Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
File:                     19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json)
Hash identifier:          LCgma3zXIZ5CNXaaOsCGcqvqvnkAYwfd76l/X1o/lVM=
Subject key identifier:   0C:BA:96:0D:5C:25:A3:7D:64:74:11:6D:7E:97:20:2C:A2:DB:64:7D
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Certificate issuer:       /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial:       0193512B9D51177D415FC65CC552EA596545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
Manifest number:          04AA
Signing time:             Fri 22 Nov 2024 00:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:32 +0000
Files and hashes:         1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: JkUwCnDrvDhv/GlqbQwwV5BxLoee7LHcjU/irdAW1vQ=)
                          2: RkLQtknN_dzSCylDZefYyQthEgE.roa (hash: epRSRHzrwhU4pKWKiiSuC7jOUYy0MsunIOZccVcM1+U=)
                          3: WLB05AuogPOmpy_rNoZNfzcVxH8.roa (hash: QxP9RLcKIeQ7CkQD8BUTof1QAy3cGQ+bQRHFQiIdQcY=)
                          4: vWY2Mr7NkHcvEUMCrzd1pEcHhcw.roa (hash: jAXf66ueFkF0olo13+XPUDHqzao+OpFBqlH8ctTHIic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:9d:51:17:7d:41:5f:c6:5c:c5:52:ea:59:65:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
        Validity
            Not Before: Nov 22 00:00:32 2024 GMT
            Not After : Nov 23 00:00:32 2024 GMT
        Subject: CN=0cba960d5c25a37d6474116d7e97202ca2db647d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:03:89:c6:f8:30:04:9a:fb:ee:2e:4e:ea:
                    31:fe:c0:59:71:b4:56:82:a2:ed:2f:22:5b:35:22:
                    96:a8:d0:6a:00:10:48:51:ac:f4:1a:fb:4d:58:c8:
                    b7:a2:e1:dd:68:15:7e:94:29:07:6e:00:05:d3:1d:
                    fb:eb:3e:4d:36:bb:f9:8c:f0:7b:54:78:62:e9:56:
                    5e:b6:b2:a6:c6:8a:3c:de:9f:b6:b4:0c:11:d6:a8:
                    f6:4b:9c:9b:89:64:4f:6b:6c:cf:4c:52:ac:29:96:
                    0b:33:a0:3a:7c:5a:87:7c:97:07:e4:a3:ba:8b:18:
                    57:b5:f3:32:b1:e1:ae:5f:32:05:5f:b3:8d:28:8a:
                    1c:93:61:7d:a6:f1:4c:91:aa:95:bc:ef:73:57:2f:
                    ee:72:bf:0e:e7:2e:84:40:a3:ca:54:46:5b:9f:21:
                    49:e6:b0:f8:11:64:ee:97:21:95:69:07:3b:50:41:
                    da:d9:95:ce:16:a3:c9:08:33:ba:76:e2:af:38:82:
                    73:95:6f:f1:87:78:21:3f:a3:29:15:36:ec:5a:d1:
                    da:97:62:8a:14:97:ca:c5:52:54:c5:09:1b:26:f8:
                    3d:8a:c2:0f:bd:56:7d:75:29:e7:82:a2:2f:b9:2f:
                    a2:41:2c:f7:f5:0b:60:78:c3:c6:75:8d:71:e9:3e:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BA:96:0D:5C:25:A3:7D:64:74:11:6D:7E:97:20:2C:A2:DB:64:7D
            X509v3 Authority Key Identifier:
                keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:47:d5:cb:dc:ea:f7:f5:75:eb:38:b7:f1:4b:9f:76:c8:f4:
         06:9a:97:7a:70:79:04:d9:79:94:c1:74:40:37:8d:48:62:20:
         f3:35:7c:53:82:09:c2:54:58:8d:58:f8:c0:a6:08:53:fa:37:
         b7:da:0b:2e:5d:ed:19:9c:8a:48:3a:cf:fe:e7:57:d0:b2:f2:
         f3:7c:c4:b9:b2:7d:07:19:d6:43:8f:d9:e1:23:f6:1c:2f:01:
         53:4a:b0:a0:cc:28:c1:e5:5f:4d:24:29:bc:55:df:a1:01:56:
         59:eb:15:d3:31:9f:48:8e:db:4c:72:6d:d2:03:52:dc:65:4c:
         ec:13:90:f1:09:a0:0e:cc:92:4d:93:d6:d0:b6:37:55:cb:8d:
         2e:40:28:1e:5e:49:cb:96:1d:65:f1:f4:41:77:43:0d:38:49:
         ff:6b:7d:37:2d:e6:d3:e1:fe:f1:31:76:d9:0d:44:0e:0d:a1:
         39:3a:6e:fa:14:aa:72:9f:43:ac:9a:e1:a9:f0:af:40:23:b8:
         1e:36:13:17:92:50:3c:b6:91:2c:23:7e:81:15:bc:68:d0:23:
         69:86:fa:01:75:83:2d:d6:f8:e8:1a:5f:91:c4:3f:9f:d4:36:
         1c:a6:d4:25:93:e9:3c:fe:e2:cf:d7:36:7f:6e:12:c2:fc:c6:
         ca:27:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:49 2024 by rpki-client on console-fra.rpki-client.org