Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File:                     iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier:          fL73GD2RFUGktetFLy0BL6csCuj232x6okYIKnuZuN4=
Subject key identifier:   37:B7:29:29:6A:CD:3F:FF:94:DE:E0:49:F0:2E:78:8D:04:E6:4B:16
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer:       /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial:       01935C53C7548A6E672BB5A52AF1DF73F0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number:          0A44
Signing time:             Sun 24 Nov 2024 04:00:14 +0000
Manifest this update:     Sun 24 Nov 2024 04:00:14 +0000
Manifest next update:     Mon 25 Nov 2024 04:00:14 +0000
Files and hashes:         1: JE8EpcXspCsRNvmbqsB6Mi6Q19s.roa (hash: m/p3DVWoj8SE5gyxZIpvroOx7iZBcTkyugyZ5UZrb8k=)
                          2: UtVCIRjXBxSUrq-GfxluhJ4xQe0.roa (hash: eZt3U3qzswT1Y55JKkwMywy6bE6PM1fhuE6aiDwBo8E=)
                          3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: v7GG7eHRg16K48x7GrMxyeY6p+p9egQRU7JpL/klBJM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5c:53:c7:54:8a:6e:67:2b:b5:a5:2a:f1:df:73:f0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
        Validity
            Not Before: Nov 24 04:00:14 2024 GMT
            Not After : Nov 25 04:00:14 2024 GMT
        Subject: CN=37b729296acd3fff94dee049f02e788d04e64b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:e1:71:9a:85:87:79:ae:12:c9:14:1e:e9:
                    d7:df:d1:c9:0b:8c:b6:fc:5a:67:31:a0:eb:7c:8a:
                    e7:db:69:0e:6f:19:13:4c:56:0d:d6:d4:95:cb:0c:
                    0a:4a:e4:b3:87:ff:35:6e:8d:40:6f:6e:a7:49:9a:
                    4b:47:04:6c:15:8b:c7:38:c8:a0:62:a6:0d:6b:c4:
                    97:24:13:58:38:63:71:04:36:f8:aa:56:b2:f7:7b:
                    68:59:f8:68:22:6a:a1:d8:f0:fe:bc:d4:84:1e:eb:
                    34:28:08:43:fa:ce:b5:45:12:51:bf:5e:1a:1b:ba:
                    c9:55:e4:71:15:43:61:66:66:89:7b:30:61:8e:86:
                    c2:59:b3:b7:0f:f8:92:16:ec:59:07:7f:bc:9e:f2:
                    fc:f2:34:ae:33:c5:1b:a4:8f:08:57:a3:62:a6:70:
                    4b:94:f4:4c:92:92:6a:a1:c6:aa:72:be:e0:bd:59:
                    1a:f3:42:83:21:6d:f6:1b:2b:54:32:e1:05:3a:45:
                    a2:66:41:a5:c7:af:85:c2:e0:2e:9d:48:57:ac:0c:
                    14:c1:da:d0:14:06:4a:83:bb:1c:d4:a9:b8:ed:02:
                    56:50:37:98:c7:8f:5a:eb:58:dc:64:69:90:e7:53:
                    5f:6e:36:af:74:33:4f:58:f6:ff:ae:d8:6c:ed:b6:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B7:29:29:6A:CD:3F:FF:94:DE:E0:49:F0:2E:78:8D:04:E6:4B:16
            X509v3 Authority Key Identifier:
                keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:e1:bb:6b:25:1a:af:de:09:99:eb:f2:2b:f6:ad:d3:f8:
         66:d3:cc:7d:93:73:16:d8:92:51:80:b7:96:96:25:ad:e3:67:
         6a:d8:6f:14:10:8e:ce:bb:c9:50:f3:16:97:77:75:af:60:2d:
         18:73:fe:13:8e:e6:d3:43:62:a2:01:e2:d7:3e:6c:97:80:c2:
         af:b1:be:31:4a:49:36:d8:fe:9a:ef:43:99:d4:f6:9c:0a:3a:
         4e:fd:74:83:4e:c0:0a:70:9c:6f:08:d0:81:20:a1:44:4e:47:
         ff:20:a4:c0:c3:08:ee:ff:ab:5f:51:89:c4:53:ec:a5:ed:b6:
         c7:84:1a:53:fe:49:43:4c:30:c9:37:fd:1a:c5:77:f6:1b:6b:
         64:20:b0:f3:0d:47:aa:3c:04:18:9b:48:39:8a:9d:a4:8b:ad:
         1e:2e:91:bb:72:e0:fe:3e:28:6c:15:ba:30:d4:69:0b:41:4d:
         c5:b8:11:c3:9d:4e:c8:d1:5b:34:ab:f2:52:80:0b:73:8f:45:
         be:5a:7f:e9:1f:5d:20:42:69:c8:70:c4:73:a2:f1:de:38:ec:
         5f:2e:a6:ac:09:97:84:f5:9d:c9:82:08:2c:c1:b8:88:67:c5:
         58:aa:6d:e0:bb:7a:44:6e:1f:9d:6d:e7:90:f6:ca:63:f3:3b:
         aa:39:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:48:21 2024 by rpki-client on console-ams.rpki-client.org