Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File:                     itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier:          Tkw3yqbvo4ewolBP+THsu8sM4nf7H/I7LrpWLkWHO/o=
Subject key identifier:   AE:14:C5:79:9D:3F:A9:28:78:FC:FD:A1:F4:40:B6:9A:E0:92:A2:AC
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       019358ADE94369609602A3420EE5BDDE58B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number:          1377
Signing time:             Sat 23 Nov 2024 11:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:12 +0000
Files and hashes:         1: 3MkDY0aFxj7VhO51KvSTxi2ni0U.roa (hash: rUydzb5hrO0MZtleoC6a3fJHZqvyiy/SgymoAi4FdNk=)
                          2: NcO6vwcGcnUOC_AQrU4yrvcsXuM.roa (hash: G12dtw8ij8oZW1o733If35WiBNNjwMZGrHhFhkxJ4SY=)
                          3: RC7Wuvz2IGB_0fIRWRYfFF5_KYo.roa (hash: u9YRzqFr5sm6A9mJ58PVG9HhJPTbyx57rfjGAdzBi+Q=)
                          4: Y6CBwhR5AQ0CgIm4JI_wsdmXaYY.roa (hash: KdjuSFBdA9E0WIP7XR5i29Nra94J96wGQ8vUFDrNW30=)
                          5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: VUMjgg9npSpRTE/CVuXWaU87NMAJEzmutfc09Z1VrqM=)
                          6: o-4rXRZ67pAoeqLbbraT5mnstBw.roa (hash: OrqbzixmUqjIbtHkVE8GhiJV4FqL2Gj5rLfW8f9XPt0=)
                          7: vhiEaaZnD8hummHHODA5upYkb18.roa (hash: ZrnpjCyIxwXhU25XaIXx1jLtGvY95XDV9iNHdrWlnFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 11:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ad:e9:43:69:60:96:02:a3:42:0e:e5:bd:de:58:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: Nov 23 11:00:12 2024 GMT
            Not After : Nov 24 11:00:12 2024 GMT
        Subject: CN=ae14c5799d3fa92878fcfda1f440b69ae092a2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:49:a1:53:20:9c:db:88:2d:8d:92:48:e2:
                    49:43:c9:a1:1b:35:33:21:10:e1:eb:a7:88:61:23:
                    49:15:2e:6b:0e:4d:af:2c:08:fb:25:29:3e:c2:e4:
                    e2:e3:62:8e:26:0c:9a:3b:6f:ab:f6:5a:af:e5:67:
                    0b:d7:6a:0f:bb:f1:da:0f:4b:9c:f3:ba:96:f7:29:
                    ff:de:60:23:5b:77:b4:d2:98:ee:07:8f:1e:f5:ef:
                    c5:3d:68:29:96:dc:e5:90:d1:e1:56:b0:a9:64:a5:
                    a0:6d:2f:10:9a:09:91:03:15:80:ed:32:a0:52:e9:
                    2a:78:40:65:8c:9c:b3:89:bc:01:3b:2a:a6:a5:d4:
                    a3:42:02:00:af:10:53:e7:66:a9:5c:89:7e:46:62:
                    13:cc:6e:f2:65:f3:93:69:4a:00:a1:a1:85:d7:d6:
                    ee:c7:17:20:30:39:dd:43:42:0b:ba:33:1a:9e:cf:
                    c2:a4:f0:fc:0b:dd:9d:38:4f:cc:f3:05:68:2c:ea:
                    0a:dc:67:8b:fc:fa:29:67:e8:64:79:70:14:ca:15:
                    f4:30:62:40:56:00:74:43:d1:7d:96:34:9b:07:58:
                    5e:5d:51:b8:97:8c:0f:a6:ec:ec:4b:06:65:ab:89:
                    50:06:ab:83:47:8e:f7:a4:54:44:d1:ae:c5:8f:1a:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:C5:79:9D:3F:A9:28:78:FC:FD:A1:F4:40:B6:9A:E0:92:A2:AC
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:30:53:fe:81:3b:7b:32:08:91:b5:b8:59:4e:6a:a3:80:ce:
         59:99:24:94:c2:e0:82:0f:b0:d6:c4:29:b1:5f:78:ef:25:c4:
         15:2e:4c:4e:ba:3c:b9:a9:2e:b2:60:a0:c1:b7:17:c3:0b:24:
         a2:87:84:09:e3:8b:f8:a4:ad:6e:1a:f1:e5:ac:77:71:e8:cc:
         99:e8:c7:fa:0f:32:f3:15:3d:7b:7d:6f:4b:0a:a2:59:97:cd:
         5d:0e:98:fa:6c:d0:48:2e:62:cd:e0:fb:d0:d8:80:5f:ef:d9:
         17:c3:32:7b:ed:80:1d:05:22:41:ee:9c:68:2d:dc:8c:4c:d4:
         f8:20:59:fd:d1:32:48:40:53:37:f8:8a:0a:e1:c3:8f:36:80:
         2d:c8:54:ad:8d:38:5e:ef:67:de:5d:db:5c:f1:c3:24:5f:d5:
         fe:77:7f:cd:08:4e:f0:59:3f:3d:c2:58:1e:a1:8f:81:e8:14:
         13:fc:5a:b8:bb:d2:c5:aa:7d:3e:98:d9:2b:f7:8e:6d:d8:6b:
         c7:59:c8:7f:7c:92:94:ed:51:3f:9d:fe:c4:6a:3d:8b:7e:06:
         9a:4b:e9:9e:6b:c8:91:85:49:e6:73:58:7b:83:0e:e1:3c:7a:
         35:4c:5b:33:d4:2e:48:57:f4:e8:e7:e2:c2:b2:9b:5b:34:27:
         5d:37:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:00 2024 by rpki-client on console-fra.rpki-client.org