Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File:                     kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier:          Q04sHovCXswCjZ4JYbBk0QA0C04QvQlBiZi0Ij9szGQ=
Subject key identifier:   78:9A:1A:61:66:40:78:8A:3D:F7:B1:94:98:66:39:B6:96:3F:3B:5C
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer:       /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial:       019358782ABB3399824C4E22995F0F63816E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number:          0F34
Signing time:             Sat 23 Nov 2024 10:01:30 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:30 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:30 +0000
Files and hashes:         1: KkF937gOCAJNicRJkClgiZU-oTM.roa (hash: kpxA31OI2xy3dShoRGzI+U8ozYAKeEImWFGBvb3UvOA=)
                          2: bfiZ-FOTii9y7m2Gq7YtSLN1Rdg.roa (hash: IxxFJyLcLObvllWJtA7LcZGuC+OwJyMpfovn5oR1pFg=)
                          3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: S68JTsPhYmw7YWbqyJ/vKYLYuZCjfDR+aDuDHayox8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:2a:bb:33:99:82:4c:4e:22:99:5f:0f:63:81:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
        Validity
            Not Before: Nov 23 10:01:30 2024 GMT
            Not After : Nov 24 10:01:30 2024 GMT
        Subject: CN=789a1a616640788a3df7b194986639b6963f3b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:89:45:74:60:1f:ed:ed:12:87:1d:1b:b0:
                    a6:9c:1f:6c:1f:83:47:b0:a2:46:47:cd:3c:80:88:
                    fd:29:a4:3f:69:26:7b:f8:74:28:78:01:52:5e:e0:
                    58:2b:86:12:bc:07:46:89:dd:81:8b:5e:7f:4d:b2:
                    2c:7a:29:9d:34:87:38:1a:f6:5a:05:20:18:6b:3e:
                    31:67:c6:90:be:ae:80:b1:77:30:f9:24:4b:80:17:
                    96:90:af:bf:17:9a:9b:b9:32:56:db:8a:ab:24:0a:
                    76:9f:9b:ec:e2:c7:0b:25:2e:de:e5:39:17:c8:32:
                    2b:d4:1d:e5:eb:71:b5:1f:df:f6:90:df:e1:a9:fa:
                    57:0e:81:fe:d2:11:70:95:1e:d2:bf:0f:c3:e5:33:
                    d2:ff:cf:8c:58:da:da:58:35:2d:1a:f9:46:c0:ff:
                    46:5b:9e:d0:54:6a:32:5f:83:5f:cf:f4:7d:d2:2b:
                    3b:61:d5:5d:73:a2:34:e9:c1:fe:d1:c9:21:98:b3:
                    92:5d:57:2c:6b:8a:c7:3b:ae:e5:61:e0:40:6c:8b:
                    31:b6:9c:8e:ea:0c:04:6b:94:84:50:d4:4f:bb:d9:
                    f5:f9:df:c5:86:dd:9c:81:d3:33:bf:a0:ae:36:2e:
                    07:d9:fa:26:b3:06:d5:de:f6:c5:b9:87:6d:b4:11:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9A:1A:61:66:40:78:8A:3D:F7:B1:94:98:66:39:B6:96:3F:3B:5C
            X509v3 Authority Key Identifier:
                keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1d:30:02:6f:bf:82:d8:da:ef:61:a2:b7:74:0e:86:f6:6c:
         0e:a5:cd:fb:c9:67:07:f9:45:e1:7d:0f:1c:ac:94:f3:98:b6:
         be:4b:f3:b9:28:7d:29:fa:a1:9e:7b:60:3b:57:dd:ff:07:72:
         ff:70:cf:f7:59:f3:bc:43:5d:d3:fc:1e:e7:e0:4b:a8:3e:2c:
         a2:8e:a7:3d:4b:6c:21:27:30:45:8e:60:c8:79:27:15:f5:3b:
         58:9c:86:5b:e5:2e:1c:e0:e6:fa:32:60:3e:36:11:b1:7a:7a:
         43:c1:ce:0c:a1:0f:45:c4:c1:fd:9b:0e:44:5e:b8:84:72:db:
         e9:48:91:75:1d:bb:6e:7b:64:6f:ec:c7:1b:42:2d:ab:f0:07:
         fc:83:d5:f6:5a:79:72:d7:60:48:50:34:a1:a8:3d:4e:f1:74:
         aa:6a:5d:a3:3e:e8:10:81:f9:6c:92:e4:fe:71:a7:9b:d8:97:
         d7:d0:d1:9b:fe:9a:39:22:b3:2f:ad:3c:b6:7a:6a:3a:f0:3e:
         cf:68:c2:41:af:f2:19:cd:be:60:06:7d:aa:19:bd:af:57:a8:
         f5:18:fa:5e:e3:5c:88:ac:0c:ab:ce:96:56:f8:17:d3:65:46:
         d7:bd:1d:96:45:d2:e8:6d:9a:09:d7:4c:c2:4a:63:75:63:1a:
         bb:46:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:28 2024 by rpki-client on console-ams.rpki-client.org