Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
File:                     fZZeprOcIq7CrS1NTAo6MT3x3vo.mft (raw, json)
Hash identifier:          XVDhP9avR3OeAvMZl7bH4Tm6CD7UAJ2r4hk+wfJGsNE=
Subject key identifier:   BD:24:DA:CF:AA:A3:79:C1:60:4A:26:4E:F0:F1:65:99:77:80:45:E9
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       0193647B7406BA8EEC8891DFFA0E54462F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
Manifest number:          0777
Signing time:             Mon 25 Nov 2024 18:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:32 +0000
Files and hashes:         1: 1-df6Xltt3IIwh-BNtFHOzeAKA2Y.roa (hash: pTts1mH90ktfyl5CdpGc8ObTujkV38UQBL/pvBDiUUc=)
                          2: EBUtWqJt77CR3-i9CS-0XzsshBY.roa (hash: UkSlDLe5yOd1kafp3m6pk14Hxj9qaRLrWQelUo9sg+E=)
                          3: FflGgEqWyj-DNnL4ZOjfpO_5jVc.roa (hash: h36hkfh5xo/bj1xxQzprWPWaQpGhxeLMaz6HBfNpyaM=)
                          4: M8LBnQw3WLUQ_xguxWSMae0r8a8.roa (hash: FFywbFCxUMtJ+3HCQYv9MDa/u3003/+na8S+rwjyWuk=)
                          5: aplkZ0HL9ZaZ5ASQElr3H2YSvHM.roa (hash: IuE4aqi5iAemciMCZECKsUFlm6Ji/N8cH4INk9fMQQk=)
                          6: fZZeprOcIq7CrS1NTAo6MT3x3vo.crl (hash: DdnUmDAkREEzKIikKuwKanTOFve/h5LeMTj2Q0nUeDI=)
                          7: sQFx683CxXcR28flVAkjdjE5umQ.roa (hash: 3XN6F/x8ISkS/WzsFnBdacVAQiUEtXBTdwgbPUNPxXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:74:06:ba:8e:ec:88:91:df:fa:0e:54:46:2f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: Nov 25 18:00:32 2024 GMT
            Not After : Nov 26 18:00:32 2024 GMT
        Subject: CN=bd24dacfaaa379c1604a264ef0f16599778045e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:eb:b3:5f:7a:94:5b:77:c0:18:c3:8e:23:
                    a5:2b:7d:df:f8:46:b6:f9:db:f9:db:9c:1b:d7:ab:
                    70:ab:1b:fa:6c:af:78:77:62:67:7d:b8:bd:ba:a4:
                    cf:8e:df:24:de:29:00:8c:37:28:08:16:ce:9f:81:
                    60:70:b2:52:5c:e1:9e:e3:31:2b:7c:47:0b:3a:68:
                    89:fe:99:cb:81:fc:ff:61:30:a8:6f:89:ac:86:1b:
                    94:c2:df:26:e2:b1:b7:26:0f:71:f8:5c:de:5d:73:
                    f8:c1:e4:10:d9:8b:4e:ea:97:67:5d:00:f8:6b:b7:
                    85:c3:e6:0d:03:65:90:bc:b6:8e:f4:3e:97:fb:d9:
                    39:53:07:84:36:7d:a9:86:d6:5a:f9:95:0c:7f:17:
                    6c:79:ec:b1:7a:b0:d2:af:2a:2b:af:29:44:0a:74:
                    5f:df:f7:2b:e2:8b:8c:79:de:e7:90:8b:66:6d:be:
                    30:b4:a5:83:21:6c:bc:54:c2:ec:ee:18:41:73:1d:
                    c9:e6:54:b1:9d:10:cb:02:3e:6f:04:e9:e8:36:3b:
                    70:6e:62:1c:7e:42:74:9d:72:e0:43:5b:85:c9:5a:
                    81:0a:2c:91:cd:59:b2:46:7f:37:00:46:40:00:fc:
                    53:d8:ff:73:f9:64:d7:d1:1a:3c:e3:b8:82:fd:07:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:DA:CF:AA:A3:79:C1:60:4A:26:4E:F0:F1:65:99:77:80:45:E9
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c5:9f:e9:a1:70:a0:1a:4b:e7:ea:ee:e9:b9:1a:63:cf:a6:
         2b:4e:a1:de:22:95:ae:0d:b8:36:8e:1d:34:0b:31:02:8e:fb:
         05:f9:f7:ab:a0:67:8e:f8:c0:26:8a:9f:86:f5:16:90:be:bb:
         e8:04:6a:3f:c5:7a:b2:82:c5:26:60:71:b0:66:61:97:1b:92:
         e3:90:d2:73:f7:c6:d7:3e:a6:59:77:a4:6c:66:fd:2c:80:30:
         bc:fc:d1:dc:6e:44:7d:6d:e7:30:26:ef:66:7e:ce:88:b0:92:
         da:13:59:c0:8e:03:93:49:ec:28:f9:85:ae:d1:62:d9:69:d5:
         1b:67:e2:c5:ca:2d:ed:5a:f6:21:ef:e6:47:a6:ce:e2:38:7a:
         05:33:50:89:60:06:79:79:3c:ed:b3:24:9b:4b:25:10:62:3a:
         41:42:9d:f6:01:3f:a4:56:f4:6f:16:49:a0:2a:56:ee:74:11:
         c2:45:eb:ee:5d:25:de:93:1d:d8:61:0a:db:24:a0:44:60:0a:
         e5:0e:a8:51:7d:00:9e:9a:c3:ac:13:31:d1:2f:86:6a:31:8d:
         8b:72:5f:50:b6:e4:7a:9b:b8:41:eb:69:80:c6:31:b3:e1:bd:
         eb:42:f3:f8:19:c0:6d:05:cc:a7:30:f0:8c:21:75:e5:d6:a6:
         33:a3:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:57:04 2024 by rpki-client on console-ams.rpki-client.org