Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File:                     RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier:          os1WkCqcTO5sLHdk+vflyvcwNrk3VZeAVF72YAyBsOg=
Subject key identifier:   4B:DE:BD:0C:94:31:04:C2:FB:45:E2:57:41:AE:96:6E:3B:19:AA:BC
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer:       /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial:       01935878B71A52A422418C37B088DDBFFA49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:02:06 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:06 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:06 +0000
Files and hashes:         1: MPXYvmydJlf1lq7UH6iRSWHFMC4.roa (hash: cdIN6QEEB5LRipSyO1LsFkYgw0ee3aAN6Rl6C8UNieY=)
                          2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: b4rxVKiFv9GuWmRxcLTo3gV3VJ62jw7pw4bDShMdKjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:b7:1a:52:a4:22:41:8c:37:b0:88:dd:bf:fa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
        Validity
            Not Before: Nov 23 10:02:06 2024 GMT
            Not After : Nov 24 10:02:06 2024 GMT
        Subject: CN=4bdebd0c943104c2fb45e25741ae966e3b19aabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:16:a8:9b:51:60:c8:dd:a3:4f:f3:8f:76:
                    40:ff:35:9b:f7:61:39:bf:33:8d:9f:02:1c:c1:1f:
                    42:bc:b9:62:d2:8d:7d:74:f0:f1:45:4f:cf:fc:65:
                    2d:cf:77:ab:69:ba:2f:05:98:8a:ff:d8:c7:56:5d:
                    54:f1:23:9b:7b:db:85:40:1f:fb:aa:b3:15:74:b2:
                    04:96:78:d3:6f:b3:19:06:5c:88:4f:bc:2e:48:70:
                    6f:34:2c:cd:b3:a2:95:21:8e:25:62:2c:aa:71:50:
                    5d:10:b6:89:df:fc:7f:73:cb:66:a6:f2:27:2b:5f:
                    6c:9d:ac:14:71:ea:77:81:de:6e:ed:8b:a3:e7:5b:
                    32:ed:20:6b:2e:6f:89:3b:3b:39:5b:40:82:59:dd:
                    85:a9:4f:6c:81:70:c1:72:18:4f:8e:c6:15:07:82:
                    1e:30:16:ae:73:89:67:8c:4a:44:c4:67:33:b1:c7:
                    b0:47:9e:ac:b4:b5:51:82:2c:a6:0c:33:7b:2c:3e:
                    08:97:ff:9e:69:9c:a2:22:0f:55:78:31:a0:b7:52:
                    65:aa:7d:4a:52:12:44:a9:18:2e:52:cc:8e:5c:08:
                    ef:43:6a:58:ee:4e:00:59:18:4e:30:83:07:74:d4:
                    d9:91:dc:fd:6c:a3:e0:b8:54:9a:cb:7b:71:bd:21:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DE:BD:0C:94:31:04:C2:FB:45:E2:57:41:AE:96:6E:3B:19:AA:BC
            X509v3 Authority Key Identifier:
                keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7c:8e:26:ce:91:65:a8:b4:f6:e7:d3:ae:3d:7c:75:28:6b:
         26:69:c6:9f:1d:58:a5:39:3b:15:a2:b7:22:f6:ba:d0:74:5f:
         11:87:de:0b:aa:0d:6e:af:7f:fb:79:e8:d8:34:ec:aa:d8:44:
         59:ea:46:10:5c:89:50:21:fa:b1:fe:c8:55:7d:ac:80:a0:4b:
         83:3d:6e:31:5f:8d:e2:da:6d:25:b2:3e:30:09:31:50:8d:65:
         fd:e0:05:a2:6e:ad:87:3a:1f:9e:c3:78:7f:63:f6:e7:b4:0a:
         73:65:45:e8:7a:a4:50:35:7c:e7:2d:08:43:7b:3b:a1:6b:20:
         85:ed:a6:2a:a8:e8:70:4f:9b:ef:ae:b5:f0:a3:4a:eb:50:b4:
         03:de:1e:ce:55:03:c7:f8:c6:85:4f:cb:cd:c5:ae:aa:44:55:
         cf:4c:bd:bd:ab:e7:99:ed:c2:e5:3d:76:6c:20:bd:2f:89:e7:
         b9:e9:6d:f8:9e:0e:dc:83:c8:b5:30:dc:03:9a:5c:3e:fe:58:
         7f:55:9e:53:8a:86:9a:1a:fd:af:3f:34:d5:49:c1:79:8c:27:
         77:73:f6:40:4b:e2:1d:c4:20:2b:7e:d2:51:8d:15:35:ff:71:
         9a:ed:65:54:6c:e3:ce:9f:d3:97:d4:aa:33:24:4b:7e:d7:87:
         2a:f0:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:18 2024 by rpki-client on console-ams.rpki-client.org