Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File:                     TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier:          an8kL68eS8u4NLm0CYmO2yUOzp005y4Rd5UuTO1P8Lg=
Subject key identifier:   ED:E6:0E:DF:EA:71:63:CC:5C:D9:3E:C6:FD:33:1D:3B:1C:7F:C1:42
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer:       /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial:       019355E41C5D38E5DD5B2DA4BFF7ABB3FDB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 22:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:32 +0000
Files and hashes:         1: 2FzY2ViHems5N3NZrAj98pXy7UU.roa (hash: YxH9fGsz6/FHLRNOXsJS+PDFsk8uIht4g1PW7pD5pd0=)
                          2: CM9tT4tG9NJfH_vJLTes11s9t4U.roa (hash: PLXanPEGYp7NGcq0Zr0qe/EoSfPytorX09jucvlErJU=)
                          3: QLFSNVPPHNwk4AUJejw6lLuWIYs.roa (hash: 78WFOD9VBRSswSf51K2ZDbHRDmQx4Ey/OhB74wcECt8=)
                          4: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: V+utKgIrj3uo+tM9m3SJJQ006QLeDTpvPIAHhU84otA=)
                          5: jEqR1MN7AxSHH4nC3HvBhGZ4qe4.roa (hash: lE4S1XiCRvSe8+5zoMVTjl51GbQirkwD8Mf8nHcv9pI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:1c:5d:38:e5:dd:5b:2d:a4:bf:f7:ab:b3:fd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
        Validity
            Not Before: Nov 22 22:00:32 2024 GMT
            Not After : Nov 23 22:00:32 2024 GMT
        Subject: CN=ede60edfea7163cc5cd93ec6fd331d3b1c7fc142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f3:fd:fb:6e:80:8e:df:43:71:f0:6f:ed:41:
                    6b:d2:41:a4:1b:ec:ac:50:3f:78:4f:7a:38:90:10:
                    75:90:f5:a7:93:de:bb:e4:a5:67:d8:f4:62:be:c9:
                    8a:96:95:29:38:57:0e:54:5b:b6:9d:bb:7d:0e:a2:
                    15:2d:48:db:ce:c0:e1:95:95:bb:d6:5e:c5:bd:ed:
                    d3:d5:8a:87:9a:af:07:29:79:1e:e7:21:9e:39:f3:
                    de:5a:2f:9f:11:e3:40:8d:a1:db:ad:fb:a2:e1:4d:
                    63:a5:27:b8:2d:56:c9:1f:36:2b:1e:28:81:38:f6:
                    0e:13:31:2a:a7:89:92:b9:fb:36:eb:31:55:9c:8b:
                    f6:6f:d7:4d:e7:57:b6:5d:db:ee:fc:d5:b1:6f:a8:
                    a2:c2:5f:de:c2:b8:56:55:c4:8c:f1:1a:cb:51:ac:
                    76:6f:b8:7b:42:d8:1a:7f:a9:b5:85:c4:bb:b3:e8:
                    55:54:ae:b0:35:8b:4a:83:e5:ec:26:3d:e1:82:dd:
                    70:1f:cd:f4:ce:c7:f6:58:d2:5c:c1:30:bb:a3:fd:
                    e8:5d:f1:f6:c9:0b:88:f3:61:12:03:af:a2:5d:b0:
                    97:4d:ad:60:47:1a:23:22:11:e2:16:b0:6b:06:ed:
                    a4:a3:a9:3b:dc:c6:9e:a4:14:55:62:eb:6c:0d:a5:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:0E:DF:EA:71:63:CC:5C:D9:3E:C6:FD:33:1D:3B:1C:7F:C1:42
            X509v3 Authority Key Identifier:
                keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:9a:f5:d5:e7:6f:2f:4c:ae:f5:9c:e7:82:67:e7:86:51:
         aa:cd:22:a3:19:23:a8:20:15:3e:b9:1e:80:33:9b:22:48:7d:
         cc:8b:f1:13:52:dc:9a:b6:0c:d6:0d:a3:a6:93:f2:48:58:fa:
         fe:0a:f4:96:c5:b1:a0:48:34:1a:40:46:7c:02:de:89:91:48:
         8e:c7:a4:80:98:4f:11:7a:ba:60:c7:53:5f:17:b2:26:ed:c4:
         bc:4a:81:5f:50:79:5f:fa:19:1c:58:13:5d:b9:55:08:4d:9b:
         4b:63:2b:8b:96:a4:cd:c7:06:52:fc:12:02:4f:a8:f3:28:34:
         3a:5d:7f:ba:7e:09:44:ac:f0:5a:4d:3f:b4:f2:f0:0f:e4:3d:
         01:c5:40:51:5d:d2:27:2b:5f:79:ba:c7:69:b6:68:ee:39:7a:
         8a:c3:1e:da:d1:f7:93:85:b0:4e:68:c1:8b:73:b0:d6:1e:a6:
         a0:40:b1:8b:b2:92:37:4b:01:b8:c7:93:d5:a9:dd:fe:9a:69:
         c9:f3:1f:19:ec:af:2c:22:6d:75:9c:fe:3b:68:2d:9c:c0:b0:
         98:05:08:67:cc:19:54:79:b5:86:ce:94:45:a1:94:95:1d:6e:
         f0:56:27:6c:6b:bf:4d:03:cf:85:2c:ad:7b:15:a6:d9:6c:bc:
         37:3a:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:38 2024 by rpki-client on console-ams.rpki-client.org