Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File:                     T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier:          yJR6To2Kwd3uOUpRs5QE5aKBWSUFld4Er2ypzC0G1s0=
Subject key identifier:   E7:0B:D9:85:47:0D:0E:A8:CE:1F:48:91:17:56:B9:C5:C5:43:6C:87
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer:       /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial:       019357D28254FCED697E21E9E6EFC7E265D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 07:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:33 +0000
Files and hashes:         1: 0VJ10u7Fe1GyP7ylb38oMQBb8ks.roa (hash: tFQVhRSD0a8LM+pYAqDVC4kSz3spu3psvzAm5E5vvi0=)
                          2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: v61znsezGWnspeQLc0mUT0UBaxaKW0pcE/97ZNPuchs=)
                          3: mhB12lXY2a3jUgSFL4bSa2h9rKg.roa (hash: j8X8rYfjvGBtOZ/YrreMykJaSBOVJVshKVO5sCsh/S0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:82:54:fc:ed:69:7e:21:e9:e6:ef:c7:e2:65:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
        Validity
            Not Before: Nov 23 07:00:33 2024 GMT
            Not After : Nov 24 07:00:33 2024 GMT
        Subject: CN=e70bd985470d0ea8ce1f48911756b9c5c5436c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:38:42:2c:5a:ce:11:dd:7b:28:b3:cb:46:
                    e9:c9:96:da:5d:fc:aa:48:49:1b:c5:0a:6c:08:c8:
                    97:18:fd:e9:55:46:16:8a:a9:98:23:69:01:dc:a0:
                    b6:47:22:a5:1f:e9:b9:56:91:da:34:4b:e0:79:b0:
                    3c:f1:28:8b:26:b5:06:1f:38:01:a9:df:5c:0d:ef:
                    79:fd:a3:4f:35:95:85:78:a3:56:a3:48:0b:35:84:
                    26:b4:c1:d7:e0:9c:f0:e9:95:32:ef:4e:4e:55:77:
                    6c:0d:c5:c4:9e:2e:24:af:0a:03:bc:63:6f:f3:48:
                    c5:63:ff:2e:2f:64:0f:6e:f9:bd:ec:4b:5e:b9:0f:
                    e6:44:e9:c0:a5:20:37:48:33:ab:6c:c0:9e:58:bd:
                    e3:0a:65:2f:cf:b1:46:1a:71:43:38:3c:fc:29:d5:
                    56:ce:b4:ad:59:53:a5:c3:a6:ae:aa:3c:8e:79:c4:
                    d3:f5:a9:73:50:0c:f4:b7:92:c3:df:a1:85:0f:7a:
                    ba:ea:7d:cc:86:54:2b:24:bf:e4:5f:67:1a:a9:33:
                    a8:7d:76:4b:db:99:98:d5:7e:31:71:16:6b:f4:35:
                    ef:c2:e8:6b:38:2b:95:ef:19:80:9e:59:0f:8e:a1:
                    7a:b5:57:e3:63:e0:23:5b:3f:c5:d7:95:f2:7e:ce:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:D9:85:47:0D:0E:A8:CE:1F:48:91:17:56:B9:C5:C5:43:6C:87
            X509v3 Authority Key Identifier:
                keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:c7:72:f6:bc:9b:86:70:bd:44:01:1d:aa:22:cf:2e:81:
         74:51:81:ad:41:d5:4f:c7:13:b9:4e:c1:a4:51:fc:0e:18:7e:
         44:e5:72:d9:f4:43:69:8d:59:99:e2:85:f2:27:12:63:da:26:
         29:19:22:f8:fa:73:e8:2f:ce:1e:0e:12:81:3b:e5:99:fb:9f:
         50:8f:02:9b:c4:dc:f4:75:60:67:b6:7b:56:1c:f2:e7:cd:f6:
         4e:2b:01:6c:b5:a9:74:35:4a:81:f9:53:0e:cb:8b:02:3a:3b:
         9a:d0:42:8e:e1:ed:84:a1:d8:54:18:65:0f:0a:7d:31:e4:12:
         df:e3:49:ae:05:81:ee:7c:d8:b0:a5:f8:0b:86:cc:18:48:1a:
         61:84:29:5e:86:f5:7e:c9:15:69:48:b1:d8:72:e1:c6:6f:c3:
         a8:49:e1:b4:78:e5:26:7f:64:b0:a0:3a:6b:90:9b:34:e7:76:
         4b:a2:b1:f6:bd:68:b2:99:b5:eb:98:a6:e1:25:64:37:a8:8c:
         8d:3e:6a:79:f7:58:c2:75:64:df:b3:2f:01:11:84:97:a9:07:
         1f:9d:4b:5c:21:f6:c8:76:7c:c2:3f:5a:c5:3b:08:46:ab:3e:
         a5:8e:76:85:e6:17:b3:cc:1b:c5:14:58:e1:54:f2:7a:80:12:
         1f:a0:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:24 2024 by rpki-client on console-fra.rpki-client.org