Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          AFJXaxciWmw8tnyC+1o7Zbytd2/SAbpsbfNYze+qrpE=
Subject key identifier:   C9:EF:B8:BD:03:CE:1C:27:85:E9:BC:11:87:16:8E:53:0D:CD:93:A8
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       019355AD62F349DD7C5AA62B3017CA9E45E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          13FE
Signing time:             Fri 22 Nov 2024 21:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:46 +0000
Files and hashes:         1: DHXimt4avy8BuhEjJDNcOYxQjFw.roa (hash: JC6/Jxd3jlXSCSrshIvF56R3LNi3EHJaFb9nLYoQ3oI=)
                          2: PX0yUGEA4qDAdwKpnrzI18E7qNM.roa (hash: asFRjRlqcoQdGpJd7/QsV4RSKqHbxHckB8UPPcnaVh8=)
                          3: ZY5pV_oZe-5yJgS8VBKyg-CXTqI.roa (hash: V7kH6W4YdGRIUnDyu/tT8YlargfhbicAqI1j6NCnLyk=)
                          4: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: 0qV+PvHjNr0EAU8nCqn4hLMV4f7PEQ2LOKX/9QnmkYE=)
                          5: mCjjXmNHP3ERcyACKlhWztWevjs.roa (hash: prSCXa4i1+SV8yhrAGFkhQKRCebFhXikZZjChURnSUE=)
                          6: mqTmcoivLmc8kngiNA3VqBSNOwg.roa (hash: efh93Lo5yU40GCSzB2L8OVdzzZTtvsEQ178JS1jorjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:62:f3:49:dd:7c:5a:a6:2b:30:17:ca:9e:45:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Nov 22 21:00:46 2024 GMT
            Not After : Nov 23 21:00:46 2024 GMT
        Subject: CN=c9efb8bd03ce1c2785e9bc1187168e530dcd93a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:56:1d:8b:d5:0e:e5:e6:67:d5:dd:a3:f7:
                    7f:f1:68:59:29:3b:fe:71:d7:d3:de:b9:1f:af:6f:
                    52:b0:1d:e1:49:15:b5:ad:4e:44:81:e5:68:74:0f:
                    0e:77:0d:a7:f6:d5:81:4e:59:08:db:41:b8:98:ef:
                    27:c4:16:5a:d9:ab:df:98:dd:ba:2b:6a:c0:38:3f:
                    56:82:7a:33:0b:81:99:b9:ec:25:8b:66:99:9e:6c:
                    f0:9e:59:15:bd:b5:dd:0c:db:58:30:dd:e5:17:b3:
                    74:d4:8e:15:dc:d9:8b:cd:77:46:0e:b9:91:bd:5c:
                    8b:e3:22:12:10:2d:cd:a6:fc:74:9e:96:ec:23:ba:
                    1b:f9:b7:fe:ec:d1:00:b0:25:90:19:eb:59:69:28:
                    5a:35:21:7f:4a:c1:c9:44:cd:34:a8:5f:5e:96:4d:
                    f6:79:55:4c:53:28:1d:25:4a:80:cb:22:4b:cd:d5:
                    fa:a1:c3:23:98:7c:ec:84:84:08:59:6e:6f:54:b0:
                    51:4c:80:ac:fd:22:e9:c1:59:20:dc:0d:67:76:81:
                    4f:b7:0b:67:1e:9d:38:85:fd:1a:e0:3f:e1:89:1f:
                    bb:70:cb:97:d1:24:a5:39:d7:20:88:64:22:d3:71:
                    22:a0:e9:80:78:b7:fa:14:81:a4:3e:c8:0a:70:19:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EF:B8:BD:03:CE:1C:27:85:E9:BC:11:87:16:8E:53:0D:CD:93:A8
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:3d:d7:58:6e:c4:6e:c8:b7:b0:29:ce:c8:a4:6f:20:ee:
         2c:37:bb:f3:da:a8:54:f8:2d:ff:53:52:2a:43:18:6a:0e:b9:
         c6:8e:8b:3d:21:28:f0:19:75:83:2f:56:82:48:c9:30:47:3f:
         25:b5:6a:d7:0c:cf:da:01:72:bc:05:3d:49:e5:6b:cb:07:9a:
         2d:c4:0a:d4:5a:f4:5a:dc:d5:fa:6e:84:ae:6e:46:f9:e8:c4:
         a5:84:c1:e3:3c:aa:a8:39:c7:c7:ea:9b:8b:ee:ce:91:c2:4f:
         2b:91:a1:1e:ea:8c:9f:f1:e1:0e:ed:94:34:6c:a8:4c:fd:8e:
         c3:b3:53:7f:ef:a3:69:1d:87:bb:1d:b4:29:6e:90:43:53:cb:
         53:a2:69:a3:63:99:47:6e:ec:0d:84:f1:99:f2:a1:05:df:f1:
         95:cf:1e:0d:af:8e:d1:22:0f:00:69:ec:85:4f:89:77:63:d2:
         54:09:d8:62:3c:d3:3e:fb:b0:81:97:37:1b:c6:27:99:0e:86:
         53:18:9f:5f:42:6d:82:24:2c:3f:31:ef:61:7f:3a:26:0f:6b:
         9e:59:c4:23:38:12:1d:4a:ad:f7:cd:3d:03:90:8f:e1:a0:58:
         2f:e4:fe:9b:58:29:bd:da:ff:8d:3f:52:31:14:c4:7b:ff:8c:
         7b:7b:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:45 2024 by rpki-client on console-ams.rpki-client.org