Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File:                     SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier:          WeFGjUBH7vAXulRkNlzKs1yCrFM8CSijfHPe2w0qvj0=
Subject key identifier:   98:B7:F4:77:C6:69:7C:BF:06:F1:A8:5C:11:39:E8:22:4E:43:37:A5
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer:       /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial:       019358E54A4FDDC7783FA5605BC93191B394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 12:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:41 +0000
Files and hashes:         1: IYwOiQoomtCBZ16cw4iWiZy1t3c.roa (hash: TWR4YbzP7IbO7oOnmFWMM9AHpqc7yS2gE7K44Acnax8=)
                          2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: nm+lmDM+JZbxaMQ9yF7roFQYbJml36AzR1JNYOPEcsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:4a:4f:dd:c7:78:3f:a5:60:5b:c9:31:91:b3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
        Validity
            Not Before: Nov 23 12:00:41 2024 GMT
            Not After : Nov 24 12:00:41 2024 GMT
        Subject: CN=98b7f477c6697cbf06f1a85c1139e8224e4337a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:f1:69:10:8e:99:4a:fc:09:33:28:eb:c7:
                    56:87:ab:05:57:a1:13:2a:11:25:bf:d0:d9:4f:97:
                    eb:47:f6:d1:d5:ad:ec:e4:c2:8e:c5:07:87:e8:2a:
                    b0:3b:55:07:e7:1b:03:6e:dd:97:a1:17:1e:fa:05:
                    47:9d:a0:58:61:b9:27:2b:35:25:2f:5f:c4:ce:5f:
                    df:c0:b8:66:89:44:1e:50:64:08:84:f8:02:e3:8c:
                    08:9b:69:58:14:97:59:c8:d5:c6:4c:8f:51:d6:39:
                    c9:5d:a2:a9:5d:39:c5:40:1e:e8:78:11:bf:cf:0b:
                    70:0c:38:02:db:ce:ce:99:a2:92:39:3f:b0:d6:e5:
                    61:b8:d1:28:10:3a:d0:77:91:29:cd:54:58:b7:2a:
                    a3:86:82:82:c2:2e:2b:37:39:09:02:ae:cc:62:8d:
                    d6:8e:85:8f:96:1a:75:a9:5d:00:76:13:b6:14:5d:
                    69:b0:75:a9:6a:92:12:26:6b:95:48:f5:5e:9e:b2:
                    1f:91:ec:07:79:8e:26:b3:02:33:16:0f:1f:3a:32:
                    8a:16:22:05:20:ff:3d:62:45:43:83:a2:af:9d:69:
                    c0:69:bd:be:d0:a8:4d:cf:cf:d6:f8:5c:96:f0:24:
                    1e:40:09:c7:64:88:6b:32:76:7e:5c:ed:77:30:34:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B7:F4:77:C6:69:7C:BF:06:F1:A8:5C:11:39:E8:22:4E:43:37:A5
            X509v3 Authority Key Identifier:
                keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:c3:d3:1a:e6:e2:85:31:02:8e:2b:61:8e:eb:b6:9e:7e:
         26:47:58:79:54:4e:99:62:0a:8b:1f:ce:17:ea:57:a4:7d:38:
         02:00:38:56:ec:6f:1f:2d:0b:34:15:43:42:87:39:c5:11:cd:
         a9:d7:db:fb:ae:ad:14:eb:8b:9f:06:01:05:1a:60:a9:92:e3:
         18:18:b4:c4:f4:b1:f5:94:75:e7:10:a0:2f:f0:8a:04:f8:37:
         1b:5e:b9:d8:e0:ab:44:03:6b:77:88:a7:49:0c:38:78:17:9a:
         a7:c0:8d:2c:17:6c:17:38:12:17:05:92:32:cf:ec:04:ec:1d:
         32:74:1f:3f:94:ac:8a:51:e9:c2:fa:95:98:d8:ca:d7:de:7d:
         48:c4:bb:6f:db:b2:ec:2d:32:5a:b2:82:1d:70:c8:2b:77:19:
         f4:83:95:62:dd:cb:ef:01:17:02:76:30:8a:7b:95:85:c9:c2:
         cc:47:fc:2b:14:eb:ca:da:12:e6:ba:81:e0:c6:0d:eb:e3:96:
         8f:2c:3e:a0:9b:a2:36:e4:00:ad:e3:72:da:78:af:e2:e6:66:
         e7:e1:73:40:3f:71:d4:b2:6c:64:26:02:29:63:6c:d1:84:b3:
         a8:f2:0c:24:2a:f6:89:62:90:3e:18:8e:0d:f5:ec:51:42:44:
         43:dd:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:32 2024 by rpki-client on console-fra.rpki-client.org