Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
File:                     vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft (raw, json)
Hash identifier:          mSsLNjTQ5IFgyhsV5/i+HiNJRVQIwQLPLHXUeKWbdyU=
Subject key identifier:   F7:F1:75:58:F6:BD:C0:5D:19:46:E6:62:56:1C:CB:A9:71:23:93:4D
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Certificate issuer:       /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial:       0193647BD257A7E4369DA57183DE4D1EAD76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 18:00:56 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:56 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:56 +0000
Files and hashes:         1: 0PrmR6FdCp50QR43y_BNfg5Nz_k.roa (hash: ZIlKgxFjeRZ+gQTxdyu7UoPwEyhT+OrasWuhtpIurhk=)
                          2: TScQ871AvZFDluovYujHUcoya2A.roa (hash: XdJ8k0rbHu6wLKeVo+BcGrHiC4Axc2itcpWPF1zlBVU=)
                          3: iHWuG-vCxS4gvYjBLrCIq5ynSFk.roa (hash: jY/ORcMAGvwCv/Ad8S5vHAWBCs2EWmMARhCCPwUfaq8=)
                          4: vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl (hash: BZRn1RtgzHEMFhm1PM+rVHHHnGWbOZWEDaFzn5o51lg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:d2:57:a7:e4:36:9d:a5:71:83:de:4d:1e:ad:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
        Validity
            Not Before: Nov 25 18:00:56 2024 GMT
            Not After : Nov 26 18:00:56 2024 GMT
        Subject: CN=f7f17558f6bdc05d1946e662561ccba97123934d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:75:19:2a:be:cc:69:ef:51:52:6a:dd:0c:
                    cb:0f:96:34:f6:78:23:d9:bb:39:39:e1:3b:d9:eb:
                    82:3f:44:35:3f:ba:12:d2:52:05:19:f5:d2:11:9a:
                    76:6a:b4:47:3f:c8:98:64:47:d0:26:f4:64:a6:d7:
                    37:66:08:60:04:73:fb:3b:cb:f8:73:66:f9:a9:d0:
                    cd:52:4b:2b:6c:c6:1f:b6:38:fe:f1:ab:93:f8:e6:
                    26:8d:b4:e5:8d:83:a1:8f:45:4b:41:7c:9d:82:91:
                    78:3d:97:bc:51:b4:38:38:97:a8:7d:85:b9:9e:9f:
                    7d:fb:3f:82:21:6a:cb:59:83:e8:33:3e:0a:12:d0:
                    8c:06:44:98:6f:56:b0:73:66:c8:58:18:b4:9f:dd:
                    ed:bf:27:1a:9a:d6:d9:8d:4f:bd:c2:37:b3:73:b2:
                    14:c3:a2:fd:7c:6e:94:5b:db:89:7f:1b:89:24:cc:
                    a8:02:e1:dc:3e:8f:b5:9d:ee:33:2d:14:52:d2:f1:
                    8e:ca:64:34:72:e3:f5:25:50:0f:b5:ef:24:0a:e6:
                    a9:01:51:b8:85:9e:39:ef:64:f2:ea:2e:be:76:ea:
                    6e:d4:e4:fd:01:e4:2c:cb:9f:e6:42:10:ec:ab:15:
                    19:b2:17:7e:c6:43:99:67:bb:82:5c:37:50:a8:84:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F1:75:58:F6:BD:C0:5D:19:46:E6:62:56:1C:CB:A9:71:23:93:4D
            X509v3 Authority Key Identifier:
                keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:65:be:f3:a8:f3:66:c1:c8:e4:13:13:60:9a:64:01:7d:
         c8:8e:56:3f:b1:f7:1b:12:6e:dd:98:cd:a4:9c:b3:d7:21:4a:
         4e:d9:f4:b9:c6:cb:fa:0b:b4:70:3d:26:03:43:dc:24:c9:fa:
         6e:d8:77:92:f3:24:59:b4:4e:b7:60:11:13:d2:72:77:11:df:
         78:70:0e:eb:86:fe:7a:49:6b:50:9c:4a:be:ce:9f:ee:fe:b9:
         46:01:8d:95:14:4c:ee:f6:40:8f:2d:61:3f:c7:56:46:a7:da:
         d0:fb:62:d4:5a:5d:6c:8c:5b:3d:cd:de:a4:b2:4d:d0:e4:09:
         1c:17:66:ed:af:79:d7:da:1c:86:f3:ec:0a:9b:4e:73:c3:6d:
         26:14:c9:77:71:6b:6b:34:d4:34:a9:d1:64:8a:73:89:87:cd:
         36:59:c5:83:32:fc:5f:38:20:56:56:76:88:ff:8a:8b:96:e2:
         21:12:5c:97:6e:c5:f3:b9:fe:b7:38:60:d1:e4:d4:dd:da:3f:
         bf:e0:0c:48:66:24:04:5a:9e:2c:33:fa:d0:d1:d1:ea:37:77:
         f5:2e:9f:82:c0:88:64:92:ca:ec:3a:43:25:74:e4:84:f0:7a:
         e6:cf:4b:eb:5c:31:15:d9:d1:bc:22:df:2f:3a:60:7f:0a:ba:
         97:4a:3e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:15:42 2024 by rpki-client on console-ams.rpki-client.org