Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          X9KvSoD0TeLyRFlCC128HGovDdCEXL5sJ939phB67Ec=
Subject key identifier:   D8:FB:55:28:A3:6A:5F:06:CC:DE:0F:D9:30:70:CF:E7:04:3A:CA:10
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019355E3EC7A5BC255E21723AA4E9F1C0D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          0430
Signing time:             Fri 22 Nov 2024 22:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:20 +0000
Files and hashes:         1: 0uxvcqE3rm6jNe_RFhBrZB2RZGc.roa (hash: cUzeUYCfkUnNbMQsdt6lgTKqGSGrebFChDr4YcCpi3w=)
                          2: 5BxrlgOvPfwVxPZO4nKf4olhPwo.roa (hash: jUuP+lYEOUHHncUV+rsyPrC3A7tGxKQVH6RENu06R7U=)
                          3: 9Xt-cq6YELgnq0kwsxswAviY38Y.roa (hash: hjMBMeYjSwLL2vqvq8IeN7isjJMa0VprBvPmh8vesbw=)
                          4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: kClI32tcAjhzFUWh/wy0nmPpo6cbgU089ViIND4+TvE=)
                          5: WuQU05VSVwREBDRAls1A6Z8iFbI.roa (hash: uDeqyoujS7mcIA3i1oIEzkBWtNulqkWUdrVAOvov42s=)
                          6: hyZJtkvXrMZWCVb0mSoAwOnYLE4.roa (hash: BfxdutaAx2SZ/fE3n7MTcT6ZOT4BhnYSh3/LMg0c3zg=)
                          7: ifIyx49x8K3e0IN4rJuVDKOxoMc.roa (hash: 2Muj5EnaiJRcHSvAfpd/VYUp8/Fe+bGu/WfCGhRdi90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:ec:7a:5b:c2:55:e2:17:23:aa:4e:9f:1c:0d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Nov 22 22:00:20 2024 GMT
            Not After : Nov 23 22:00:20 2024 GMT
        Subject: CN=d8fb5528a36a5f06ccde0fd93070cfe7043aca10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:fd:72:60:cf:f3:55:4c:7b:4a:35:aa:01:
                    be:0b:8b:ba:56:9b:e4:93:c4:65:4b:7c:03:26:cf:
                    fc:fc:27:1a:ac:3a:f8:4b:6a:99:18:c5:a6:f9:ef:
                    d8:c0:99:6b:9d:65:03:63:a2:05:0c:8d:4c:e4:cc:
                    be:a1:2c:6a:36:9d:00:c3:88:f0:aa:5c:84:d0:61:
                    5d:1b:f5:8d:bb:4d:cf:c0:17:cf:dd:d0:26:0f:98:
                    b4:4b:e2:8f:be:eb:9f:a5:13:61:17:78:f3:1c:06:
                    3f:84:f5:dc:cb:02:8f:81:a9:c8:6f:95:1e:c5:1a:
                    41:a2:12:53:a3:19:43:9b:d8:01:c6:ab:af:f6:80:
                    9a:03:36:0d:b2:bb:db:86:f8:82:fd:46:30:50:b3:
                    70:5a:f4:b0:35:db:f3:92:ac:a3:dc:30:42:4e:b4:
                    22:4d:7e:ce:c9:89:7b:e0:92:db:72:70:c8:67:7c:
                    aa:87:97:da:3f:bf:cd:e8:89:fc:60:01:e1:96:28:
                    ac:a9:0b:94:21:36:b0:6b:68:31:e2:70:b9:70:2a:
                    1b:67:1b:00:c7:de:fe:c7:c2:73:52:54:46:ce:48:
                    52:78:50:2f:90:57:f4:d8:10:c4:93:59:3d:48:f7:
                    00:e0:15:1f:7c:48:e7:36:72:b4:45:be:60:9f:6f:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FB:55:28:A3:6A:5F:06:CC:DE:0F:D9:30:70:CF:E7:04:3A:CA:10
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c0:80:b8:45:5c:01:2f:ba:05:7b:78:b9:72:f9:35:e6:d3:
         9e:30:52:87:ea:b3:85:d0:e3:fc:40:b3:0e:7e:cb:2e:ea:31:
         70:95:11:f9:87:f4:c8:48:50:87:af:6b:6e:3c:a4:e0:a6:ef:
         bf:f2:68:81:61:7b:92:e4:23:84:91:39:35:ae:b3:67:69:13:
         f7:5c:ac:98:3d:98:6e:5e:78:97:df:d2:03:c7:dc:40:81:45:
         51:d2:01:9f:ee:15:d5:7e:4a:52:e7:06:50:8d:ff:ed:d7:0e:
         ba:cb:c4:35:e3:e1:d3:8c:a2:e0:e7:d7:7b:cd:8e:7e:64:89:
         3c:b4:b1:59:5a:53:3d:df:ee:1e:1e:62:45:08:b0:a8:10:4f:
         be:24:ce:c3:32:ed:19:f9:db:d7:d9:2c:5d:9a:9b:09:07:95:
         8f:e8:25:d0:0d:8a:97:68:5a:d1:ee:b0:47:eb:d1:58:8a:e4:
         74:6a:b2:05:d9:43:03:94:b7:9d:86:f0:2b:27:e5:81:79:c4:
         e7:57:4f:25:ca:e2:34:da:f1:eb:1c:15:19:36:48:59:75:50:
         c3:9c:b9:e0:10:ba:53:4e:d0:9d:de:93:6f:53:d6:1a:0d:2a:
         83:b6:c4:7b:2d:01:f6:fd:6a:3d:be:d4:f0:4d:ac:76:7c:93:
         5d:36:35:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:23 2024 by rpki-client on console-fra.rpki-client.org