Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File:                     FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier:          b329YJJg7sDz6hInOjCStMsaSU8tLnbXGnqL7AvEVvk=
Subject key identifier:   19:0F:F5:56:4A:D3:85:42:64:8F:D1:DB:B1:FE:56:1C:F3:68:BC:1B
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer:       /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial:       019356897B41048EFB9ECF1D03F10F415B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number:          0F0C
Signing time:             Sat 23 Nov 2024 01:01:10 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:10 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:10 +0000
Files and hashes:         1: DQNsGCcHr_AQfmNxblcXRtveWaY.roa (hash: dI/xWoChzgNKCDt8Rq62zYD5EFkYLDhOnWJDRXIPjbM=)
                          2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: cZFKluBYbsjemYEW5I1Yd/2PeL6oWC0ByNpcv+nATjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:7b:41:04:8e:fb:9e:cf:1d:03:f1:0f:41:5b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
        Validity
            Not Before: Nov 23 01:01:10 2024 GMT
            Not After : Nov 24 01:01:10 2024 GMT
        Subject: CN=190ff5564ad38542648fd1dbb1fe561cf368bc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:66:38:27:a2:7d:fd:7f:15:61:88:76:27:f2:
                    31:16:fd:ba:8b:45:b5:13:96:7f:07:58:6e:cd:bf:
                    65:48:59:4d:87:76:50:bd:94:13:27:72:37:3e:bc:
                    26:49:92:cc:cb:2b:87:97:a8:d8:23:17:ce:b0:30:
                    79:d1:69:9f:07:af:06:48:fc:8a:73:96:96:4c:54:
                    17:96:d3:07:94:de:17:db:7d:ad:cd:55:5e:cc:0e:
                    a1:07:5d:a7:f7:13:d3:4d:df:69:ba:15:7e:de:50:
                    01:f6:fd:bb:da:30:89:76:8b:33:31:e2:2a:95:c3:
                    67:27:53:04:08:1f:fd:cb:34:d0:4c:87:e0:cc:27:
                    80:d8:48:45:8a:96:32:93:5a:23:f1:9b:be:76:33:
                    c3:75:13:fa:80:b6:73:3a:49:06:b8:c8:ea:5c:16:
                    57:42:66:4e:15:a7:db:ca:be:ef:66:c7:a5:ed:62:
                    53:5e:07:0b:75:9f:84:cc:77:c9:eb:45:41:a4:10:
                    ea:b6:9f:41:27:cb:b2:a4:48:fe:dd:fd:c5:00:c3:
                    7b:53:a3:01:af:32:5d:02:20:e1:31:11:e0:66:a4:
                    18:cd:11:49:74:68:76:fc:ac:1e:03:33:ab:62:6a:
                    03:0a:11:c7:c5:30:a1:97:de:f6:0b:45:8e:e4:50:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:F5:56:4A:D3:85:42:64:8F:D1:DB:B1:FE:56:1C:F3:68:BC:1B
            X509v3 Authority Key Identifier:
                keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:56:cf:31:bb:6d:b7:97:8f:ee:82:6f:bf:82:05:15:f4:16:
         70:67:91:49:b9:27:97:c2:c9:c0:29:13:36:da:b4:90:61:c1:
         54:b3:87:00:f9:6a:f6:8a:1d:d6:d5:bb:65:7e:d9:fb:a9:14:
         ec:ea:10:ce:4e:c3:a1:12:61:d7:49:63:c1:76:f6:e5:1c:de:
         ff:ee:1a:46:bf:70:d0:d9:59:23:b9:85:c1:9c:c4:0d:ba:aa:
         8c:ed:ff:39:03:60:1f:e0:1c:14:65:ba:8e:ef:3c:ac:0a:ff:
         e6:f1:1a:18:2f:ec:ce:8e:e1:ce:c6:bf:3c:ef:7e:be:97:7b:
         5b:a3:99:9e:a5:63:aa:84:d0:93:ba:21:d0:96:c7:17:ca:bb:
         91:e0:39:18:66:92:6d:8b:9c:96:0f:be:d0:39:94:fc:6f:9e:
         57:18:c7:71:00:f3:92:89:4c:ab:6d:19:ef:83:3e:a9:4a:45:
         93:49:26:24:2e:b7:d9:69:7f:c2:a3:d9:b0:e5:c4:ca:79:e9:
         36:84:c9:14:64:87:64:e7:34:7f:de:3d:ba:ec:84:8b:54:70:
         bf:87:26:7f:d0:a4:48:7d:c1:f9:f5:21:ef:3b:be:65:cf:c3:
         27:35:76:8f:0f:5a:b7:0b:c3:98:7d:54:c9:41:61:77:71:f8:
         2c:f8:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:14 2024 by rpki-client on console-ams.rpki-client.org