Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File:                     MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier:          TifdVavwD47YqRxypaYmjqaOncjafJpdQSQUlOo60i8=
Subject key identifier:   91:EF:14:5D:30:05:2E:E8:E6:6F:91:21:44:ED:45:56:6C:ED:84:AC
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer:       /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial:       01935878B3F432A7328B1D7935372493003A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:02:05 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:05 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:05 +0000
Files and hashes:         1: 6DkC9YmGDmafZ4fvAb16v8ne7JU.roa (hash: svG2i3lhQgqr0Sd4YbvYbr2O+dztmCLrsbFKnDQQN/0=)
                          2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: Z2ZG79CnCe9TncY+CfPhx19+juhYHwSdWvJMdKsqJPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:b3:f4:32:a7:32:8b:1d:79:35:37:24:93:00:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
        Validity
            Not Before: Nov 23 10:02:05 2024 GMT
            Not After : Nov 24 10:02:05 2024 GMT
        Subject: CN=91ef145d30052ee8e66f912144ed45566ced84ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:0d:ff:d2:82:78:52:3a:cb:1a:a7:56:b1:
                    a0:bd:37:f4:f1:2b:09:18:0f:8d:2c:50:c6:92:02:
                    77:02:cb:64:ee:c8:f2:3b:3a:74:f5:7e:f2:37:63:
                    ac:7a:f5:d9:d3:f4:b3:27:8e:c4:ab:f9:53:98:c4:
                    ac:d1:11:b6:60:72:bf:da:f9:76:9b:b7:06:7b:60:
                    7e:50:8c:a2:fc:0b:84:6e:6a:43:f3:f8:2e:40:93:
                    8c:df:c3:9c:8d:f7:54:e9:9f:7d:67:f6:7d:90:65:
                    4b:ba:84:8e:ea:65:39:46:dd:8a:74:24:2e:2d:db:
                    5a:7a:c6:2b:38:da:4e:c1:a3:af:de:b6:1f:76:4c:
                    1a:a2:75:d3:3a:84:82:c9:f7:28:76:54:52:7c:17:
                    8b:d0:07:da:da:2d:2c:e2:9b:66:46:89:b5:d2:55:
                    15:b5:b8:2c:25:10:5e:34:69:11:1b:ca:50:54:c7:
                    ca:bb:56:47:b2:ed:42:c9:56:6d:d0:97:6a:5f:7c:
                    77:19:3b:76:3c:94:4a:6b:0d:df:50:01:5f:38:2b:
                    5d:64:91:16:d4:48:f1:f5:07:a1:91:52:7b:19:a2:
                    16:bc:9d:9a:87:0a:90:a8:6b:2c:20:75:e0:0b:cf:
                    20:fb:a3:ee:df:47:c5:ab:e4:9e:bf:cf:38:08:eb:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:14:5D:30:05:2E:E8:E6:6F:91:21:44:ED:45:56:6C:ED:84:AC
            X509v3 Authority Key Identifier:
                keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:ea:97:22:81:6c:d5:fa:5b:97:fb:ff:18:8a:a0:f5:48:
         56:5b:c2:b4:dd:7c:c0:15:df:be:5f:b3:7c:d1:ec:5b:86:35:
         af:65:56:a6:2e:e0:1f:03:54:36:a0:86:d0:36:13:0f:0b:2b:
         22:e2:23:f3:d1:dd:db:67:93:82:7b:a9:6e:c7:51:7e:24:49:
         3d:be:c1:f7:62:ce:2f:ed:ca:73:e5:da:ec:81:1e:a6:42:59:
         db:01:ee:c6:77:96:fe:8a:7b:49:23:b7:9b:42:47:9a:52:f4:
         3d:2a:b5:f9:8d:d1:85:2e:ae:a7:7e:50:41:b6:10:f5:1e:5b:
         8b:5a:d6:25:60:0e:85:59:a9:24:4e:03:48:06:b0:75:c2:f7:
         b8:fd:ae:e3:d9:6f:2c:2f:5f:16:ad:84:fe:e8:7f:5a:18:c7:
         54:1a:9c:95:cc:e5:0c:d7:b6:b2:86:16:76:5a:db:1f:f3:4e:
         f8:14:51:db:bf:25:ee:e3:06:4f:56:e2:e7:43:29:10:8c:cd:
         82:a2:dc:f6:75:20:61:12:ce:47:0a:71:eb:7f:ed:29:11:73:
         18:d2:ce:b9:b0:ce:c0:69:f3:7e:03:aa:25:65:90:62:6c:32:
         08:bb:be:23:79:f2:8c:ff:7c:8e:2d:19:72:37:1c:47:16:e8:
         f6:33:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:49 2024 by rpki-client on console-fra.rpki-client.org