Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File:                     zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier:          YoP/bpPClDrbJzIiFCpLlF25QLt3DTyaS0VsWuF+sss=
Subject key identifier:   7E:5A:BD:20:D1:08:2E:B0:7C:DF:DD:6F:9D:3F:90:B1:D3:AF:68:8E
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer:       /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial:       019368FD1BA94B94A021EA6C930E45E486BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 15:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:38 +0000
Files and hashes:         1: ZMAwMb7VDQsTeztaVHjSn3g81Sk.roa (hash: GrTyAz1DcUiUmutPuFy+vnSgtRYCK+PdUzfNRqCdQMg=)
                          2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: WCkMPCtqiRk3mecTUpriSGvWtwPr6ZaI8rVHf43rxTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fd:1b:a9:4b:94:a0:21:ea:6c:93:0e:45:e4:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
        Validity
            Not Before: Nov 26 15:00:38 2024 GMT
            Not After : Nov 27 15:00:38 2024 GMT
        Subject: CN=7e5abd20d1082eb07cdfdd6f9d3f90b1d3af688e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:af:b4:40:04:82:50:d5:5e:bf:c2:12:16:
                    15:f3:1f:63:87:f4:c4:ec:b3:b9:80:78:fd:66:47:
                    73:48:ca:f0:07:19:e0:cf:96:a9:b4:93:2e:47:09:
                    94:20:4b:18:95:2d:98:37:ec:10:da:c8:48:c5:1e:
                    16:ef:50:2c:8b:51:35:cc:8b:34:e7:08:78:cc:91:
                    05:c3:a9:8e:ea:e0:11:b7:e0:27:10:27:cf:42:ab:
                    a7:d7:aa:28:30:b3:67:b1:a2:55:86:23:2f:ac:6c:
                    4e:d9:37:a4:fc:5c:89:34:62:b0:41:06:66:8c:92:
                    44:8d:54:d1:36:76:d4:69:35:58:7a:6a:ca:19:02:
                    22:54:33:06:69:b4:b7:2b:98:44:d2:0b:ab:89:bb:
                    52:05:22:64:95:e2:bf:4e:fb:0d:39:af:8f:f4:a3:
                    d1:ff:a7:38:2e:a1:31:da:e6:d8:90:c6:23:82:8d:
                    ed:04:4b:b5:3b:96:f1:94:e6:a5:39:cd:fa:61:96:
                    2b:ee:c5:69:55:95:39:a3:cc:a0:a7:2d:58:12:78:
                    24:40:8b:0b:7d:30:0a:48:7f:fa:ae:33:6b:3d:4e:
                    62:bd:06:a4:a0:26:a9:9f:78:cf:85:00:35:45:1d:
                    64:7e:f8:40:65:58:ed:e1:36:47:12:da:ae:90:15:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5A:BD:20:D1:08:2E:B0:7C:DF:DD:6F:9D:3F:90:B1:D3:AF:68:8E
            X509v3 Authority Key Identifier:
                keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:01:cf:21:00:50:45:c4:d8:9c:37:84:4a:d8:f8:0e:03:e3:
         0f:16:fb:2d:b8:7b:3a:bd:28:35:a6:c7:48:a4:db:8e:c1:d5:
         cb:5d:5c:90:97:f3:26:1c:ae:ee:3a:ca:d5:66:e9:ed:4d:24:
         b0:a7:53:29:54:1c:dc:72:1d:ee:d6:79:1e:b9:e3:77:90:39:
         40:72:52:71:a8:6c:65:8c:c4:78:49:eb:10:ca:44:8d:ac:2f:
         89:c6:84:8f:aa:6d:cf:c2:c7:26:0f:58:6b:06:dc:6f:4c:b8:
         e8:8c:0d:e5:79:c3:f0:8b:f0:cd:9b:fa:6f:16:cc:60:12:20:
         ce:36:38:b2:d0:34:be:20:9d:1a:6c:09:ab:a5:db:10:bf:f2:
         94:c4:c3:76:14:3d:4d:de:9d:ac:32:01:5d:36:77:2a:58:61:
         40:6c:9f:b9:ef:52:9d:77:68:d1:38:56:a8:33:15:8a:34:c5:
         b7:21:5b:f7:c4:ae:89:39:aa:b6:a6:da:e0:57:d3:e9:ba:cb:
         60:2c:07:07:d5:ac:ca:cd:da:8f:d3:92:a1:a7:46:5f:0f:fb:
         42:7b:4a:65:72:9d:eb:a2:bf:5b:f3:17:78:f8:28:a7:b9:7a:
         73:31:db:01:7f:3e:ab:39:c6:cb:6d:23:4d:7e:40:7f:f1:44:
         84:47:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:28 2024 by rpki-client on console-ams.rpki-client.org