Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          T1WtQRbNCWtXSpENIH2WlB26JFcUd4JFm3eFFoqIx94=
Subject key identifier:   AF:D5:44:06:9E:F8:5F:FB:C7:92:44:78:AF:3D:16:87:50:7B:EE:84
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       0193568B3342F65D5D9FF6638803AF387E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:03:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:03 +0000
Files and hashes:         1: jHJi2SE0kVi1s4qBbqBpBKsiFVM.roa (hash: SBSPw52zX2BgK2sleJZjksZDS+nERJn9HU7lTLjL+Hw=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: +x4/h/uZCeevT3gHnwMny0DAYwuPHwiH56fKMX9ExQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:33:42:f6:5d:5d:9f:f6:63:88:03:af:38:7e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: Nov 23 01:03:03 2024 GMT
            Not After : Nov 24 01:03:03 2024 GMT
        Subject: CN=afd544069ef85ffbc7924478af3d1687507bee84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:16:c5:b8:a6:5d:0d:de:55:96:47:9e:46:
                    6c:60:6c:af:dc:ab:c5:85:3d:0c:cb:e3:b3:18:ad:
                    9b:e8:c1:ec:20:05:2c:de:40:34:f6:0f:b9:c9:d6:
                    07:e4:98:9e:3e:66:3c:d8:88:76:19:81:5c:37:26:
                    2e:3c:39:a5:df:ae:e2:f0:31:cf:b7:08:0c:57:4d:
                    55:db:e2:24:ce:91:58:25:5d:32:4f:dc:ac:06:22:
                    34:41:11:e6:46:e5:60:97:3f:ae:90:17:c7:68:7e:
                    7b:12:14:06:5f:03:d5:25:43:fd:80:bf:f6:50:e9:
                    5a:e5:24:1d:7c:b6:af:ef:e5:a2:44:f5:32:cf:95:
                    a2:96:b6:2f:a8:e4:dd:7e:5f:2b:a5:c3:a9:40:08:
                    bd:64:7d:25:c0:13:b2:a2:db:ca:a3:44:d4:bb:af:
                    3f:33:14:34:74:3d:62:1c:c7:8d:ab:c7:da:9e:2f:
                    b7:25:56:34:4b:ab:8a:88:d8:68:5f:2d:b0:a2:7a:
                    ae:5a:a2:e4:54:39:c2:43:fe:40:5d:ae:36:a6:cb:
                    f6:c0:f5:66:5f:46:54:bf:08:38:11:5c:15:c1:bc:
                    f5:3f:44:5d:37:39:00:3d:05:bb:52:6b:08:78:d0:
                    0c:df:05:de:e4:5b:50:3e:80:c6:77:38:32:bd:fa:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D5:44:06:9E:F8:5F:FB:C7:92:44:78:AF:3D:16:87:50:7B:EE:84
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:75:d9:60:0a:c8:62:8c:da:b0:e7:c9:a4:5d:84:f2:8e:
         f3:be:f0:c4:4d:ff:b9:6e:16:cf:e7:4b:7a:d4:29:62:86:fe:
         08:1d:45:52:5e:f0:5c:d1:48:fd:5b:cc:a5:00:1b:bb:7a:23:
         1b:5a:93:da:93:0d:bc:7f:81:48:e3:ab:69:6d:40:09:21:61:
         67:cf:21:be:33:7c:b9:0f:95:df:ad:63:95:52:26:3f:7e:d1:
         c6:c0:b3:51:b8:7e:de:15:f0:d4:5d:21:b4:cf:86:79:a1:0a:
         76:99:8b:cd:cd:45:db:37:57:fe:30:3d:95:05:19:22:f4:04:
         fe:02:13:a7:4e:a4:57:90:4d:6e:b5:8a:ff:6b:46:17:b2:4e:
         5d:be:10:a7:8b:fe:c7:1f:77:0d:29:1c:3c:bb:0a:9d:fd:cf:
         0b:e5:c2:94:d4:ff:c8:f5:c1:59:83:5e:7e:f3:82:29:12:3c:
         56:a2:ca:d1:74:89:99:cc:d2:2c:0a:9b:c3:82:74:33:bb:4c:
         94:a9:ac:c7:3f:a7:25:72:d9:c9:33:20:b3:c1:11:af:3c:b2:
         ca:af:a2:1c:d4:81:40:c0:8a:a7:ab:c1:ef:46:2a:b0:8a:9c:
         15:1f:28:3f:9f:e8:b7:8f:13:1f:a2:76:e0:e6:8f:b9:cb:20:
         b9:e3:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:18 2024 by rpki-client on console-ams.rpki-client.org