Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File:                     ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier:          EDSFSaTbyRR7buBXuFC4g0NuRTuTOKFCbq3HeE60SUY=
Subject key identifier:   2B:B9:2C:7D:D1:C3:60:CD:CC:24:13:DC:56:30:9E:56:10:22:BB:8B
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer:       /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial:       019358E553FCB6D4F5AEF0ACB287D8725549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 12:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:44 +0000
Files and hashes:         1: AAU8Jn6aqtLPvqj80LsSnTR98LE.roa (hash: w9mVzXN+0ZN393kOgRVS1fF6qRZwjFwyzIp82z4G+z8=)
                          2: TeQH5FQ5OUD3EvIeT8L0xbVqnFs.roa (hash: P4PIYRHAwUalvP0OqKaCgrZ9KH/4pVEfXmJuQ065VH4=)
                          3: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: 2UStfL+mrRT4C/MqOQiwLShFLjs3yCeqari4b4RjHLE=)
                          4: l9-jCuCHJFmx0sVoEipqCzRZF6A.roa (hash: eja9+9CQxxZv39ZOxqsGUrnH/XDsNrr+USqPJMCzRDU=)
                          5: sJV1Yq2y3q70JWktFlE_RKmffZM.roa (hash: uoQ4D1/x96jD+bERttR8DmK+6fsmqD30ReLCI4dpkjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:53:fc:b6:d4:f5:ae:f0:ac:b2:87:d8:72:55:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
        Validity
            Not Before: Nov 23 12:00:44 2024 GMT
            Not After : Nov 24 12:00:44 2024 GMT
        Subject: CN=2bb92c7dd1c360cdcc2413dc56309e561022bb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:b7:7a:2d:a4:00:35:34:a5:5d:29:57:79:
                    37:68:06:1c:0f:db:4f:06:82:c6:a2:07:53:86:dd:
                    8f:37:67:7c:fd:d3:df:63:a1:69:d4:36:6d:84:04:
                    32:86:a0:f1:d4:91:6a:94:76:94:49:37:5a:49:7e:
                    01:e8:92:b9:78:81:c8:3d:75:d3:1c:ce:2e:51:0f:
                    d1:bc:86:77:0c:99:bd:7f:85:d1:ff:eb:cb:4e:17:
                    80:c2:9a:35:2e:74:9a:7f:12:27:cf:a1:46:ee:bd:
                    32:27:e0:00:8d:23:5d:98:52:e4:2d:66:46:c4:f7:
                    a9:fc:4a:8a:23:33:41:d5:19:b8:50:3f:66:c9:f3:
                    a3:cd:a9:47:de:18:af:da:dc:59:fd:90:99:76:05:
                    a8:71:5a:8b:8f:23:c1:10:f1:9f:b5:e2:ce:50:78:
                    bb:01:f4:ca:94:e4:e2:68:84:96:1c:25:3d:48:89:
                    7a:89:7b:0e:a9:2c:71:a9:2d:1e:80:5b:b5:b0:47:
                    f3:c6:a9:74:d2:fb:cf:27:eb:2f:f0:b9:6a:0c:f0:
                    90:de:6c:ad:92:ef:e3:fe:43:ab:ce:e9:7a:a8:f0:
                    58:96:4f:15:c0:26:c0:fc:b0:ce:e6:76:03:93:89:
                    8d:4f:55:2a:dd:54:87:00:3f:3a:e7:37:c3:16:20:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B9:2C:7D:D1:C3:60:CD:CC:24:13:DC:56:30:9E:56:10:22:BB:8B
            X509v3 Authority Key Identifier:
                keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:3c:1b:f1:e9:90:55:ab:60:74:80:7b:0c:c4:73:2f:47:e2:
         37:4b:f8:f9:a0:ec:5a:43:75:b7:a0:03:83:1f:f6:13:99:d8:
         bf:2a:49:ea:cd:ee:91:d7:8a:d3:09:f5:1f:97:e2:46:8a:96:
         64:a8:b3:cd:8c:7b:23:6a:6b:f0:22:00:cb:29:c5:c6:d9:9f:
         68:33:0e:33:96:99:b9:e0:11:68:e1:9b:92:9f:fe:67:f3:58:
         30:26:0f:fb:f8:0b:86:0d:8d:cc:75:81:bb:d4:ee:7e:b6:78:
         b0:cb:2a:a4:0d:2a:e8:ee:1c:82:f0:1a:3d:76:76:f8:24:3c:
         e8:49:b5:ac:22:ce:d5:7e:a3:ae:6c:c6:54:c1:f7:77:b0:0a:
         36:43:ac:b7:3b:30:aa:c3:35:e4:e3:91:96:a9:76:1d:4e:85:
         5a:c6:97:a1:09:b8:e8:3c:b6:6f:68:f4:5c:e0:ee:1f:db:37:
         f2:2d:c3:13:9b:59:08:f4:8b:a7:dc:6a:3a:a6:a9:66:18:30:
         fb:81:e1:85:8e:7c:ac:f6:57:f5:9e:52:52:16:4f:7c:14:43:
         10:ca:89:9b:9c:7d:0e:4a:2c:96:96:54:0c:dd:63:7c:43:0d:
         29:77:6a:28:0f:ca:f3:4e:2c:14:c5:f2:92:f5:cc:86:c5:aa:
         c6:51:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:17:10 2024 by rpki-client on console-fra.rpki-client.org