Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          BcPoJbSjFQlLU3oWDpZqM+Gj+jTAiRpcXHLPnp5uGT0=
Subject key identifier:   30:C8:95:BD:73:77:1A:3F:24:60:E9:F5:B5:D3:B7:4B:22:5A:E0:A2
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       01935688A704F70112C74FA97A2BA6A92C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:16 +0000
Files and hashes:         1: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: hQrzLQR+ornEjwOI+oGIelSLux8UU+w5okDJuk6dev8=)
                          2: fXtxj-xTmTzEcNiHXYZinkl6Kvk.roa (hash: 6le+Q6CPEfBwE3CNaVvUQkq9aYEZEhR1xFlDoBT/nJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:a7:04:f7:01:12:c7:4f:a9:7a:2b:a6:a9:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Nov 23 01:00:16 2024 GMT
            Not After : Nov 24 01:00:16 2024 GMT
        Subject: CN=30c895bd73771a3f2460e9f5b5d3b74b225ae0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:e6:6c:c1:18:16:05:6d:43:b8:44:ea:da:
                    f9:ee:27:ad:b4:32:ff:e4:5c:88:aa:0f:d7:b7:ec:
                    36:06:3f:ac:f6:52:4f:87:15:5a:23:88:09:de:b5:
                    78:b2:83:ae:5f:f6:62:6b:a5:87:5a:ec:e0:d0:70:
                    7e:31:bc:3a:d8:09:02:07:1f:25:49:1d:70:a7:6b:
                    41:8f:c4:97:d1:bf:7e:2d:54:85:23:ba:3a:e3:7f:
                    e0:77:26:75:92:19:a1:ab:14:21:36:2f:ec:a8:f1:
                    52:13:32:7f:bc:9b:01:4b:ca:88:1e:db:b9:17:c8:
                    58:0a:e4:b8:e7:ad:f1:8e:a5:50:98:e9:2e:79:90:
                    7b:88:ad:15:06:69:86:7d:83:92:a1:99:82:65:f6:
                    1b:56:60:57:c7:d0:a4:5f:b4:25:37:d8:e1:2b:08:
                    99:79:2f:06:55:c2:3a:f3:74:17:c7:15:bd:bf:1d:
                    7f:3a:da:0e:ad:c4:04:91:17:7d:2c:c9:81:71:17:
                    4f:95:52:03:cd:63:a1:99:80:cb:a3:a9:9b:53:af:
                    6c:a2:fe:43:0a:ae:00:28:52:5c:7a:dc:91:84:bd:
                    84:bf:2b:0d:54:49:18:e3:94:3e:70:59:89:9a:9b:
                    88:36:ee:35:fd:7a:6e:5d:6b:38:2e:71:86:f5:cf:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:95:BD:73:77:1A:3F:24:60:E9:F5:B5:D3:B7:4B:22:5A:E0:A2
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:57:59:3d:f8:3c:5f:ce:9c:a2:fb:a7:b4:09:88:29:f9:a5:
         84:3a:9f:8a:ee:4d:31:26:85:89:a1:0f:53:44:85:0a:d4:42:
         78:f9:38:08:ac:17:e0:12:ef:11:02:22:89:9a:5d:f1:4f:b0:
         1a:91:75:fc:17:6d:29:a8:06:b3:c6:85:b1:dd:78:64:bf:0d:
         e0:f2:6b:c6:71:3f:56:4b:34:67:c5:b0:f2:ee:60:71:d1:1f:
         f7:22:e1:e4:a2:63:94:87:d9:7b:a1:19:57:02:9e:17:c2:38:
         ad:25:63:6e:3c:db:be:8e:eb:a2:c6:f4:29:b8:ef:6b:05:72:
         b6:61:f5:0a:2f:20:95:34:54:f7:ff:1e:74:bc:2c:4f:a1:cd:
         cc:97:47:97:1b:37:f4:7f:ed:0f:5b:e6:53:63:9d:2e:9b:b1:
         09:e3:ee:95:23:b5:b0:a8:68:e9:98:9d:69:18:9d:f6:1a:89:
         fb:cc:52:2e:36:4b:87:85:ba:88:ae:b9:be:0c:d3:15:6a:99:
         c3:69:c8:33:43:a3:5c:17:d5:60:91:64:cf:88:65:87:d9:90:
         70:8b:cf:96:a8:0e:55:9a:00:c4:97:be:0a:a1:9c:4e:c8:ab:
         db:2a:4d:31:31:91:35:81:0f:dd:03:d6:1d:a1:8f:a3:79:44:
         bf:70:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:45 2024 by rpki-client on console-fra.rpki-client.org