Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File:                     h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier:          wCLJ0cYa2DNsTJvijL4zVHrk5eAqwjts9ZU4lODLz9k=
Subject key identifier:   A1:C5:8C:C5:DE:8D:7D:0C:EF:71:10:81:79:B0:E6:72:1C:14:E9:B3
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer:       /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial:       01935A9C4E05F03109751946A445D9848741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number:          0289
Signing time:             Sat 23 Nov 2024 20:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 20:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 20:00:13 +0000
Files and hashes:         1: GQGKt12k0D85JjtIARDmCBLsf5A.roa (hash: P3mdv5FDUPKX3Nyg8ouqtq6TDpJ1yGIXzO6rsLxwxm4=)
                          2: XgidnO0qN3GOwYt8qwKyVyv8kcI.roa (hash: daWdLlgE2eETtQWyROECi3JuUowV7BrE1VEn9+vuuCw=)
                          3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: QSPhWgcmP7H551Q1Ip9zEmg3jq3WbQqgOdx1kPobfkU=)
                          4: n6jEhPE2UAY4f0faVZN-KMPgvwo.roa (hash: 4daSHS5JFPsjhfDnlRBWXCHEq0ohYNLvnJt3tkZUkTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:9c:4e:05:f0:31:09:75:19:46:a4:45:d9:84:87:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
        Validity
            Not Before: Nov 23 20:00:13 2024 GMT
            Not After : Nov 24 20:00:13 2024 GMT
        Subject: CN=a1c58cc5de8d7d0cef71108179b0e6721c14e9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3c:da:a5:64:ef:b3:a6:a2:5e:ee:a6:5c:5b:
                    27:30:90:9c:a1:4b:c2:10:5d:59:10:b9:6f:b7:07:
                    d4:e2:14:ea:c8:56:cb:af:ea:32:33:6b:ab:f1:04:
                    5b:52:01:f3:7c:11:48:3e:e9:f6:39:fd:31:ef:85:
                    d4:d5:47:e9:51:d7:f6:2d:bf:b0:12:70:f8:6a:17:
                    b2:f5:35:58:d8:e9:19:8c:30:23:c3:e9:05:18:bb:
                    ff:f4:1d:7f:7e:4f:8b:98:53:e8:ad:61:5b:d8:20:
                    db:54:09:22:77:59:ab:97:77:a7:19:0a:c8:cf:cf:
                    10:08:e9:83:64:f7:1f:18:91:e3:04:1a:10:07:ed:
                    8d:ca:0c:db:e7:f7:35:fc:2e:aa:29:c3:8c:7b:e8:
                    02:78:61:7b:b6:85:4f:5c:02:73:b2:c9:26:46:a5:
                    e4:be:33:2d:77:cb:c2:dc:8d:c0:a2:08:aa:b6:25:
                    d0:a3:f5:e5:f6:7b:7a:83:2e:85:04:ee:16:71:e0:
                    62:21:4a:28:a6:f2:9e:fb:51:a7:39:38:e8:88:be:
                    77:e8:b5:35:d6:7c:76:2c:d3:ea:23:ee:2d:1e:0f:
                    ae:f7:71:b8:2c:79:a7:b3:76:ec:1e:7f:99:0d:c2:
                    83:47:99:42:cb:7f:b5:43:c0:40:ca:ab:98:c9:63:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C5:8C:C5:DE:8D:7D:0C:EF:71:10:81:79:B0:E6:72:1C:14:E9:B3
            X509v3 Authority Key Identifier:
                keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:fc:23:db:ba:79:c2:37:83:a9:70:2f:b6:57:3e:c8:e4:
         6c:be:86:18:19:e7:f9:cb:73:bf:a5:99:99:c2:99:20:d7:ee:
         68:8e:21:9a:1f:0a:65:6c:4e:78:e9:d7:f0:6c:5b:ff:31:85:
         cf:bf:9f:69:89:8d:9e:9d:8e:18:78:93:47:34:30:c9:4e:96:
         1b:14:70:ae:8a:80:6a:e8:be:01:5b:48:74:25:7b:a5:50:3a:
         4f:4e:1d:68:82:2f:d1:b1:0e:73:ef:e5:84:e6:42:cb:9c:0e:
         64:5d:4b:13:3e:28:e7:4c:84:7b:de:c7:ba:55:6d:ec:0b:ca:
         93:42:0f:01:35:ef:62:dc:e3:3a:b1:15:de:88:e3:69:2f:f8:
         f9:69:aa:47:66:41:95:f8:8c:f1:20:19:49:11:2d:2f:cf:86:
         c2:b2:f0:85:88:a6:57:75:0c:db:40:cd:9a:4a:4c:c5:b3:59:
         26:5d:9d:b7:b0:1f:64:7c:c9:35:cb:ba:63:00:c6:46:5a:00:
         4a:08:1f:21:38:5c:26:a0:99:fd:23:16:17:b3:f1:16:2f:7d:
         6c:4d:d8:f7:47:3f:63:0e:6d:f1:15:f5:f1:fd:75:06:f7:7d:
         8c:52:2e:6a:ee:72:09:85:b0:49:75:fc:6a:91:7b:14:20:89:
         ea:fe:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:44:11 2024 by rpki-client on console-ams.rpki-client.org