Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File:                     i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier:          IMX/bQKOkK8+OkmXVOPqZBsSsVnXOjRhrJlUY44n7M4=
Subject key identifier:   5E:5E:6F:19:BF:5E:5F:BD:6F:09:7F:A8:97:5B:B3:9B:80:66:A7:6E
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer:       /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial:       0193553F9886A3808F5F9D6D6C5195512250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 19:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:51 +0000
Files and hashes:         1: 0CO3VT1FRLIAjDnYL1mplbht5Fg.roa (hash: m3Oun7CNqF8GLdjaZnY76AvLjd8H6VmpGylrree1smA=)
                          2: Y7lx9KIjeLb5XejqBvT3eGkXnL4.roa (hash: a2Z/6v+Q6wMaBEuZZSvNrxps8jqYso0g2NKnQSOyZ3U=)
                          3: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: jBatj51gfNFnvpvFb6KjPuASMW0NBE9fpF4oTKs+Ens=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:98:86:a3:80:8f:5f:9d:6d:6c:51:95:51:22:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
        Validity
            Not Before: Nov 22 19:00:51 2024 GMT
            Not After : Nov 23 19:00:51 2024 GMT
        Subject: CN=5e5e6f19bf5e5fbd6f097fa8975bb39b8066a76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:b2:fb:77:d1:ff:41:68:d8:4b:23:a7:2d:
                    ab:00:d2:39:14:91:e1:cb:0a:9a:15:70:f2:7d:93:
                    b0:53:2f:0c:df:00:50:36:ec:0e:ec:6a:f1:f3:31:
                    ca:eb:3e:a5:7a:5d:90:ac:d5:b0:5b:6f:2d:25:7d:
                    e8:56:58:f0:e1:3d:a2:43:63:28:08:99:50:1e:07:
                    9b:11:c3:cb:59:3c:b3:18:e1:14:68:10:d4:bb:57:
                    cd:85:12:50:35:27:3c:d2:cb:67:82:82:46:64:f6:
                    df:06:4a:8a:8b:f5:2c:c6:c1:38:6c:9b:5c:90:90:
                    6d:9e:8d:ab:c0:35:6c:85:40:18:20:ec:9e:92:be:
                    88:00:43:7e:67:28:56:ec:05:77:9f:e3:6d:c6:ac:
                    33:08:ac:2e:24:fc:6d:cf:94:4f:42:ab:72:68:ac:
                    e4:49:6e:2d:4d:f7:3c:44:4e:b6:a4:91:64:38:76:
                    b4:43:a6:3f:00:d8:d4:b8:9f:a7:66:79:76:48:05:
                    99:22:ec:69:f3:47:11:7c:29:a2:df:04:f6:7c:a9:
                    68:6b:d3:0d:85:ba:49:c8:99:b7:b2:5f:79:3e:f8:
                    af:53:6e:1d:ed:57:6e:6b:39:df:7d:78:df:12:5d:
                    17:a9:88:1d:4f:ad:2a:49:82:b1:13:18:25:bc:24:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5E:6F:19:BF:5E:5F:BD:6F:09:7F:A8:97:5B:B3:9B:80:66:A7:6E
            X509v3 Authority Key Identifier:
                keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:f9:6f:23:33:f8:96:f9:cd:1d:35:f6:66:8e:29:1c:e9:
         ba:92:80:88:a2:54:7a:48:5c:23:b6:01:f7:cd:65:77:b7:88:
         f2:35:e3:f2:85:46:ef:1f:03:69:5c:cf:c2:4c:96:0b:f6:6e:
         44:b3:29:45:8e:c2:c5:da:c4:a9:45:00:7f:db:f9:77:dd:dd:
         72:98:0d:69:a3:8a:ab:fc:63:77:58:85:35:51:7d:25:29:d0:
         ed:a0:e7:e8:bf:2c:b7:5b:c1:cf:88:78:07:7b:a3:b8:74:26:
         86:02:e9:fd:00:d0:5c:a0:74:8c:d1:4d:54:b9:c4:7a:c8:d3:
         83:1e:bd:0c:65:0a:95:9c:6b:bb:07:46:3b:6e:0e:4a:a8:91:
         70:31:32:58:ca:84:59:98:fe:67:7a:f5:08:3c:60:bf:58:41:
         2e:dc:21:d0:7f:25:c8:9e:ac:21:d2:80:0a:90:b0:e7:08:37:
         ad:8f:57:02:28:dd:b6:c5:56:02:ec:99:20:93:a1:2a:fa:f6:
         dd:5f:b9:51:fa:e4:10:b3:46:e5:69:bd:ec:63:c7:4c:72:59:
         e4:bb:46:28:9e:15:d4:17:77:a7:d4:f7:c5:9e:33:d0:99:af:
         03:07:8e:ff:94:fd:09:72:2b:9b:d1:43:08:c5:b0:43:fa:24:
         d4:f2:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:58 2024 by rpki-client on console-ams.rpki-client.org