Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          Sd9CanqmHtbr0Ttjdi7iWIP1WbOAYrFBF+va76JRvqA=
Subject key identifier:   D0:45:98:8F:B4:E5:C6:E8:18:65:8F:14:AF:06:C7:C2:E8:E2:57:48
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       0193658DED5DE69073E7A35B4B11CA988298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          1204
Signing time:             Mon 25 Nov 2024 23:00:20 +0000
Manifest this update:     Mon 25 Nov 2024 23:00:20 +0000
Manifest next update:     Tue 26 Nov 2024 23:00:20 +0000
Files and hashes:         1: 955RhmbPcnQ7C_FjWwazUMiSDfc.roa (hash: RWRd+AjCeDoWJIZc7pQHiyp5wBJa40gjND+cE5QzPXg=)
                          2: 9MYHG5RGeYKt6mWZ5B-jp6HfL1Q.roa (hash: QC4L+OYds8ZQEATWqJn6EjZ/sVHCv7Nwrgv+wnm/8Pc=)
                          3: GxyT6b5uLmmbQltjcFgT6v3Lm44.roa (hash: AQ+xK+ViRb0yzmKXU3t6Xx1753THK+uPnoxc1wH3juo=)
                          4: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: osbIilMBS74YhLg2u4QNbEQertmF5UKJUKqw2hQypLU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:8d:ed:5d:e6:90:73:e7:a3:5b:4b:11:ca:98:82:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Nov 25 23:00:20 2024 GMT
            Not After : Nov 26 23:00:20 2024 GMT
        Subject: CN=d045988fb4e5c6e818658f14af06c7c2e8e25748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:80:41:fb:12:de:3d:e9:27:74:b8:8b:cb:94:
                    d5:5c:1b:8a:5d:72:c7:a0:25:c2:27:b4:26:30:c9:
                    dd:f8:70:81:2c:39:d4:d4:30:96:33:b3:9d:91:b8:
                    71:07:c1:65:c6:50:93:45:b7:cf:ee:25:37:17:cf:
                    33:50:74:60:4a:15:19:23:18:53:f9:2e:51:60:1e:
                    1f:e9:af:44:e2:8e:10:35:94:cb:54:dc:59:af:bf:
                    83:fd:67:7d:ab:88:62:77:8a:0a:cd:72:29:b6:68:
                    65:1d:db:19:e5:8c:93:d1:e6:91:dc:a9:12:e1:ab:
                    8a:10:52:64:ac:c8:15:a2:e3:8a:cc:18:30:cd:1d:
                    7f:f0:fa:81:3e:40:e6:45:d2:f9:a2:6c:bc:6e:b3:
                    3b:67:18:47:e7:38:ae:c0:a6:db:d3:e4:96:f8:f3:
                    ed:46:a5:6b:54:85:29:e3:fc:c0:ac:f9:d1:a1:61:
                    01:bb:55:2e:26:86:73:2d:11:cd:b1:16:23:01:a6:
                    39:7f:e4:ca:4a:31:6c:42:54:ca:3b:e4:e0:10:60:
                    f0:3c:d9:bf:fa:62:df:04:d7:c8:24:82:73:d6:76:
                    9c:ae:90:24:b5:7b:13:06:77:5a:b5:f8:ad:92:14:
                    58:f8:92:ec:ce:0d:87:cc:36:a3:29:9a:68:07:2d:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:45:98:8F:B4:E5:C6:E8:18:65:8F:14:AF:06:C7:C2:E8:E2:57:48
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:ca:f2:32:2d:00:2a:c0:a8:71:6e:2a:99:27:94:47:78:
         80:50:38:0f:5a:76:cf:03:94:78:f4:1a:33:48:1a:e3:48:fe:
         6b:e2:e6:ce:5c:3e:47:9c:cf:4b:75:a8:d7:6f:27:6d:5a:a4:
         f9:98:e6:66:8e:8a:e7:30:d7:81:56:df:9d:37:bc:05:fd:e3:
         9f:f1:e7:53:82:04:5a:18:8c:b0:4a:21:48:43:a0:dc:58:34:
         23:b3:b5:30:3e:e1:74:a2:3f:6f:db:27:9e:66:8b:c6:d7:bd:
         55:26:ba:5a:33:0e:2d:ca:4e:2a:79:7b:20:7b:43:1b:67:3b:
         fd:dd:82:1a:24:95:41:6a:76:a4:fc:2f:fa:39:8f:26:4c:27:
         22:0d:56:f2:8e:71:d0:33:ea:ff:95:8e:75:f5:8a:ad:bf:e5:
         a4:ed:33:6c:b2:98:a2:8a:49:d6:12:4e:a1:7e:38:31:e4:48:
         11:69:37:95:d0:a5:ec:77:07:62:b9:e4:4e:16:74:80:b6:63:
         bc:9d:4c:a4:fd:f3:0d:4a:50:79:89:76:25:1d:4c:a5:f6:40:
         d2:a5:4b:2e:33:78:fb:78:40:fe:ee:20:a9:22:dc:80:e2:09:
         13:3c:57:9f:8e:9e:ac:02:1b:a8:9e:51:7f:e4:c0:95:99:9c:
         fb:97:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:30:23 2024 by rpki-client on console-ams.rpki-client.org