Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          rfYRaVSft0afocCudj68m2lLs+zq1w1WTVBqGMU4/9U=
Subject key identifier:   3E:0D:D7:77:B2:C9:F0:DE:EB:76:55:87:DA:00:C1:53:8A:C4:54:BC
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       019354D14AD929BFC6A62B8E56E2B73D0A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 17:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:22 +0000
Files and hashes:         1: 1a40stfoGT00xXLGUr3OAb0iv0Q.roa (hash: uhMCgpvG9g61aCFZBPVKyY/mz0UJlRnoNNyf661PYE4=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: Ly2te2AeeWUebxjOGdpZ4Js5WhCg9hxhrs/KOPZBjto=)
                          3: eGmAlQqD_aI1o5A0zQDmjexDRcA.roa (hash: MK7P9j/r0rUrkkesJqq+bhTLEUvAPlvJ1k16Bsv2/WY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:4a:d9:29:bf:c6:a6:2b:8e:56:e2:b7:3d:0a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Nov 22 17:00:22 2024 GMT
            Not After : Nov 23 17:00:22 2024 GMT
        Subject: CN=3e0dd777b2c9f0deeb765587da00c1538ac454bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:af:c5:3a:5a:31:59:00:a2:94:90:1d:e6:
                    69:b8:ac:57:d2:79:fa:7c:c5:ce:65:d7:8d:7c:47:
                    ba:3c:a4:e4:8a:62:bd:d9:fe:51:30:c1:a8:df:e3:
                    c4:c1:0f:52:b0:2b:12:b4:50:b7:01:b7:7d:29:f4:
                    49:52:8f:49:4c:06:7a:e3:20:e8:98:11:0f:22:fd:
                    c2:f0:5c:3b:3e:5e:c3:c9:b1:70:d5:36:18:4c:64:
                    d8:a9:4a:d2:64:1d:2b:06:b2:07:df:c0:19:39:fd:
                    79:ea:d2:7d:3f:cc:6a:c7:65:23:fb:0b:89:75:c3:
                    89:66:43:fd:24:a3:46:a8:de:6a:35:f0:88:5e:19:
                    ef:04:b7:0c:38:d8:30:6f:94:e1:ff:fe:bb:da:29:
                    71:f9:85:18:dc:9a:26:56:3d:03:3d:4e:a6:10:b4:
                    c0:74:d3:8f:09:69:23:56:f0:7f:d5:b6:26:46:b0:
                    25:4d:a1:29:db:89:ac:23:6a:e2:a0:8f:57:3c:ec:
                    d9:27:38:39:b4:90:8d:48:eb:5c:a6:51:8e:d0:e5:
                    66:65:4e:8f:ac:04:7e:bb:13:21:37:b5:e1:9b:0d:
                    53:7f:82:fe:45:e0:86:e7:64:56:33:7a:90:f0:06:
                    48:3d:58:09:a8:2e:5d:0c:3c:8c:84:a6:85:a5:ed:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0D:D7:77:B2:C9:F0:DE:EB:76:55:87:DA:00:C1:53:8A:C4:54:BC
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ea:7f:3a:a3:ad:13:4a:e4:4d:92:e7:2e:dc:61:f0:38:5e:
         74:3a:4f:fc:7a:ef:19:4e:54:1a:80:33:08:25:0c:c9:1d:68:
         05:09:52:3f:05:72:ac:bc:1e:c6:4a:c2:32:3c:a9:b3:ef:1b:
         80:f7:33:68:08:9a:15:11:8a:b1:e6:8b:04:1e:c2:4c:0b:48:
         1e:84:19:a5:1b:28:7a:d8:2d:9a:c0:62:48:9e:81:ee:d2:c5:
         30:45:2b:84:13:75:28:b8:a3:2a:f1:79:08:5d:24:2d:c6:92:
         66:5c:0b:0f:02:dc:1a:67:c0:45:4b:fc:f6:46:6a:98:67:1d:
         7d:ef:55:5f:f8:95:47:3b:74:ae:2c:34:d2:e1:e5:2b:ea:10:
         1f:39:12:d6:69:5b:ae:8a:87:48:38:af:19:7f:72:3b:1a:fa:
         52:d2:82:34:fb:db:a8:fc:78:2d:96:36:12:74:50:29:aa:7e:
         64:ea:df:59:a2:fe:51:b0:f5:c4:ac:3b:1e:e2:e5:6f:07:41:
         83:18:b3:20:42:3e:9c:27:b9:26:f6:43:e3:2b:a5:4e:68:be:
         df:7c:ff:52:2f:0b:15:6e:f4:53:91:79:01:ae:55:55:07:72:
         be:68:62:20:70:eb:59:14:52:47:70:17:be:1a:09:13:fb:6e:
         f7:28:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:50 2024 by rpki-client on console-fra.rpki-client.org