Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          BUlMNbCu6wRxiDH21xTPk9xlGy2tlTtW4XmC1d0zQ8A=
Subject key identifier:   B7:49:81:08:DE:FB:5A:0E:9D:45:BE:4D:4A:E7:B1:5E:05:F9:69:84
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       019366698583DAA51D8111F204F8A1B9E47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          1391
Signing time:             Tue 26 Nov 2024 03:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:11 +0000
Files and hashes:         1: 4NktSHyO_xExMNS2gfpodv5Zfro.roa (hash: S0LrD38b6RUnWlh53r75JrNfZfKBKQdndv7rKi2yjLk=)
                          2: 6LxCFOHbebIG8_HGs-0yRxhlbqM.roa (hash: nrGpShC2Q88FC0SPwxPJXE6Ij38XsaLvjMwtO529i8w=)
                          3: FvC9kX0nAUf4nHNTR0Ufg2gRV0c.roa (hash: c8dqtkYViSe0ehDQdR7DYSQV+/YW/3DICpMDRBWCVPs=)
                          4: VyPYm1URyKBFbzmD-t4F8CsfLWU.roa (hash: hv4G0HOjy3ChN68G5DFRNjGaZc0ZFeHK/d/4UqN+IKo=)
                          5: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: qeR1Welws6S4DrmoFPMyzCBI462fc+UI5nJ9CnRenQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:85:83:da:a5:1d:81:11:f2:04:f8:a1:b9:e4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Nov 26 03:00:11 2024 GMT
            Not After : Nov 27 03:00:11 2024 GMT
        Subject: CN=b7498108defb5a0e9d45be4d4ae7b15e05f96984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:41:e9:6c:05:ee:63:23:4d:53:70:6e:72:05:
                    52:22:74:7b:3e:b2:13:38:4f:26:84:fd:09:24:d1:
                    e6:1b:62:d3:11:57:50:c3:53:08:d9:ef:cf:12:97:
                    41:25:f6:89:b1:e1:cf:4b:88:c2:6d:1b:5d:80:2d:
                    8a:d1:7d:39:de:6f:e1:71:b1:ba:dd:10:35:1c:f9:
                    ba:a9:66:37:36:d1:33:75:c8:2b:7e:67:0c:4d:1e:
                    91:3e:9d:62:3b:5e:57:96:ee:18:43:8b:d8:d0:61:
                    da:09:e1:d9:f3:b3:cd:3e:aa:13:b7:5c:0b:39:04:
                    a2:79:d6:5f:5e:66:3b:99:ef:e9:d2:69:67:d6:be:
                    ff:9b:8f:59:a5:65:23:f6:56:2c:20:25:af:88:a3:
                    a0:88:cc:1e:53:5b:f7:d3:37:51:ee:06:b2:97:f5:
                    b0:50:5c:7c:e8:0a:2f:6f:42:c8:d3:c9:aa:16:16:
                    58:73:c5:93:0f:17:61:4f:f6:36:c0:6c:99:ee:73:
                    ca:60:20:90:9a:9f:2b:93:d9:f3:ca:3c:de:ed:4b:
                    61:a1:db:84:19:51:ba:d8:86:cb:d1:46:e4:d9:ef:
                    fd:71:b2:8f:2a:cc:0a:18:44:6c:3e:bf:e3:6e:5c:
                    48:52:37:a8:e5:1a:30:54:1a:69:34:04:fb:25:b5:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:81:08:DE:FB:5A:0E:9D:45:BE:4D:4A:E7:B1:5E:05:F9:69:84
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:75:74:5a:6a:ec:6d:2c:b9:ee:ec:10:c0:33:79:1f:1b:20:
         c3:5c:ed:d6:8f:98:ee:84:f3:1d:10:c7:11:fa:65:16:76:e1:
         3d:ce:5b:50:81:6e:3a:28:76:47:73:76:2d:cb:ce:ac:d3:08:
         b4:b0:20:96:a0:8f:9d:99:f9:f8:05:3d:c3:6b:54:d0:d4:a1:
         2c:fe:c0:8c:12:56:e1:ce:92:39:fd:f0:3f:67:5c:8a:1c:3a:
         8d:38:8e:45:f4:27:e0:46:3c:81:0a:96:d1:6e:63:f3:f5:e8:
         ed:28:1a:e4:d4:53:df:9e:8d:3a:5c:4c:f9:6e:58:64:de:0f:
         d6:0b:d9:0a:22:c8:85:9c:26:ee:b6:e7:92:64:8d:c4:cb:a0:
         0f:ac:0c:ac:b7:64:39:d7:42:f2:5a:7e:5a:53:79:4c:75:96:
         5e:5a:02:5d:27:89:43:ba:a4:1e:e3:2c:05:d9:08:33:f6:47:
         64:54:fa:d9:31:ab:86:a0:d7:dc:9c:c5:d3:13:70:5e:94:59:
         dd:1d:c1:15:17:3b:1c:1a:c0:3f:6e:24:f9:e9:89:9d:28:a8:
         b2:9d:d5:1e:d1:24:d1:37:bc:9d:b7:f1:a5:2a:b9:c6:f8:cc:
         cd:64:2b:a9:91:ba:ee:cb:d2:ce:3e:f7:72:5a:81:0b:dd:22:
         df:b8:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:17:57 2024 by rpki-client on console-fra.rpki-client.org