Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          LBwXa9WFvB2Hqx0l+tbVt0gyV+CGnwZQJ0WOMQEvCEo=
Subject key identifier:   77:F0:00:74:F7:C3:AB:73:3E:B3:40:CC:4A:EA:04:ED:73:93:AD:40
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019352AE0886402F9362F5A33E90491C2347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          01A3
Signing time:             Fri 22 Nov 2024 07:02:37 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:37 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:37 +0000
Files and hashes:         1: huKOtgGt02ZY1frlYU6RtdUCNJ4.roa (hash: wqdiNUkTUCUL0bvwliDo1jsS1T49LH2rytzDcKyavEA=)
                          2: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: UiiqMoeyz6Val6x3HImfxH4cpwNndC7jllNIoB+KPdE=)
                          3: nf_gt-uFFwZdCQPvoCzArcOdCrk.roa (hash: DVxDdsHkr2411WAslPnPQ8q7DYGTBx1Rwm95ZhOJQUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:08:86:40:2f:93:62:f5:a3:3e:90:49:1c:23:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Nov 22 07:02:37 2024 GMT
            Not After : Nov 23 07:02:37 2024 GMT
        Subject: CN=77f00074f7c3ab733eb340cc4aea04ed7393ad40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a7:04:ef:7f:a2:96:86:36:42:ac:6e:55:60:
                    da:c7:18:fa:61:a9:30:64:37:c5:81:6d:6d:b7:40:
                    11:f1:39:ed:80:6c:24:d6:82:4e:c0:bc:e5:79:24:
                    c6:82:7c:ee:1b:2d:aa:f4:9b:94:70:92:db:81:70:
                    25:3b:5d:05:b0:c2:a0:96:56:56:05:3c:41:20:a9:
                    63:eb:3b:cb:5c:91:a3:a6:c4:94:a7:05:b6:7b:55:
                    5f:7f:66:83:23:00:b9:11:ac:95:95:06:a3:bb:99:
                    0d:4c:0e:d2:bf:40:5f:ef:fb:ef:09:ee:41:55:36:
                    9d:c0:8b:0d:7c:cf:92:0c:e8:95:9b:4a:83:81:1d:
                    0c:ec:70:5f:52:be:3a:33:d0:e7:de:98:0e:79:90:
                    82:cf:5c:62:c0:ba:c7:d6:4a:21:d0:b5:e4:52:51:
                    18:9f:2d:59:0a:7b:c3:6f:09:ec:2d:0d:82:45:fc:
                    c0:a4:ec:94:37:2e:dc:48:6f:b5:3d:62:62:87:2d:
                    cc:fa:23:2b:0d:6f:28:d9:6a:83:67:8c:cc:bd:f1:
                    0f:b9:f9:d9:34:f1:6e:ba:cc:a2:34:33:28:8f:c7:
                    1a:0d:d7:d2:f5:09:b4:f7:d1:66:d8:43:5a:87:ea:
                    25:d7:74:50:62:d9:71:e1:f9:62:4d:75:f9:21:4b:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F0:00:74:F7:C3:AB:73:3E:B3:40:CC:4A:EA:04:ED:73:93:AD:40
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:29:67:fb:7d:9f:5b:fd:9c:6a:2d:64:3d:4f:16:e4:97:f3:
         bf:8b:7f:0c:8c:ca:d4:fc:99:0c:cb:53:65:5b:55:6d:57:10:
         a7:36:2b:8d:52:76:33:85:15:85:ed:2e:a3:75:ac:98:5e:25:
         a7:3f:66:d4:a3:ac:05:c5:cd:2f:c2:c9:91:33:8c:05:f5:73:
         78:81:83:15:89:8d:c2:96:ca:6e:e5:ca:7d:d9:21:f8:64:a0:
         8d:4a:b9:ba:e0:79:fc:30:5a:6a:b1:f2:6e:aa:1a:34:66:6e:
         44:0b:e9:32:de:c9:ce:33:8b:52:a2:39:4b:f3:20:dd:a4:23:
         86:78:ec:46:b9:85:9b:69:d6:af:0c:2f:66:74:9f:b4:5a:38:
         4d:3e:db:0d:d1:35:23:23:0b:9a:15:ca:f8:fe:bc:1f:04:c7:
         7e:95:8f:ad:21:86:dd:62:d5:78:b6:48:a5:5f:46:2d:9a:e8:
         2d:59:01:39:2d:23:14:ac:3c:bf:f2:91:83:8e:ab:de:4a:62:
         3e:0b:e0:16:0c:0b:14:7c:cb:f3:8d:ee:b9:b2:e2:b9:b8:7d:
         9d:16:61:30:8d:8d:9c:64:0d:4a:62:23:d9:86:cb:61:e0:05:
         98:7a:68:a4:a9:d2:24:75:91:f6:19:03:7d:d6:32:1d:26:fe:
         85:bc:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:59:39 2024 by rpki-client on console-ams.rpki-client.org