Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File:                     A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier:          waUW5x4xLAtZfmIk95GU8QcnRRvUpLG4tOnvu5h1H0E=
Subject key identifier:   13:04:20:F2:C5:D1:BD:91:C9:92:3C:89:4E:42:76:9C:35:CF:2E:1F
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer:       /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial:       01935879CE2B9A8A8BDC21C236B89324802C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:03:17 +0000
Manifest this update:     Sat 23 Nov 2024 10:03:17 +0000
Manifest next update:     Sun 24 Nov 2024 10:03:17 +0000
Files and hashes:         1: 9ESaw7LkRjIbURl0qyIUVrwp478.roa (hash: ocJL1bjZy6iPqR0CNskAtJrOJU+qfs00mexAINUiElQ=)
                          2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: cqXpp7YVPbqWml/v5516VPY8e026FJtiwuDIaeRe3jA=)
                          3: Bx3iRg-o0boXaBuFXVqjsb4dZrE.roa (hash: JyZOMGDkfZ66Wm1VswqXuv/BCbUfkOcYKzVoTz9PL0w=)
                          4: Frj8exoM6nIIZRwaOP2PeA8x6yA.roa (hash: 5x4Xtw8NVeQHEJ23fhLfiRw/0jitLatPymxuiNtH/JU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:ce:2b:9a:8a:8b:dc:21:c2:36:b8:93:24:80:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
        Validity
            Not Before: Nov 23 10:03:17 2024 GMT
            Not After : Nov 24 10:03:17 2024 GMT
        Subject: CN=130420f2c5d1bd91c9923c894e42769c35cf2e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:5e:cf:fd:c4:3f:fb:2b:35:b2:10:8d:c3:
                    1e:16:b7:1b:c4:1c:2f:02:ae:c9:1e:fd:d2:37:59:
                    29:ec:85:e1:51:07:97:35:03:bd:1c:d1:92:f1:5d:
                    de:4b:f2:2a:2f:84:76:7f:16:1b:fb:e3:94:b2:23:
                    3e:b5:f1:01:0c:6a:65:a1:ad:b8:f1:b2:d8:f1:59:
                    0a:97:d4:50:d5:72:b1:78:eb:c9:93:28:05:fd:20:
                    1d:25:af:a6:c7:31:5d:fe:a9:f4:b0:89:ba:0b:30:
                    e2:2c:e6:68:d8:cb:de:90:31:80:5f:80:f7:fb:0f:
                    98:48:02:b4:f2:4a:78:01:30:d1:66:23:d4:95:82:
                    9a:e0:91:74:85:40:ef:c5:f6:13:8a:6f:1c:af:f2:
                    38:f2:a5:7c:04:7d:d3:30:85:e4:aa:16:18:57:cd:
                    21:bc:82:18:0a:ac:c0:2e:e1:61:f3:1f:4e:48:6f:
                    13:a4:26:1d:25:39:c8:5c:ed:4a:1f:90:1c:fc:16:
                    d6:ce:0d:74:79:66:ec:01:e8:ba:82:ef:6a:28:d0:
                    ca:dc:d0:41:43:aa:c1:8d:01:5b:dd:32:aa:56:65:
                    83:ae:cf:68:5d:df:92:77:b2:c3:79:df:51:79:fe:
                    0a:42:32:a7:5c:2a:6e:41:5e:a1:03:28:d9:df:3e:
                    0c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:04:20:F2:C5:D1:BD:91:C9:92:3C:89:4E:42:76:9C:35:CF:2E:1F
            X509v3 Authority Key Identifier:
                keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:aa:92:b6:15:e3:5f:fc:1d:79:46:75:06:5c:7b:d8:d0:cc:
         45:00:10:43:5f:8e:12:16:89:e0:a6:f8:79:a8:8d:a5:9a:a6:
         71:1b:ce:7c:57:ae:eb:3b:83:5d:10:36:10:88:55:51:74:ab:
         ec:dd:80:76:59:d9:32:33:b2:16:08:8a:3a:48:65:b9:5c:1e:
         c7:f7:c4:0f:51:94:2b:5c:72:b3:ae:6c:b9:f4:e4:ac:6e:77:
         1b:be:3e:8e:57:6c:14:53:de:11:c3:e4:b8:a0:f4:79:b5:9c:
         33:81:22:50:06:23:0f:15:6e:20:ff:e5:42:e0:18:cd:a7:a4:
         5b:06:26:63:b0:15:2d:9b:b0:a1:27:ad:77:2e:fa:a2:09:47:
         11:e4:f7:23:92:7e:ca:fb:a2:4e:ab:f2:30:6a:ca:d2:cf:16:
         c6:60:60:cf:01:18:f8:fe:2b:d7:f2:9d:c4:1c:43:d9:92:53:
         5c:98:6b:52:f7:ad:f1:7a:1e:55:4b:7a:d6:5a:bc:3a:ab:86:
         5d:8e:10:26:9a:26:8c:30:6a:c2:41:dd:ff:c0:8a:de:ae:74:
         a8:89:4f:93:be:81:3b:72:ae:06:6e:a6:ac:47:45:b0:fd:fa:
         7c:54:a5:8a:24:b4:27:ae:6f:cb:7b:e1:97:de:73:d0:82:f0:
         e9:f1:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:17:09 2024 by rpki-client on console-fra.rpki-client.org