Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          L7nor/UYUiV+mvCIdT0TEjX82btQxb1XEpvzO4a4NE4=
Subject key identifier:   A2:24:D6:07:4F:1E:A9:C0:BA:1E:1C:8B:E6:5C:18:7F:36:58:94:C1
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       0193553F4446C12FB06DEDFA36519DC04640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          1387
Signing time:             Fri 22 Nov 2024 19:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:29 +0000
Files and hashes:         1: JDdNc9x4PMAfsdvEjTiaN3M0YSQ.roa (hash: MxxMu0QZhFtvrIDUF13X9srIaDOelnPUsvdQ1VhLYRc=)
                          2: YEZmNjD9LobtoLrkp7N_tHQ0otI.roa (hash: l5Mpsefuzo3jfsj+ITASA7cMnq7m7HAdWmpnKY0T210=)
                          3: frQREmIzAQctONbseYNiiBXu6xU.roa (hash: snNaB1LD4zxwryjD9qkxgsn3dU+U8R3ATxHsRE9kWTw=)
                          4: pIuDOQtO3hOHyVotM4a0sMzR4j4.roa (hash: Gf9yn6VtI6twwdV4PKbx2AjVrYxLUFXOBegI5+hYDms=)
                          5: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: fYGvnEgraRL6Gnbgz6soB1ejwmUXdW1PfsW1HG0PZkQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:44:46:c1:2f:b0:6d:ed:fa:36:51:9d:c0:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Nov 22 19:00:29 2024 GMT
            Not After : Nov 23 19:00:29 2024 GMT
        Subject: CN=a224d6074f1ea9c0ba1e1c8be65c187f365894c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:9e:3b:6a:8c:be:7a:26:d3:54:a8:45:07:
                    f1:fa:af:cd:27:27:4b:bc:2f:b9:42:0c:3a:21:d0:
                    e2:f0:56:90:5b:3e:88:1c:3a:61:8e:1f:31:ca:60:
                    11:b3:8e:a0:0e:72:71:44:06:f4:71:72:7e:54:db:
                    18:26:eb:3b:e3:cc:77:66:51:a1:ed:c1:a1:83:71:
                    9f:cb:a3:bc:c3:73:50:da:50:ea:6e:63:19:46:19:
                    0c:8a:dd:8c:88:5f:7f:0b:32:32:dd:c4:cf:65:b1:
                    07:9d:8b:ef:57:34:86:ee:4a:55:a6:ed:e6:e0:fd:
                    da:88:dd:6c:f1:4b:a6:d8:f3:4f:58:ed:d9:14:0a:
                    39:5e:fc:9d:b9:00:47:3d:b4:40:ec:32:89:be:fd:
                    a0:86:39:32:de:a1:36:74:80:ae:bd:ef:b3:c8:90:
                    46:38:e1:b8:c1:bb:e9:8c:69:f0:ba:86:9b:e3:31:
                    50:64:03:d3:87:5c:0f:87:cf:51:81:67:e8:23:f8:
                    a7:27:a1:de:6f:ab:f6:6e:2f:80:8d:23:f1:2e:59:
                    74:26:77:42:dd:df:66:81:56:a6:3c:4e:a3:bc:a0:
                    3f:69:35:ca:88:b3:de:33:03:f4:e5:49:b8:72:39:
                    88:6f:b3:5b:b2:69:95:97:51:cd:46:f7:74:37:34:
                    26:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:24:D6:07:4F:1E:A9:C0:BA:1E:1C:8B:E6:5C:18:7F:36:58:94:C1
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d3:e0:2b:38:8f:08:92:01:27:60:e0:18:79:7d:c5:0e:08:
         2b:25:b7:43:bb:5d:f1:d4:fa:97:eb:9f:44:5f:06:a6:f4:aa:
         11:5e:0e:7a:b6:2f:a3:95:d5:4b:21:4f:ea:b5:87:5c:3a:b7:
         db:83:ed:31:46:40:a3:3c:95:a5:57:f8:2c:7d:bf:b3:bb:26:
         96:7c:4c:70:46:01:4d:00:ce:85:6d:36:22:1a:16:a1:09:ae:
         2e:7e:e7:d9:1a:44:dc:ac:db:41:12:93:30:3b:6c:c0:1d:4f:
         9d:93:12:68:07:6b:81:c3:71:8a:e7:a7:b2:fc:c6:e3:5c:19:
         65:e9:83:c3:bd:35:be:e2:49:b8:8a:54:da:13:f3:2f:46:7a:
         ba:6c:e2:b7:60:d8:6e:b8:f5:c1:47:ca:5d:b5:f3:14:0c:44:
         36:2a:d8:da:85:67:79:cf:a0:a4:3b:03:5f:0f:e3:a9:e5:61:
         a3:a5:fb:36:d6:3e:0a:92:c5:9e:37:d7:e4:80:55:27:42:61:
         0c:6a:bd:af:b3:d7:b6:df:4f:27:71:e1:47:a1:aa:cf:87:a0:
         c0:87:b6:2a:cf:b5:e9:14:da:15:17:b6:f4:85:f7:d7:7e:75:
         12:41:6f:87:6f:08:df:ef:e4:05:9f:16:14:a5:bc:38:c7:c8:
         8a:4d:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:57 2024 by rpki-client on console-fra.rpki-client.org