Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          XrsXJ6Vy9o1pe7O1vp59oCgXw2XB/N4JIXT2+Cee6P8=
Subject key identifier:   F8:C7:9E:82:F4:FD:8F:6E:CE:D6:1D:F2:D5:54:2A:6D:4D:2B:A0:69
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       019354D140AA4685E21F25D34E8B9AAA9D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          1377
Signing time:             Fri 22 Nov 2024 17:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:19 +0000
Files and hashes:         1: CKR8t3COGCFUSMeuwbzJqt392x0.roa (hash: FtshUE7nFcGGtaPukw5gBO9YvQ5X6av8auVQGhHWnP8=)
                          2: N7QXhMGNsXQLhHAvswSKNTGlgC0.roa (hash: MxdE66ICviyhO+da/jrEyLc2xfBWC61+11B8dV91c8A=)
                          3: P6GQfSCjpgWYVNV4U3D4pA7rPYQ.roa (hash: x+9cyu/TyxRHWGDYgdmkXG1C4w1TMslVryQ6qR1LFrE=)
                          4: TXIJImgfuEhoZuyJsfxFyGjuJiI.roa (hash: bOn3JD9ygvdz+82lEctQVt25UmDm6owgokJwNEgiN30=)
                          5: bdQNgurYpubZ6AUAk-VMC-ilTnQ.roa (hash: 3q5fI71M/kYWMhlKnML3MHYNyTBh+N8dy7XxpJP+15A=)
                          6: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: 06lvf3tj/yDlBwpdFQUhBge3Bt+QHttap7CZQPYx4KM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:40:aa:46:85:e2:1f:25:d3:4e:8b:9a:aa:9d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Nov 22 17:00:19 2024 GMT
            Not After : Nov 23 17:00:19 2024 GMT
        Subject: CN=f8c79e82f4fd8f6eced61df2d5542a6d4d2ba069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:fb:76:31:c9:27:8c:8c:c8:1c:4d:c5:f1:
                    19:22:18:38:02:b7:1c:cd:46:83:77:36:0d:8b:5a:
                    4e:c4:6a:99:a2:f6:d9:a7:89:ed:aa:e7:c4:d1:7d:
                    af:a7:04:42:c2:a9:26:6f:47:02:9b:66:8b:53:fb:
                    99:04:0d:28:26:08:aa:9a:97:b3:b7:c6:04:20:9f:
                    4d:a9:3c:4f:bc:49:04:44:e8:f5:0f:fb:8f:71:57:
                    4b:6a:ad:81:b3:73:18:a5:f8:36:73:77:75:67:3b:
                    22:57:44:6f:46:cf:f6:e5:15:73:39:75:02:c6:a2:
                    45:5c:df:c5:ee:a2:fd:96:ed:d8:b5:a7:cc:99:bc:
                    6e:74:66:5d:45:c6:6f:a9:2d:cc:63:45:a0:7c:0f:
                    f2:ba:fb:61:5c:95:d4:83:10:68:81:bd:9f:ed:6d:
                    cb:c7:de:7b:3c:9f:9d:6d:5c:3b:40:c1:a6:e5:8d:
                    5c:16:0b:cc:9e:a6:32:61:98:c9:59:88:60:cf:a1:
                    78:91:ba:c5:8f:d9:94:10:51:2d:66:60:73:9c:c0:
                    71:dc:7c:f5:ff:46:0f:90:2b:a0:5d:56:5b:29:58:
                    e6:40:fc:41:f2:a9:08:6a:61:22:f0:4a:9c:e8:94:
                    48:f1:78:11:bc:ab:1e:a9:e5:91:27:fe:ff:71:cb:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C7:9E:82:F4:FD:8F:6E:CE:D6:1D:F2:D5:54:2A:6D:4D:2B:A0:69
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:7e:d0:d8:e0:85:f9:18:0c:7d:6f:de:cb:69:bf:38:b0:
         86:d3:8c:5a:48:aa:2f:e9:78:5b:51:2f:eb:c0:a2:8a:3d:b8:
         f3:78:a8:04:86:36:05:3f:83:75:c8:76:49:37:f1:28:9d:62:
         75:99:78:af:41:37:04:4a:b8:32:1e:ee:d8:3c:c5:f2:ad:8b:
         1b:91:7e:0b:4d:0f:27:74:75:d2:17:57:79:2c:1f:4c:2e:24:
         79:de:a1:af:d9:f0:7a:ae:c9:64:b8:cd:fc:70:c7:51:c3:cf:
         f4:65:a5:0c:19:15:41:a9:22:b4:f3:14:b7:ae:20:54:6a:71:
         1f:d9:6d:37:e5:42:30:17:28:ba:fb:1e:b0:9f:96:72:5f:58:
         28:02:e2:cd:32:07:26:64:81:99:10:bc:f9:70:92:01:8a:7e:
         36:df:f6:fa:b0:4b:ab:30:7b:81:2d:e1:45:15:09:e6:a4:ff:
         6a:2a:ab:a7:83:62:00:39:7c:6c:d6:a8:ac:50:4e:1f:d2:de:
         6b:ad:77:02:3d:12:af:48:59:e4:ca:e4:b1:6d:15:2c:1f:f7:
         9a:61:97:ce:6b:dc:48:72:5a:0a:9a:81:1b:61:09:a4:96:4d:
         ce:42:03:76:ba:e3:7a:15:53:72:08:c1:71:57:f8:ae:9c:3a:
         11:be:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:39 2024 by rpki-client on console-ams.rpki-client.org