Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File:                     M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier:          JVLRLugxnWAiAwy/6jvEWP3nSRJQw+a6WVdVyDCvmPY=
Subject key identifier:   83:B5:73:4F:1B:F3:29:16:AA:5A:54:C4:3F:92:01:9A:23:7D:CA:2D
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer:       /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial:       0193549BE04EAC80FFAE6CD6FC3E66A3CA94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number:          12C6
Signing time:             Fri 22 Nov 2024 16:02:01 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:01 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:01 +0000
Files and hashes:         1: EwuhEeBAQURVtdibRr3x7ZkGuoM.roa (hash: 73d9ZaW56zvdOokmC2Ih1rABWWHWAa8LEOTXQM3puXo=)
                          2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: KVSWrvPolpZ7XldQ/B5G6fM1a/neLb0dlQwQzDGFKM0=)
                          3: uhs8bgRw41k3aAftJwJBcx5iZQQ.roa (hash: jTz8wOQz69UD9cIYufEMXKJF3CMKnFX8joPso5O2RsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:e0:4e:ac:80:ff:ae:6c:d6:fc:3e:66:a3:ca:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
        Validity
            Not Before: Nov 22 16:02:01 2024 GMT
            Not After : Nov 23 16:02:01 2024 GMT
        Subject: CN=83b5734f1bf32916aa5a54c43f92019a237dca2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:bf:87:fc:6e:4b:d9:b8:c9:9d:50:7e:09:
                    5b:6b:b1:56:18:0b:80:12:25:a9:2b:42:d1:b4:53:
                    d9:89:60:b7:e1:6b:ac:8f:1a:39:18:b8:30:1d:ed:
                    15:57:a2:be:7a:1b:61:91:5f:7f:b5:10:17:80:59:
                    17:23:4b:79:b7:92:af:bd:78:c8:9f:ec:30:3b:19:
                    92:0f:1c:21:ec:83:e3:46:0d:26:c6:ac:dc:5e:43:
                    fb:08:59:4b:6f:c8:8d:66:2e:21:3e:2c:4f:13:22:
                    e8:00:ea:fe:0e:8f:50:48:03:82:42:f7:3f:ef:01:
                    88:2b:7c:23:49:51:d3:fa:89:9f:6a:ec:6a:03:33:
                    fb:7d:65:73:fb:8a:ed:bf:9b:86:ed:9b:90:b9:35:
                    86:ad:23:ce:74:f1:d8:a1:87:f1:aa:af:a6:57:5d:
                    5d:7c:54:18:0e:8b:94:95:da:59:5a:d0:df:66:d4:
                    ce:17:19:2d:73:23:c0:9a:7e:df:bc:30:4d:57:6d:
                    58:c0:6a:60:3f:59:06:07:44:58:73:89:2b:bf:1f:
                    02:f5:4f:41:2d:78:eb:3d:ad:be:da:21:de:f9:5b:
                    e7:76:e3:a0:92:97:fc:a1:b0:3d:b7:b3:ce:4e:b9:
                    b5:ad:fd:6d:10:39:03:8d:68:ca:df:74:8d:dd:8c:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B5:73:4F:1B:F3:29:16:AA:5A:54:C4:3F:92:01:9A:23:7D:CA:2D
            X509v3 Authority Key Identifier:
                keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:33:67:da:f6:6f:e3:c3:cd:90:6a:9e:62:01:1d:f7:2c:cb:
         a7:b6:b2:40:8f:7f:b9:db:ac:43:58:0a:0a:23:cc:01:95:e7:
         06:cf:6f:ed:38:9b:13:f9:a6:7b:77:fc:be:9a:ed:50:e1:8c:
         8e:00:2f:6e:aa:70:ac:79:40:9b:9a:17:39:40:0b:e4:f2:c0:
         b0:34:32:44:77:02:6f:42:7d:47:b7:f9:df:70:6c:0c:6b:17:
         6b:6f:6b:72:5e:c8:3b:0b:7a:71:5d:31:de:30:bd:c1:fc:4d:
         0e:04:34:e4:52:20:04:b7:31:d6:b4:28:d3:94:df:fd:f5:a5:
         0b:eb:47:08:89:41:37:b3:11:ef:0c:bf:46:33:51:be:5f:fd:
         11:71:29:5f:50:f6:5f:75:97:c1:e3:6b:91:9f:8c:9c:25:82:
         30:89:69:a0:53:de:ac:ec:be:d3:89:ad:d1:36:15:63:0a:84:
         4a:d5:b5:97:81:98:76:4d:26:34:d9:71:d4:32:6c:5d:e2:e3:
         f6:42:87:44:c9:f3:87:ef:e2:75:5b:1e:bf:a7:d7:3e:b0:1c:
         04:61:fc:93:75:37:bf:ee:a9:13:ac:39:8e:a3:24:0c:08:3b:
         c1:99:d2:3d:cf:91:7d:51:0e:0e:3d:e4:b2:01:ff:1a:ba:e6:
         ae:15:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:31:09 2024 by rpki-client on console-ams.rpki-client.org