Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File:                     KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier:          dU3i54Z85f4H2EcIq11eTndExC38He+iAPJZ9CbTa70=
Subject key identifier:   AE:4B:4F:C6:3D:19:9C:A5:21:80:E5:E3:36:18:49:D3:FE:16:C4:1E
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer:       /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial:       019356F66F9F27919D687B7A45E1C3CEAD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number:          0723
Signing time:             Sat 23 Nov 2024 03:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:11 +0000
Files and hashes:         1: CnKq68azHBrC6SaHqVEGgRLUDwQ.roa (hash: kBe1yvDF1uIbrfeQ5dIHhwfssij3tWOCGbwbidVpRRA=)
                          2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: V+05h4NJWgMPcZNIwWEQ2WJ3kBbyT1uGIXFyS6y+KQs=)
                          3: RnSlYPtAKmqOgxw0ibpxcDTBDP8.roa (hash: nPpG6pleThcmIUFYzUWaiqj2aa1FdZVWDsjeG/WWGWs=)
                          4: SXnLGFVuYmFTb4J5wZRMf8OD7y8.roa (hash: q2I1JegyR3p5/3Ju5fsO7sfwT0SnjQOWthHFWFSnlQc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:6f:9f:27:91:9d:68:7b:7a:45:e1:c3:ce:ad:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
        Validity
            Not Before: Nov 23 03:00:11 2024 GMT
            Not After : Nov 24 03:00:11 2024 GMT
        Subject: CN=ae4b4fc63d199ca52180e5e3361849d3fe16c41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:13:cc:a9:70:3b:3f:89:4a:ef:fb:55:85:
                    6d:d8:b3:f2:68:ad:df:c3:c6:11:1b:48:e3:e4:89:
                    84:e7:2e:0a:be:bf:7e:98:27:3a:17:15:bc:a1:ab:
                    29:aa:b1:8d:06:59:b1:fa:14:3b:35:6f:f3:dc:99:
                    dc:2e:3e:f0:2d:d0:e4:3c:8b:ff:8a:07:28:17:9a:
                    ce:01:4f:e1:b7:2f:74:56:72:aa:32:fd:3f:b0:09:
                    77:95:ee:b4:ab:b3:5d:81:0d:da:6a:e0:8d:64:f4:
                    52:19:55:25:3a:c8:b6:a8:48:bc:53:9e:c9:d3:cc:
                    e4:3e:4f:3e:71:c0:fc:a4:3c:d2:6f:f8:c9:57:eb:
                    e3:e1:f8:6e:10:24:e8:09:1d:2f:5f:ba:4b:40:93:
                    0f:15:0e:ea:f1:23:24:f6:07:1b:34:00:b0:eb:db:
                    49:d0:e0:6c:fc:f5:5d:62:99:a0:21:0f:35:03:4c:
                    81:eb:d1:05:f9:9a:d0:a1:02:b5:03:7c:3c:b6:68:
                    49:98:6d:1f:75:f6:be:d9:f7:95:7d:24:01:73:df:
                    0d:17:bd:40:a7:05:ff:dd:3b:9f:0c:aa:ab:24:6a:
                    1f:b0:46:c5:eb:b2:b4:d6:51:aa:7e:4f:ed:93:cd:
                    b9:d2:05:f4:09:a8:fe:22:82:58:62:57:e3:ea:1b:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4B:4F:C6:3D:19:9C:A5:21:80:E5:E3:36:18:49:D3:FE:16:C4:1E
            X509v3 Authority Key Identifier:
                keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:5a:27:29:50:2c:a4:64:34:28:ae:69:fe:c2:6c:2e:aa:
         17:3f:60:3b:65:cd:51:06:19:25:3d:5e:50:e6:fb:9c:0b:56:
         a1:09:2b:4f:58:3b:c1:b6:c2:00:2f:6d:c8:50:58:17:31:81:
         2e:91:36:8b:50:f4:51:87:b1:9d:f3:03:3f:9e:3c:9c:54:8b:
         12:87:33:2e:c5:fd:2e:2e:69:84:36:bc:b5:4c:27:91:69:4f:
         bb:b7:d0:df:76:77:fe:ea:a6:86:e3:e9:65:33:73:2b:a0:07:
         5b:33:e7:b0:ea:c9:60:59:b9:2b:09:91:22:e9:ff:91:0a:8f:
         5d:b6:fe:df:82:bf:5d:cc:9d:66:4a:08:43:a4:7c:44:f8:e4:
         7c:36:39:19:1b:d4:8f:00:af:f3:69:18:57:c9:06:73:38:43:
         4a:00:e8:db:fb:59:b2:ca:6e:cf:ec:f6:85:fd:7e:22:56:0f:
         d0:eb:dd:3a:b6:02:1e:e3:fc:f6:41:9d:8d:20:a3:58:da:3a:
         44:49:8b:a7:d0:0b:44:96:ae:1e:13:89:75:ca:68:9a:36:cf:
         c7:0a:2b:65:0c:04:3b:3f:94:6d:21:93:0b:c6:aa:29:b2:66:
         ef:d5:e9:64:91:04:7a:85:6c:06:48:14:26:da:f4:dc:30:05:
         88:f4:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:52 2024 by rpki-client on console-fra.rpki-client.org