:1e:45:
         64:61:4b:1a:2f:4f:d7:4b:72:bb:72:d9:c3:ef:ef:b2:7b:ab:
         ca:ab:a4:fe:b2:73:ce:9e:67:7b:5a:5b:33:b6:a4:d8:c6:b8:
         33:ef:ef:94:21:9a:1c:b3:8c:4e:54:62:47:73:00:1e:b4:8f:
         ae:4a:6a:f9:01:fc:cd:ed:cd:b5:65:56:a3:c8:f4:4c:8a:41:
         c9:40:30:f2:e2:44:63:31:29:cd:9e:41:32:8d:b2:3e:c2:19:
         f4:e8:b4:8d:71:a9:8f:92:f6:31:20:ae:bc:88:6f:79:ab:a9:
         35:fc:31:a2:69:f2:39:dc:f6:3d:a3:34:d9:c7:04:48:51:04:
         44:73:78:cf:0a:3d:78:ae:e7:f7:d7:ae:b6:e4:b7:6a:1f:2c:
         be:cc:ee:98:36:12:92:75:cf:69:3c:18:ac:a1:98:57:34:9d:
         10:c3:32:26:be:f9:ad:bf:b2:81:20:6a:b3:9f:51:18:58:5e:
         fa:d6:5a:e6:10:5b:3f:63:d9:fa:7a:d9:5f:76:17:ed:a5:cd:
         5e:5a:52:84:bf:1d:40:64:8b:29:01:87:5a:2a:d1:81:6a:3f:
         25:61:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:23 2024 by rpki-client on console-ams.rpki-client.org