Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File:                     cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier:          Wb8Cavfe3gW3eeTEOgF+XjqEVRC5JJtcLid37NrvwkU=
Subject key identifier:   16:D3:50:A4:6C:96:8D:9C:ED:90:24:1B:AA:44:15:92:7B:B0:4A:F6
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer:       /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial:       019357D2AD4C072946AB3D6518109804FA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 07:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:44 +0000
Files and hashes:         1: VfMJmUHJmY6PDaRrd2MRLveDtjw.roa (hash: gLm8rO+e4m0pXUlM29Bj1nLrgpjpx+/46irZcnaE9eI=)
                          2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: P+QdFGjegRxYj8tIV0KpFA+RXDbf3qQ22bVBNkU30i4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ad:4c:07:29:46:ab:3d:65:18:10:98:04:fa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
        Validity
            Not Before: Nov 23 07:00:44 2024 GMT
            Not After : Nov 24 07:00:44 2024 GMT
        Subject: CN=16d350a46c968d9ced90241baa4415927bb04af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:43:44:96:ea:b0:a0:40:56:58:40:a3:ef:
                    22:fd:fa:11:9c:62:94:cc:7b:15:a3:e2:9e:65:4c:
                    d7:88:f7:92:07:96:14:d7:01:d9:66:85:73:ee:46:
                    56:af:47:3e:b1:cd:c8:1e:fe:e4:e9:28:d2:e1:9c:
                    13:61:e4:f0:5d:4d:5c:7d:7e:28:c7:8a:02:c1:14:
                    e4:ab:9e:4f:9e:11:68:8c:b1:0b:24:36:2e:87:f7:
                    a6:9b:64:d2:b7:29:51:97:a1:2a:de:15:d9:9d:dd:
                    d3:e9:66:c8:07:44:14:fa:73:01:bb:15:37:be:25:
                    15:d6:3a:44:c9:50:18:79:2f:53:2c:a5:1b:a8:8e:
                    70:56:95:ee:8a:5d:b8:da:b6:9f:9e:8c:16:90:c7:
                    d3:80:95:85:59:c5:be:15:f7:ed:b5:00:9a:74:da:
                    d2:48:8a:49:03:c5:a5:2c:68:60:bf:10:21:cf:af:
                    ae:e8:35:ee:af:cb:76:a4:0b:0c:6f:12:50:36:87:
                    f4:d4:7b:67:a6:ee:03:bc:74:be:d4:28:c7:1f:82:
                    37:c4:90:5d:6e:03:6d:9e:ed:c1:43:fa:6c:be:48:
                    11:59:a1:ec:29:21:ce:54:b9:69:4b:fd:fa:f4:34:
                    15:28:14:d8:43:0e:79:df:33:25:9a:e9:1c:41:82:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D3:50:A4:6C:96:8D:9C:ED:90:24:1B:AA:44:15:92:7B:B0:4A:F6
            X509v3 Authority Key Identifier:
                keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bf:17:97:be:d9:b1:27:0e:d6:38:26:c7:d4:7c:ad:f6:83:
         99:f7:d9:cd:95:21:5c:a2:df:b4:6c:ae:4c:67:85:15:af:d9:
         a9:fd:6e:ae:b3:ed:0a:d4:cd:21:b0:72:e5:c9:b3:31:06:f4:
         16:6a:0c:fb:7f:f9:2c:43:36:67:09:28:97:ab:f6:05:b3:7f:
         39:a7:af:10:1f:42:eb:1e:08:5a:b6:37:88:40:bd:b6:90:66:
         de:c5:56:7b:e2:fd:c2:8d:db:96:4a:f0:f8:94:6a:48:37:60:
         06:66:5e:85:0f:db:46:b5:9c:36:78:15:00:d1:c9:19:ba:ff:
         c1:58:fb:b8:1e:b7:68:59:7a:c1:18:8f:a2:b4:43:f4:63:cc:
         8c:a8:67:18:3f:a5:cf:cf:84:b0:07:28:d6:62:05:78:4d:03:
         b2:0d:9a:9e:0e:39:83:b2:2d:e9:10:ab:49:f3:eb:39:d7:a8:
         d9:ed:50:1a:59:8a:ed:17:eb:4c:d3:c4:b3:ea:1d:c8:46:e0:
         3e:78:d9:8c:b8:6c:0c:9c:0d:d1:5b:77:92:d5:95:a0:21:50:
         66:e9:00:2f:eb:e9:10:d2:04:c7:35:71:f5:76:78:e3:d0:92:
         04:48:14:74:45:a2:54:db:88:bb:ca:15:5e:0d:d2:0d:ad:ae:
         6d:fd:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:20 2024 by rpki-client on console-fra.rpki-client.org