Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          pwFiaz+RZSjId7nRcTrKyDUWUD3F0D1s8DhiP2I1+eY=
Subject key identifier:   F4:B5:49:DA:96:60:D9:F0:5A:94:86:04:2B:06:BE:4E:E9:40:3B:BB
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019352079FF16866DAFAFEAE15ACE3F9EEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          1384
Signing time:             Fri 22 Nov 2024 04:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:51 +0000
Files and hashes:         1: 2sYNum2z_CwIm1hDREF2h0rvV3E.roa (hash: FK1/a5QKa3sXf5Qi+nsHGkoJT4jy8ti3DAQ47nr9VkI=)
                          2: 3u58LyoibH6ViLaynNTGpj3fQVo.roa (hash: huzq/h5cdjCKam0i4SPoTmEl3ci2ZwPRJR6AGlwK+ow=)
                          3: Jpzaey7LirJhPevhW8fopFnmhxc.roa (hash: N0jZCwXpCVIk+0GuMx33pyZoo0mYdC50jL5rN7Mk3ls=)
                          4: LCFa7d0hRmIBhg7NQVRXijM0iSs.roa (hash: PJtyFwmRneGdEJI+x5VUpJpebDD4P0nA87oyAYQmazE=)
                          5: RyjWCKWkpaeViNRy-a384wKCm84.roa (hash: 7XkTAWYF3hZrjbZjcrpyN0ivLZr+dCp8XkSl4IWdJ4M=)
                          6: a_38Q1dYpdxcJMSfBiyChtOdQy8.roa (hash: hh+0fchPaDrnCXIe9D9tIy5gzt2zGJ/gvdPVUS8Ro9Q=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: hA748OwjCo4kyoiNgENLudTYfJNSfAvUcqeKHIj0zhE=)
                          8: lU1eBgP81-E_lSoW0t2xfDikKNE.roa (hash: FO2zy4xnOq3QvMgR9w8/Hu5lhWhfNbzdaTehj9Fahz0=)
                          9: oDM0Cv-MceD1qmxUAJiVKueMxxI.roa (hash: fcjJ9pYwN8VOkh3JRMjiKpWvdFJ1RjN9yu7uspw4GVQ=)
                          10: pCJFbwWAa1ynLecu8wd5N5JRicI.roa (hash: n/UzBzX7jbkI3UmQa1HNk5MGFiHam23DbctAF5nL014=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:9f:f1:68:66:da:fa:fe:ae:15:ac:e3:f9:ee:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Nov 22 04:00:51 2024 GMT
            Not After : Nov 23 04:00:51 2024 GMT
        Subject: CN=f4b549da9660d9f05a9486042b06be4ee9403bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:c1:9f:54:bd:33:99:f9:5c:e9:83:34:09:
                    09:0e:d1:c2:5f:0b:70:78:bd:02:f6:0d:7c:d3:cd:
                    17:8c:13:f5:ed:68:76:cf:7c:aa:f4:c7:e3:ce:c3:
                    0c:2c:63:28:a8:80:24:3f:8c:09:a9:c4:b3:fb:fd:
                    ac:6f:9c:61:8f:76:8e:b8:9f:4a:b8:d8:54:df:29:
                    17:7e:47:e9:5e:2e:77:d7:b4:bf:a3:c5:a6:75:0d:
                    35:de:a0:75:c2:e5:2f:18:dd:7a:f5:4b:d2:9b:7e:
                    64:91:49:01:91:eb:15:1d:fd:69:1e:ec:87:54:cd:
                    d0:11:1b:5e:9f:b6:4a:ac:21:55:29:d3:35:99:94:
                    98:13:79:05:bd:c8:e9:42:55:35:1b:e2:20:a4:a4:
                    54:97:c7:c7:92:83:ad:c4:a3:1a:6d:67:b1:76:de:
                    f5:41:ce:aa:1c:d8:d6:77:10:14:40:34:dc:89:02:
                    3f:a7:cd:eb:7e:62:b9:39:cc:4a:f7:c4:d2:d2:6c:
                    1a:cb:96:c4:13:26:53:60:a5:7e:65:e2:9a:3a:d2:
                    d0:fd:fa:9b:da:85:c3:54:84:02:1d:d9:d1:f4:87:
                    ad:d0:c9:72:d5:61:30:06:3c:90:68:4d:c0:bc:7f:
                    d7:ac:f8:41:12:81:6f:68:67:e3:dc:92:81:29:dd:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:49:DA:96:60:D9:F0:5A:94:86:04:2B:06:BE:4E:E9:40:3B:BB
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:34:fc:e3:40:db:57:c0:93:4f:a2:20:bb:ac:d7:df:05:
         df:79:c0:15:d5:09:5e:35:1c:05:62:a4:b4:da:07:5b:3b:5d:
         84:c1:df:08:90:c4:cf:b8:b2:7f:bb:91:54:05:ad:23:e0:98:
         e7:74:a0:7c:2c:a9:78:3c:4b:01:f6:19:31:71:ce:d3:9d:44:
         e5:41:92:f2:1f:01:bf:86:f0:ee:e3:d8:97:40:ff:39:5a:f1:
         c6:33:a2:6a:90:74:08:1d:ce:b1:1c:79:8c:14:fb:e1:d8:10:
         04:56:06:5b:81:b2:5a:cf:e5:e3:99:ed:b7:11:fd:ac:91:d8:
         ae:7a:ad:e9:c6:c4:98:95:2a:b7:7c:96:db:98:e7:3b:db:b3:
         95:46:b3:ec:d0:7b:4c:1e:a9:fb:70:6e:65:7b:d7:f5:bd:30:
         9c:91:92:12:78:69:0d:10:32:0e:dd:7a:ab:f5:08:4b:94:9a:
         67:37:b4:1e:6b:ee:0d:2d:27:f3:74:06:7f:10:91:d8:d2:ac:
         55:bb:b0:92:ad:92:2c:02:f3:57:8d:07:28:10:3b:c5:84:9e:
         a9:09:25:39:5c:e1:04:5e:85:b4:f7:c1:fb:2c:18:a5:28:0d:
         f0:3a:8b:e2:58:56:b3:7b:31:81:e5:9d:4d:09:5c:a4:ad:24:
         74:cc:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:42 2024 by rpki-client on console-ams.rpki-client.org