Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File:                     gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier:          VJRogKZDcMx5p7EcFn02rx74BXw08Y3o4u9QRybrtFs=
Subject key identifier:   13:95:EB:93:ED:A2:92:76:47:7E:4E:A9:26:E7:EC:1A:9A:53:92:7E
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer:       /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial:       01935878BC1C721594DFBCF390EC875ADA32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number:          072E
Signing time:             Sat 23 Nov 2024 10:02:07 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:07 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:07 +0000
Files and hashes:         1: Z-jeEOVQfRNOTiPZ7sRto3L5xP4.roa (hash: pG/PoK7JAUeofs/wifs8itpvWIy2wu5X0VQVXTtu/1M=)
                          2: aRHWBpLTknT-Uw3yjoXIUqqXk1g.roa (hash: 4k9FAHalXSJzISYqBBDcM0r9fvxbYEHk8yd+BExW/y4=)
                          3: c1r0yUGUBAjz0gZ6aam7iWs7Pqk.roa (hash: Pkk8wQyw+FfNufIehtC1Pf2EfwrRTRXgi4qExEbpxZw=)
                          4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: +oY6VhAA7G5/h4s++ek13o92hSAyv1gSF5Dn9DphEwY=)
                          5: h2enuMtI_dmNgc2x2Z3TqgBHb1I.roa (hash: QWIzNuk+JSvwl/zfyNmVOsrmkhVMPzXTsZVwUFQMwuI=)
                          6: jQxU70tNCkESDvzx9MfjkCcFITY.roa (hash: suk2U02U9qaMFYn71p6wtGvEDO0JALocFyeXiWekq/Y=)
                          7: vyo0pscUVnahoJ4kDP0Nb2UHb5o.roa (hash: 2utD2lnHIDyMuPJQEh84UsqMmBs0pc0gAt0OYYy1EZ0=)
                          8: xrmI2lOqw4vwh9asj_fS8nm8zOw.roa (hash: dhsYNtAvgceEPO6AQvmBZwT1HzUmAMfIkuvuxbqcbvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:bc:1c:72:15:94:df:bc:f3:90:ec:87:5a:da:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
        Validity
            Not Before: Nov 23 10:02:07 2024 GMT
            Not After : Nov 24 10:02:07 2024 GMT
        Subject: CN=1395eb93eda29276477e4ea926e7ec1a9a53927e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:05:41:d6:d3:b2:f9:25:fa:35:d6:40:48:
                    6d:1c:4a:60:33:5f:a2:7a:c7:02:f2:5d:41:40:44:
                    85:9c:c4:bc:bf:bf:a1:fd:49:02:66:4e:83:14:47:
                    97:0c:7a:98:ca:02:7f:53:1f:e9:69:5f:a0:dd:55:
                    a8:76:93:2f:35:67:0f:fc:9c:6c:32:61:bc:73:70:
                    d9:5b:56:b8:44:b2:d1:91:ef:c7:35:8d:f6:52:c8:
                    82:54:d5:83:7a:7b:75:16:b5:13:2a:44:e4:4f:19:
                    df:81:29:fd:2d:a7:4b:34:92:a3:4c:9c:99:5f:51:
                    91:03:fe:01:6d:3b:95:24:5f:87:c6:ac:55:0e:a6:
                    78:f5:ac:76:ea:fb:f8:ef:76:2b:96:34:0b:4b:b0:
                    f7:7c:3a:f5:b0:3d:ee:2b:cb:f1:cd:ec:b6:0f:d7:
                    44:11:48:5c:11:b6:79:d8:3f:ee:0e:d4:59:27:a1:
                    bf:fb:3a:21:f2:1c:54:30:18:c3:c8:59:05:da:86:
                    50:ea:78:24:db:b5:93:cf:d4:b8:2e:35:16:5f:6f:
                    c9:7c:f4:96:72:20:cc:00:ef:db:38:dd:03:12:62:
                    13:af:63:02:fd:45:19:13:11:b7:8c:76:d2:5f:e1:
                    0f:99:b2:a8:84:22:9f:83:72:d3:89:49:d6:4c:82:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:EB:93:ED:A2:92:76:47:7E:4E:A9:26:E7:EC:1A:9A:53:92:7E
            X509v3 Authority Key Identifier:
                keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:88:06:c0:ab:41:04:17:eb:be:ee:89:d8:ed:81:27:1a:71:
         d0:04:e7:e8:f6:38:4c:8a:e2:e4:75:7c:dc:92:04:63:04:d7:
         95:3f:30:e1:96:4a:47:db:7e:34:b9:d8:d4:4a:60:5d:19:20:
         01:5d:14:11:ea:e2:a6:17:4e:11:11:f6:2d:52:74:54:35:9e:
         c4:a6:a9:41:37:da:db:be:2b:8d:4d:59:64:59:27:76:77:7c:
         91:34:3c:e7:73:1c:1e:4d:a6:33:d5:7a:de:48:d6:d4:18:22:
         53:1a:a7:02:ee:9b:f7:89:60:24:08:62:db:9c:e3:55:33:5d:
         65:37:46:18:5d:54:e9:18:49:75:b3:72:91:2b:c4:79:0a:22:
         0b:f9:01:4f:c0:80:71:99:88:b0:4a:dd:ac:dc:04:d9:ba:0f:
         cf:78:e0:ce:16:49:33:17:44:aa:c3:06:a9:e3:da:37:b4:81:
         6b:6e:cf:f6:ec:2e:ef:25:50:e4:6b:e1:3c:f7:b3:c0:22:87:
         da:7a:54:70:e4:fd:75:92:f4:c3:a7:3d:ba:2a:33:fb:47:f0:
         af:3e:dc:70:27:08:8d:be:3a:e9:a7:ef:0f:58:e0:46:57:23:
         53:aa:89:38:89:9f:cc:30:d0:d4:0e:30:ac:d4:b4:2e:a2:52:
         28:77:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:24 2024 by rpki-client on console-ams.rpki-client.org