Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File:                     4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier:          OtO3EUWhTECQL8YPrO+cMkq7gTj3q2dkFi/++kDiolo=
Subject key identifier:   AB:82:85:A5:1F:A0:8F:5B:08:1E:B5:26:F9:81:F6:53:B2:96:F5:C9
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer:       /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial:       01935764B695CB33A7DA9E0FB9A2BDD8B233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number:          1378
Signing time:             Sat 23 Nov 2024 05:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:38 +0000
Files and hashes:         1: 2LdUeQ2AqByZeexMRoImu32pplA.roa (hash: I/qBixg9wofc+nNAIgMwi0w1XBAPwxQHpMwzlALEDWg=)
                          2: 2rk-wig0NSg4teptDJQwpEBmsaE.roa (hash: hHVIzwE+eMFffINWLYhCmBSeRAWs6Iqm9qAIoqonEdM=)
                          3: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: 3RGFKRjhZLGZHmv/gP+L8qy/bdfZNW7MyXz55gDumbo=)
                          4: AdQEpwyXXtV2-WL9Ch5cOfruRYI.roa (hash: i6qMGuKsfk/MzkytFogVloPQxuD0TyjpaNzRaWrr34Y=)
                          5: Irje-HhBRXWI-E0JO8haxhdN8UY.roa (hash: Q3LMPf4TNmst7Nwa54SbF8QZlU1Fvg/n3vmdBjUpjM0=)
                          6: Jc0PmoRiYw4FMpap616npM3Nask.roa (hash: B233hWE2dtK7LfhrieMhm0vez8Qec3jPLFp3amJ+jTU=)
                          7: KXYMW1XYlc4MHcqpwlP3pL9MhSk.roa (hash: PPeGx8cRht2mJF8A6RQRcSyTUzT+L6w2TGVntVt0XLM=)
                          8: Kwe3Ad3pOhho9wgmGA81n6fKp9M.roa (hash: iONMgjbDrdey3suuVyFGK4YIGq093QsvxOH7/Q3p8z8=)
                          9: naMSbDv-cUa-1XhcA3K0TIQqW-M.roa (hash: L7fQwTpl65CT5Ryogsv/z/cqit/r+GKOhjfriryreh4=)
                          10: uPvADUpEkoFl52hjqF1we5KfLO8.roa (hash: +WVB7DWV0MgkJPXrxWOjyZ1lcSw33nc5QJlQntTofSc=)
                          11: xb7GLZatKUTNZRse1AurQSNewso.roa (hash: zpL/3hc+SjX1QFFvVXHUQS3to+376Qlxt4F5YE+RM8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b6:95:cb:33:a7:da:9e:0f:b9:a2:bd:d8:b2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Validity
            Not Before: Nov 23 05:00:38 2024 GMT
            Not After : Nov 24 05:00:38 2024 GMT
        Subject: CN=ab8285a51fa08f5b081eb526f981f653b296f5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:44:87:97:bd:1b:e0:5b:9e:0c:2a:ef:ab:
                    3e:b7:5f:ea:0d:47:06:35:a6:92:63:62:4b:cd:69:
                    d5:ea:34:bc:d2:d5:05:45:13:eb:78:a2:da:90:89:
                    98:59:26:75:09:5a:1b:74:46:68:80:cd:42:78:37:
                    bf:c0:2d:97:e3:b3:6c:7d:f2:c5:7c:a4:fa:82:57:
                    14:ec:5c:a4:36:46:0c:78:7b:14:51:c7:24:b8:17:
                    61:37:91:1b:ac:2d:dc:54:c9:b2:b8:54:a3:e1:61:
                    c0:41:2d:b4:c1:db:31:70:54:32:f3:d6:09:e9:00:
                    7f:9d:99:49:39:f2:71:2c:1d:70:ae:62:76:55:d3:
                    93:5c:a7:93:2b:78:fd:32:67:a0:81:10:62:c9:06:
                    1d:03:f9:5a:d6:5b:5f:ee:d7:30:5c:30:aa:16:b7:
                    c2:71:ea:53:3c:82:75:43:4b:31:44:ad:90:7a:54:
                    bc:46:16:1a:1c:45:0f:32:c0:e9:a1:13:cb:6f:8a:
                    05:53:c5:ab:ca:b1:e9:ca:ed:c1:1e:5e:d0:0d:d0:
                    c2:2c:bb:8e:db:2c:b8:23:e4:f5:a1:dc:98:d5:c5:
                    73:2f:1f:17:d9:08:53:a0:b4:09:29:ef:da:a2:ed:
                    22:94:cb:6e:0b:ee:51:91:f2:9d:a2:cb:90:8d:aa:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:82:85:A5:1F:A0:8F:5B:08:1E:B5:26:F9:81:F6:53:B2:96:F5:C9
            X509v3 Authority Key Identifier:
                keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1e:d6:b8:63:c2:dc:6d:9e:04:0f:a1:fd:3c:64:89:62:b1:
         12:75:17:d6:02:c7:bd:2c:33:60:b1:f7:3e:5a:32:18:07:1a:
         f5:8b:ae:2c:14:24:96:48:23:80:4c:35:9c:06:60:b0:b9:33:
         44:03:fb:16:b2:e5:14:ef:6e:b7:f2:f2:d7:99:fd:a5:f1:b2:
         50:63:bd:cf:54:35:4c:62:ae:29:3c:ae:49:2f:93:ff:ee:05:
         8a:56:ca:d5:65:18:6b:55:8d:e6:78:35:cc:30:c9:79:7a:7d:
         6c:86:d3:2b:b2:1e:1b:30:17:87:54:4b:e6:1b:08:ab:2d:01:
         b2:93:2c:07:2e:24:70:26:09:d1:66:2b:61:1e:bc:aa:ab:12:
         95:b7:ee:2b:96:b4:83:41:42:01:14:94:43:ed:b3:3f:58:76:
         72:22:6b:e3:ba:cf:fa:6e:67:7c:9d:3b:56:76:6f:58:e1:f6:
         d6:89:0f:f3:1a:5a:cd:7c:f6:f5:13:f0:8f:75:fa:4a:cc:fc:
         db:93:17:8b:c4:67:c7:93:13:a6:ca:17:ba:f9:94:97:44:02:
         73:c1:6d:15:0f:a9:87:7e:27:28:c0:b1:fc:a3:55:40:53:25:
         88:a0:6e:da:f7:1e:57:d5:49:79:13:2c:e5:84:88:b6:da:6f:
         fa:ae:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:36 2024 by rpki-client on console-fra.rpki-client.org