Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.mft
File:                     sHiuSZBX6waDir0-3MMJEgSn8ic.mft (raw, json)
Hash identifier:          ma0yFgvc8OfjHGtX17Daoukewzu6r2VI6pRdpYPbrfk=
Subject key identifier:   78:D2:B9:77:70:91:84:DE:10:9B:57:5F:4B:E2:1C:C7:46:54:48:BC
Authority key identifier: B0:78:AE:49:90:57:EB:06:83:8A:BD:3E:DC:C3:09:12:04:A7:F2:27
Certificate issuer:       /CN=b078ae499057eb06838abd3edcc3091204a7f227
Certificate serial:       019351D0D5A5CF08AEF826314D0B302FA726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHiuSZBX6waDir0-3MMJEgSn8ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.mft
Manifest number:          0511
Signing time:             Fri 22 Nov 2024 03:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 03:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 03:01:00 +0000
Files and hashes:         1: 1-yyqtq8po52u9bKb0S36SkvdR9I.roa (hash: TW3XPZHExeyfTADITKyqaOWcLnYZ4LVRMCrC/JmfiP8=)
                          2: qaIaoirDdyUhTchuZe1CaruMOKM.roa (hash: GLh87o2mZkoxB6y9V0ltF7+nJISwFmXIWRsd7IGFDGw=)
                          3: sHiuSZBX6waDir0-3MMJEgSn8ic.crl (hash: 1egADTn9LNKft6OUTRVPZMtWu1zMwCMjYaODGWWnUsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHiuSZBX6waDir0-3MMJEgSn8ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:d5:a5:cf:08:ae:f8:26:31:4d:0b:30:2f:a7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b078ae499057eb06838abd3edcc3091204a7f227
        Validity
            Not Before: Nov 22 03:01:00 2024 GMT
            Not After : Nov 23 03:01:00 2024 GMT
        Subject: CN=78d2b977709184de109b575f4be21cc7465448bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:67:3d:55:b1:4a:ad:20:2c:38:81:6c:3d:
                    e4:2c:d8:91:c4:0f:57:c8:3e:44:ba:9e:27:c7:da:
                    c2:93:8b:e6:3a:6d:53:64:09:18:e1:01:54:97:3c:
                    f0:6f:b1:55:85:f1:62:a8:0f:29:22:ca:65:25:50:
                    12:2f:dc:3a:db:37:a8:f2:90:30:4d:18:4b:2f:03:
                    ea:d7:92:a2:3d:dc:fe:77:f7:e9:05:e5:40:dc:55:
                    b5:57:23:81:73:32:bd:65:30:2d:76:0d:73:5c:8b:
                    5a:23:e9:21:31:a2:89:99:ca:a4:84:17:6e:7d:5f:
                    f9:93:9b:f7:af:df:a8:2e:85:f6:61:64:5f:7b:0b:
                    a6:60:9c:73:3b:01:4e:5d:af:f3:af:12:d7:91:33:
                    0a:32:fe:48:41:e7:68:32:03:64:a9:c3:e6:5d:41:
                    04:b9:3e:d8:f1:e0:ee:79:75:eb:70:5d:0f:9d:bc:
                    36:ef:dc:8d:f4:a4:5d:4d:6a:70:54:5e:81:dc:65:
                    6b:84:4e:0b:08:bc:73:4d:2d:ef:c2:bd:bb:ca:bb:
                    e3:1a:72:8e:9e:2b:c6:e9:08:a1:6f:2f:1c:2d:bd:
                    d5:b7:f3:4c:89:d1:6b:96:64:ad:7c:9e:05:4b:d5:
                    9f:93:b3:0e:56:a5:4a:a6:ff:60:a8:ec:14:dd:a8:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:B9:77:70:91:84:DE:10:9B:57:5F:4B:E2:1C:C7:46:54:48:BC
            X509v3 Authority Key Identifier:
                keyid:B0:78:AE:49:90:57:EB:06:83:8A:BD:3E:DC:C3:09:12:04:A7:F2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHiuSZBX6waDir0-3MMJEgSn8ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:8d:a4:65:5b:f4:94:5a:da:e3:89:89:73:3d:b6:4e:5d:
         ad:89:d1:8e:30:bc:a6:ae:c1:91:d4:1f:33:07:fe:90:8a:2b:
         dc:6f:c9:06:a1:14:bc:65:38:d6:04:f1:21:2b:48:e6:0d:84:
         32:75:4d:b5:d1:45:f9:5b:96:74:3c:db:e2:d5:78:f9:e2:56:
         60:64:91:93:f9:04:65:23:69:d9:ae:8b:ad:79:b1:8e:bb:0c:
         26:76:99:1a:35:a8:3e:65:c2:0e:bd:03:a7:e7:28:68:1f:ee:
         3d:4e:76:19:5d:be:95:fc:b5:1e:d2:71:c4:90:eb:76:57:e5:
         46:90:b4:ed:49:fd:ac:c1:14:19:02:f4:31:ed:01:67:33:13:
         8b:38:68:5d:c3:e0:81:3f:0d:67:89:3a:29:40:81:ee:96:13:
         45:a1:3f:07:c2:65:72:bb:a5:9f:fd:1e:53:13:15:6b:78:c0:
         5e:4d:25:23:f9:c1:62:d8:56:15:6e:1b:6d:e2:8a:6c:92:91:
         01:28:87:78:12:7a:5e:c2:ec:2f:a0:e5:ec:db:ad:8a:a4:f5:
         9f:52:fd:6c:8c:bf:a1:97:3a:24:d2:10:15:00:51:3b:c8:cf:
         52:ab:be:fd:b1:2b:82:04:06:9b:2e:19:d3:66:20:b2:b3:37:
         a8:21:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:21 2024 by rpki-client on console-ams.rpki-client.org