Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File:                     gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier:          eKnJS/2b3S4t+Atug/IswAvQbWPJE3iTkUHPj+dZZdk=
Subject key identifier:   F9:D3:3A:1C:E3:26:2C:72:D0:57:85:A1:1B:B8:7B:D1:A8:63:D3:18
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer:       /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial:       01935878C54E404BD1BF604ADCB77159B583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number:          1031
Signing time:             Sat 23 Nov 2024 10:02:10 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:10 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:10 +0000
Files and hashes:         1: OGYiaiLlvvoCShuu1gZ4WV50fjA.roa (hash: f2tMm4ljzoNpgDmt2ImgjBynGOP4Ab1bKnEbHn3gqvk=)
                          2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: BMQgv41fqf9AZ6oxT/dtTs8Dn9O7iug1XULTMX0WwKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:c5:4e:40:4b:d1:bf:60:4a:dc:b7:71:59:b5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
        Validity
            Not Before: Nov 23 10:02:10 2024 GMT
            Not After : Nov 24 10:02:10 2024 GMT
        Subject: CN=f9d33a1ce3262c72d05785a11bb87bd1a863d318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:0d:bd:f7:fe:ef:b9:80:08:e4:37:34:8c:
                    2e:66:61:fd:15:65:cc:9f:1f:ed:3f:84:a7:d9:9d:
                    3c:fd:0f:f5:48:34:bd:6a:1f:64:a5:96:aa:31:ea:
                    1f:70:ba:14:3e:4f:82:71:5b:3b:12:40:56:5e:aa:
                    f9:c5:0b:94:48:3c:7a:d9:7d:40:68:91:e1:02:6b:
                    e5:e1:0f:76:78:35:24:23:4e:bb:a6:79:92:04:de:
                    c5:22:6e:47:d1:23:7c:fe:31:6f:54:42:59:8c:12:
                    d1:a9:c3:3b:a3:01:db:8a:ea:d6:e9:e0:a5:1a:60:
                    e5:fb:be:2f:2e:13:87:b9:3c:3c:3a:39:2a:39:2f:
                    3b:22:ab:01:a1:12:73:62:8b:6f:09:49:66:32:a4:
                    d7:c0:d1:11:64:da:8a:42:3a:0b:16:eb:34:56:2c:
                    de:68:af:ae:62:d9:ce:ec:3c:b3:39:9d:de:06:cc:
                    86:71:1a:e7:8f:13:a5:84:89:12:b0:b3:b2:22:ba:
                    80:c3:c3:a6:a3:62:15:3a:c8:0c:b7:c4:ed:02:a9:
                    a3:ee:a6:78:5b:e8:bb:38:ab:69:7e:19:7d:c8:9d:
                    7e:a4:84:39:c0:00:94:28:63:01:24:d5:d7:7f:32:
                    73:bc:de:64:ad:b0:73:c3:27:f1:56:a7:64:96:7a:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D3:3A:1C:E3:26:2C:72:D0:57:85:A1:1B:B8:7B:D1:A8:63:D3:18
            X509v3 Authority Key Identifier:
                keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:83:33:f1:9e:9a:cb:c4:55:8b:92:0e:ea:61:77:f4:05:
         6b:6a:00:47:b5:b7:80:7e:f0:2f:0c:86:58:bc:98:d1:8d:cf:
         15:61:54:c2:9a:48:9b:25:d1:1b:d0:f3:95:32:15:8b:9a:94:
         cc:f6:d4:73:12:05:45:9b:52:cc:51:15:64:98:22:37:f1:7d:
         fc:ff:e9:6c:2f:fe:9a:76:1b:2c:7c:16:cc:cf:84:81:10:d4:
         d1:a5:77:f8:e4:ad:2e:42:55:b3:aa:57:ca:50:f1:53:8d:a9:
         82:e7:ca:8b:c7:05:1b:a5:54:7e:21:5b:4a:bc:0e:cb:4c:bb:
         31:2d:2d:30:2b:87:7d:92:78:46:6a:25:8b:6a:ec:ee:06:ff:
         12:58:cc:50:af:51:4a:8f:6b:73:6d:fe:76:6c:e8:b1:7e:27:
         a7:ea:ea:83:61:4d:c2:1c:4d:c9:10:06:2e:6d:ee:a3:44:c9:
         3d:e6:86:88:6d:83:ad:04:d4:50:21:6d:a0:4e:fe:c6:0f:c5:
         9c:ab:ea:f3:0c:17:79:e2:7d:cf:80:9c:61:54:28:15:37:c2:
         aa:5b:c1:67:df:bf:0c:55:73:f6:19:7c:3b:8a:67:0b:01:1a:
         31:50:fd:31:08:79:42:3c:4f:dc:62:e9:e6:15:7f:8f:13:5e:
         91:ad:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:27 2024 by rpki-client on console-fra.rpki-client.org