Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.mft
File:                     7_2zPuX9Ui-vCiR-BXm78e785LE.mft (raw, json)
Hash identifier:          WPbbpJq5yEJ+7QwB7FJYg5ikEidbGBAyIlJmRjtanRo=
Subject key identifier:   C3:AF:6A:00:CE:B3:18:36:13:40:3F:B8:5B:11:74:6B:C8:E8:57:F3
Authority key identifier: EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
Certificate issuer:       /CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Certificate serial:       0193568A262ECC49FDC1F088829E5FEC8E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:01:54 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:54 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:54 +0000
Files and hashes:         1: 0xA4rG88gbkkPC5SMlHNxNCVXyo.roa (hash: R7sAlfDK/ph2irH7p348mxNYfRtwKNTtujTmdX0r6bw=)
                          2: 7_2zPuX9Ui-vCiR-BXm78e785LE.crl (hash: AFyQmIy//+KAbWNNCitZEvhEoJ0fUn8rbuPize3W4J8=)
                          3: eOa0fI2Z3aqXmDRMwT9hJYQ-cSA.roa (hash: ivfhB36m9UDvOI1o9p8EAqI4/BWM+3lTcGCi2htS3Wk=)
                          4: v-QI8ti1dVuqVXUdQqHxAblT2qg.roa (hash: YzTl7Q+0kV3EYMy1u9rppMVA5sYnHmeyhljH6jGOxRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:26:2e:cc:49:fd:c1:f0:88:82:9e:5f:ec:8e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
        Validity
            Not Before: Nov 23 01:01:54 2024 GMT
            Not After : Nov 24 01:01:54 2024 GMT
        Subject: CN=c3af6a00ceb3183613403fb85b11746bc8e857f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:b2:29:54:56:97:eb:4b:18:3c:a6:d9:96:
                    79:89:1d:b3:22:c8:90:2f:ef:8a:a1:e3:2e:f0:99:
                    3a:59:9a:d4:c3:7a:8c:6e:cf:7f:2e:d9:45:41:ef:
                    26:1e:2b:36:40:42:10:27:43:a4:9c:f1:7e:a6:61:
                    76:6a:be:bf:a0:6c:09:fb:a9:1f:24:b4:7d:9d:ba:
                    90:71:e5:63:dc:a8:28:70:4c:07:06:06:f3:8b:85:
                    8b:af:0a:96:de:c4:6e:54:e9:85:f5:a7:60:50:f7:
                    a4:c9:33:70:f0:d9:7e:1f:76:7c:28:7b:fc:62:df:
                    7f:8b:12:fe:e0:2a:3a:05:2f:15:d4:dc:fa:23:fc:
                    1f:d0:fd:2c:b4:77:56:25:b5:79:bd:f0:26:fb:94:
                    89:3b:5e:3a:57:4f:53:90:31:22:4d:a1:66:f1:7b:
                    2e:76:10:23:1a:50:99:b3:c7:ab:dd:3c:e4:43:66:
                    92:4e:ba:1b:f4:79:0d:fa:bd:79:02:49:ef:41:e3:
                    93:53:2d:83:2b:c7:aa:71:5c:18:56:4a:09:6f:e6:
                    46:39:52:fd:0f:da:b9:4b:1f:7c:aa:d5:2f:df:1e:
                    d1:23:de:80:c9:e8:c2:ff:e8:21:3b:aa:7c:13:fc:
                    9e:60:b2:6b:ca:b1:b1:ea:2a:1c:a8:3c:a5:e8:25:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AF:6A:00:CE:B3:18:36:13:40:3F:B8:5B:11:74:6B:C8:E8:57:F3
            X509v3 Authority Key Identifier:
                keyid:EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:cd:48:77:27:93:1f:76:a3:da:a8:52:44:25:ec:cb:13:
         98:ee:06:20:46:c2:d3:a1:ce:e2:c9:ec:0e:2b:71:ba:74:6e:
         23:68:5a:fc:a9:28:95:5f:11:b5:2b:4a:0a:33:53:22:0e:5a:
         1b:73:a5:a5:8d:c7:00:9c:6d:ea:31:f4:4a:29:83:3b:d7:14:
         91:64:86:ec:7c:46:a3:a5:77:67:4c:79:c6:d0:1f:2d:9b:54:
         89:92:d3:86:a8:8a:10:64:38:4b:d2:23:6f:9c:b3:c8:28:90:
         6e:c6:ba:69:92:ce:d1:4c:35:dc:10:b0:a7:6d:8f:cc:8a:ba:
         ca:4f:d3:aa:b9:66:fc:b1:b7:07:fc:9c:75:b5:45:27:0c:7f:
         c4:83:da:d0:06:74:a4:c3:98:28:cb:db:39:3e:a0:ad:0f:c5:
         94:1d:c5:13:2e:42:8a:5f:fa:70:df:8a:da:17:96:1d:37:ee:
         eb:d0:8e:ad:60:41:4d:6a:a7:d6:7e:71:dc:3b:62:b8:92:df:
         1c:d3:7a:88:b7:05:32:70:30:5c:0b:92:73:c1:4f:6f:ef:ed:
         4c:e7:ef:b1:3c:2d:aa:ad:77:14:22:39:91:6e:8d:23:7d:e3:
         3c:d8:6d:2d:1c:37:91:27:8d:26:68:3b:1b:ec:08:d3:cb:e6:
         f8:65:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:09 2024 by rpki-client on console-ams.rpki-client.org