Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
File:                     RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json)
Hash identifier:          EyZWGmp9+P8h2pqVEu8W9aruWNfdb6uyW7Sby8PqHp0=
Subject key identifier:   36:33:72:41:DB:5F:3F:FE:41:49:FF:45:03:F7:72:80:3F:1B:4C:82
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Certificate issuer:       /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial:       0193542C8788743BB8687B48F3D5FCE450AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
Manifest number:          0713
Signing time:             Fri 22 Nov 2024 14:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:24 +0000
Files and hashes:         1: 1n84ttSBSTs0lIFDVWiy_Ps3gsY.roa (hash: drTtFK0YdRiD4UHN6W6tMx0rio+7dfJVTAFsQ4FPtXw=)
                          2: 5msCx75Q97E5QS4dEsP0whJjm84.roa (hash: yXs0xZDNe2SbitYiys0ieBIsMo2vonWcSYMG7tK1NnA=)
                          3: 6unLtWNICGMeGYTCWaUM6Uy6ces.roa (hash: 7vFerFQUkKkiCsw+N/lg+8PYDLsZ2hkBTymHptcqKO8=)
                          4: 7eU3LFTcWqtTka01F_WzfEzB9ro.roa (hash: 5RwMoZsHfQxJa/7M6YSRY0IpNTK5x2/elvApvp1sh10=)
                          5: Fmlf3u49XZY7kojR95KexdGwqtA.roa (hash: obFqSTpCiwJT8HseClEIJTLEgrFKaYfD3jGvlq2ibNs=)
                          6: L-j_qBC3hzCwOi0HtyhYJFFEozc.roa (hash: aKSuaS1FaHamPbGumQ0i4L2wPK0bS50AvYZMUS7iULc=)
                          7: MJys5jBJuCI4irsQ6wpnPeU1W-4.roa (hash: uKoZZ4/RjrNfDIgoPkO12BK8cyrZZshyp/WVdQL5T2Q=)
                          8: MXBVPU9RwA-TLjWtPnFddqfx-AM.roa (hash: 6ORvW9v1jOVZ9pOaIXdOlq00u80Pklr6ffoJJJMm+Ko=)
                          9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: 7pHQcUFNPdQgC5Jn6NRxutI7yGmyt9/qT3QJT1tjRao=)
                          10: bzpW3NKqCwxG2JtCB3ZXaIgzL6s.roa (hash: UDvdTjKFJQaAwPzE9bUOriKiSieW3C2HMGYMB3K1WPw=)
                          11: vPY5FCAlkA6a2bmNjJIZ5HZ8emU.roa (hash: C1U4DWRrZmrlwtndSrh0jWNT+E/3RHzQHqZZkgT4egI=)
                          12: y2L2b-3xu0dbzltG02jgWffZmbA.roa (hash: WhYXj0MswePMe5gZTk1kiwg4tIfyDsR/TDRMd/sNOck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:87:88:74:3b:b8:68:7b:48:f3:d5:fc:e4:50:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
        Validity
            Not Before: Nov 22 14:00:24 2024 GMT
            Not After : Nov 23 14:00:24 2024 GMT
        Subject: CN=36337241db5f3ffe4149ff4503f772803f1b4c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:8b:08:97:72:41:d4:41:35:a7:14:53:3f:
                    d6:0b:07:ab:42:60:9a:a5:fe:a9:27:ea:a1:4c:f5:
                    79:ca:12:29:da:c1:1e:42:94:51:f5:1d:aa:96:d7:
                    6c:55:b5:9d:1c:a5:e6:b3:81:14:74:a2:73:c7:fb:
                    e9:68:52:95:65:9e:5c:c1:4b:86:a0:5d:e9:97:d6:
                    d8:71:b7:0a:ad:c6:c3:14:3b:d9:61:82:53:a4:0e:
                    5c:89:23:7d:26:ab:52:e0:19:95:79:61:34:0c:23:
                    29:c6:0f:cb:9b:9c:c9:8e:5c:df:5b:ea:cf:26:9d:
                    37:64:06:c7:53:cb:a2:71:72:e4:ff:68:84:93:c8:
                    b9:00:24:6a:e5:d2:18:22:a8:1b:e8:70:ef:9f:b0:
                    d2:1b:54:6d:91:32:0b:a5:80:43:01:79:aa:d7:cf:
                    6a:9f:4f:e0:33:db:88:cf:ca:f2:20:eb:20:38:cb:
                    5c:3a:4d:60:87:b1:5b:da:28:72:43:cd:7d:1c:3b:
                    37:92:af:c5:40:73:82:30:45:58:9d:43:7c:fa:d1:
                    29:f5:36:19:44:c9:76:bc:a6:72:5f:1d:83:b6:1a:
                    43:58:f9:6e:7f:e3:74:bb:10:3f:a5:75:ad:37:a4:
                    d2:f7:16:79:fd:1b:40:c6:e4:36:bd:42:5c:7c:32:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:72:41:DB:5F:3F:FE:41:49:FF:45:03:F7:72:80:3F:1B:4C:82
            X509v3 Authority Key Identifier:
                keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:14:c3:ef:a2:b5:94:dd:7b:ca:c1:88:45:ff:48:83:e2:37:
         d3:80:2a:19:cd:b0:3a:2c:e5:8c:a0:ae:c3:83:55:46:6e:ea:
         57:fb:4e:f3:73:78:a1:ae:fc:cc:5a:d4:5c:1b:42:c5:93:06:
         d4:2f:c1:23:d3:2b:96:83:fe:92:c9:2d:fa:68:6e:ad:37:40:
         8a:05:60:3e:3a:98:31:37:6a:a2:ae:17:1b:cd:f7:82:d6:59:
         84:b9:c4:05:c2:e8:08:d9:c8:16:d6:45:56:67:c8:00:0d:e1:
         87:a8:8e:d5:9b:24:a0:77:ab:f1:d7:aa:27:0a:78:6b:33:81:
         f3:44:32:73:7b:4f:69:35:b2:8a:db:ef:58:be:98:73:6d:bf:
         c2:ae:8c:1e:2b:87:4a:bd:31:99:67:70:ce:ec:ef:16:41:e1:
         95:0e:99:6d:2c:01:c4:3b:0c:fe:79:e3:f0:70:7d:e6:db:28:
         8b:b0:86:03:d2:f3:0c:a1:bf:b3:bb:84:41:3f:18:da:f1:3a:
         45:05:0b:60:50:a5:00:ad:6f:bc:f9:a8:a6:57:99:cc:6d:5d:
         91:9a:0c:f9:94:01:54:e0:70:b6:b8:66:2c:db:f1:9c:5f:98:
         be:2d:5f:3e:51:92:87:7e:a0:3f:a0:94:14:10:b4:ca:3a:e1:
         99:c5:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:23 2024 by rpki-client on console-fra.rpki-client.org