Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          mjACFiGQvj5cqANVH3Ngf+bDw7ip66No2Ubuve6PMgo=
Subject key identifier:   EE:DF:11:9C:D0:91:41:1D:A7:DC:9E:05:57:B1:C6:57:49:52:8B:60
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       0193523E2C2C749244F90AC36C4EE77D6616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          1229
Signing time:             Fri 22 Nov 2024 05:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:26 +0000
Files and hashes:         1: 2DaEUasrt_1HvoAIAxj9uuZX_uQ.roa (hash: Yx/tZHybtHtThDTqX9GvuCH9rQf1ttFj9bRUzqW3xhg=)
                          2: 5Ce1LLmrppScdBgUzXOYPfMJVoI.roa (hash: 0ICYer0le2kY8XUPXoznDwLQzpgIThBqsxz/9edLPyk=)
                          3: Pr5icgp5i9wgKJ820epmj3xE3T4.roa (hash: /ZeiV3/i3wuSWX6eWaTx8vsS1pf5LBeexOpmnSn6WCM=)
                          4: _9wL0fuljVPtrADYR_sMmNzojrM.roa (hash: 387UkCF/ry9sdDxx906h4I2x6H15jWAEKkBa2NTkbh8=)
                          5: g9CPxbprGsI6kpi0B1EkUhba9Xo.roa (hash: RsS2uE+Pn46uhT7E+ZN0Ig21/HZvM8nCfD2n8Kncm2k=)
                          6: gVQc1Aj9LbsbNV6kZmGRvWvuuz0.roa (hash: eKb98j9pgCwGo0Tp6dReZcwQ4agigc1VvCGjdqpWy6I=)
                          7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: SjV+qg9UCzjIQbs2XUDeuDDu2F7aEUEFwl8Ynu0OyKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:2c:2c:74:92:44:f9:0a:c3:6c:4e:e7:7d:66:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Nov 22 05:00:26 2024 GMT
            Not After : Nov 23 05:00:26 2024 GMT
        Subject: CN=eedf119cd091411da7dc9e0557b1c65749528b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:f4:62:87:3e:a2:7c:a0:95:40:df:b0:62:
                    f0:98:03:2c:ce:86:ae:5e:54:6f:b6:cc:dc:35:97:
                    74:ce:33:7f:85:12:c1:b9:48:10:27:1a:9a:7e:1a:
                    df:62:e3:08:41:7b:c7:b3:f2:fd:5c:34:b2:a5:f8:
                    cc:a5:b3:98:00:94:ec:ac:b0:79:6c:dc:19:e1:20:
                    74:5c:09:90:80:b9:38:ec:97:5d:a1:08:e4:94:b4:
                    4b:e4:9e:17:b1:f5:ec:a8:c5:35:f3:80:cf:c8:e8:
                    ee:fb:c6:a3:be:68:99:94:18:55:27:31:96:6f:37:
                    21:26:05:d8:0e:c6:55:56:03:f8:9b:bf:44:ac:14:
                    d1:7f:6b:c4:aa:41:96:cd:1b:36:0b:65:86:8e:e5:
                    e7:f9:4e:b0:a9:95:3f:cb:29:af:f0:aa:c2:40:b9:
                    2e:1b:df:9e:45:87:6b:7a:4f:4f:65:1c:5f:10:44:
                    c7:1d:44:4a:45:ba:ad:40:3f:e0:b6:ff:42:04:2c:
                    a2:e9:3b:30:22:3e:f8:fd:31:36:a3:a7:ae:5e:9f:
                    64:11:b6:da:fc:7d:10:07:73:6e:b4:3a:1f:f3:7b:
                    6e:66:47:c6:71:00:36:d0:f2:c9:cc:94:88:45:a0:
                    12:ca:72:ac:ed:6b:57:34:33:4b:56:17:06:35:13:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DF:11:9C:D0:91:41:1D:A7:DC:9E:05:57:B1:C6:57:49:52:8B:60
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:4f:d3:f0:82:6d:a8:69:27:ae:60:fd:26:67:93:bb:f7:0e:
         77:40:d6:5b:98:07:0f:f1:a5:c1:0f:4b:46:2c:cb:f1:e7:2f:
         f2:d0:44:d2:34:9b:fd:79:f6:5d:9c:9d:c6:6e:88:2c:ed:ad:
         1d:7c:2f:11:31:22:04:54:f8:e6:f6:56:75:17:32:b0:82:53:
         9b:8a:4f:0e:f1:6b:52:17:99:9f:50:b7:e2:bc:d7:08:29:06:
         9a:c4:9c:4b:ec:0d:91:ce:3f:ad:87:9c:1c:77:ae:32:67:ba:
         3c:f6:61:08:37:59:c4:d3:88:d9:ea:a2:46:3f:4f:d0:f1:01:
         23:71:52:95:aa:c1:44:80:b8:d2:a8:8f:a8:e4:66:4e:cc:2a:
         82:6c:f3:cc:b2:06:df:a9:2c:6d:9d:6a:19:0d:ef:20:43:ff:
         f9:49:e1:15:08:23:7b:db:81:8e:b9:d5:5d:86:00:2d:71:b1:
         57:4d:40:80:66:b3:de:d4:d6:42:96:2e:3b:b2:05:7d:c3:37:
         2d:94:02:ff:fa:a5:d8:9e:87:5c:92:8c:00:2c:5d:7f:ed:f0:
         a0:32:90:73:73:a3:3a:b8:a1:ed:0f:42:b0:c2:03:19:c7:16:
         8f:b0:e0:e8:87:ff:b8:c1:c7:01:42:f3:73:49:f6:13:38:8e:
         d9:b6:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:59:52 2024 by rpki-client on console-ams.rpki-client.org