Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File:                     fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier:          X9QElJvPXX+/Exu3ncKEwTl3pHojJmRIuJS9eoVyM1g=
Subject key identifier:   04:E0:CB:7D:96:2D:6D:22:94:F7:25:5D:AA:91:E9:9A:5C:59:68:B3
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer:       /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial:       01938EF7FD37C5A395D3D4FA960E37005913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number:          031E
Signing time:             Wed 04 Dec 2024 00:00:37 +0000
Manifest this update:     Wed 04 Dec 2024 00:00:37 +0000
Manifest next update:     Thu 05 Dec 2024 00:00:37 +0000
Files and hashes:         1: MzYDeANgZVntZl3mXbneGWbVlkY.roa (hash: AFdZ+5coTkGynFrU3mtLrsXikxEzV0MkXZDM0NC5VsQ=)
                          2: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: pmN6c+0DMRCabwjc8eRjsS80aDOb+vkjKWBy1Jb71cU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Dec 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8e:f7:fd:37:c5:a3:95:d3:d4:fa:96:0e:37:00:59:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
        Validity
            Not Before: Dec  4 00:00:37 2024 GMT
            Not After : Dec  5 00:00:37 2024 GMT
        Subject: CN=04e0cb7d962d6d2294f7255daa91e99a5c5968b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:bc:cf:c3:15:7a:66:ae:fc:cc:8b:c4:88:
                    88:98:6a:3b:f3:06:54:ad:86:14:f7:a1:be:f7:6a:
                    d8:91:be:a7:10:a6:d1:01:41:4e:eb:c1:32:e8:e2:
                    5f:c3:81:ab:de:75:95:c9:62:2f:68:5d:83:68:14:
                    1d:fb:76:e5:4f:51:f8:ee:e9:01:1a:f9:b4:29:00:
                    f6:e8:67:eb:75:bf:83:2a:25:1b:a6:51:5a:7a:d7:
                    9a:16:40:f9:fb:2b:c8:82:a4:50:08:c5:c5:80:4a:
                    40:16:1e:8a:69:a5:96:9f:7c:b7:aa:25:be:ee:22:
                    da:62:9d:10:12:18:25:fc:3e:b3:59:d8:17:ab:57:
                    25:40:0e:08:6b:37:76:e0:4e:ff:0f:b4:d6:68:f5:
                    b8:13:60:90:69:bf:3d:45:e9:3a:6a:a7:65:44:a6:
                    d4:de:ce:e8:b7:99:22:a7:25:e3:e0:6d:16:7e:78:
                    58:aa:40:d9:00:ce:8a:da:ef:c9:fa:5a:f8:41:b3:
                    83:3f:3f:f3:10:e4:e3:ef:25:af:c4:48:0f:72:0c:
                    16:ad:fd:12:1e:12:1f:28:b4:99:a4:6c:29:74:aa:
                    81:1c:c0:ae:43:13:7c:6a:48:1c:a6:7e:34:64:d1:
                    b1:5f:ed:9a:1b:c4:9f:8f:b4:52:b6:a6:2d:70:2b:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E0:CB:7D:96:2D:6D:22:94:F7:25:5D:AA:91:E9:9A:5C:59:68:B3
            X509v3 Authority Key Identifier:
                keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:66:37:17:cc:0b:8e:81:ef:e8:47:0d:4b:82:67:4a:c0:
         70:fc:89:e6:fb:9b:6b:4a:a2:d2:33:ca:61:e7:94:a2:aa:3c:
         b5:9e:d9:22:75:24:ea:cf:b8:ac:95:b4:52:75:03:3b:a3:47:
         61:9a:b9:56:2e:6a:21:f0:36:5f:33:46:26:eb:46:c4:0b:9c:
         c5:00:5d:ae:46:05:b0:9c:94:1a:42:2e:0d:ff:f6:fa:9e:13:
         e8:ba:6e:5b:df:32:98:27:5d:84:41:03:6d:fb:2c:36:ae:0f:
         8d:08:9b:ed:c0:d8:ad:8e:5a:29:8d:9b:35:4f:c4:f7:dc:74:
         12:57:41:1f:9c:90:5d:a2:f2:72:34:3e:0c:ed:10:e6:83:da:
         a0:c6:89:30:cd:4e:3a:d6:d4:fc:a5:e5:03:f1:48:f7:8d:c3:
         ed:b1:02:1f:04:c4:09:92:0e:7f:7b:fb:4b:fa:3d:83:f1:da:
         02:7d:00:3d:7d:86:a1:dc:e6:ba:62:8a:ff:d0:89:c0:2b:81:
         83:49:2f:7f:fd:35:2a:1f:71:e5:e2:33:a6:dd:7c:05:c2:2c:
         52:6d:8b:c2:54:23:6a:41:e3:5c:f0:af:fb:f2:d4:a2:15:2b:
         b5:86:75:19:c7:43:1c:a9:f2:d0:a0:6d:fe:60:89:65:a0:45:
         f0:e5:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 07:17:21 2024 by rpki-client on console-fra.rpki-client.org