Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          eJXhtvjLScpkp5wQxjgnXuHh6Ra9AS01dBLuu4uWhuQ=
Subject key identifier:   86:85:BF:80:60:59:ED:52:1A:1A:F2:1D:72:CF:87:F1:23:3A:3D:DF
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       01935651C996E6CDA2F06ABFFFD6F1B2823E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          1390
Signing time:             Sat 23 Nov 2024 00:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:20 +0000
Files and hashes:         1: 7ZZGOXbySxIsP2eqkNIGXblY5Uk.roa (hash: FaJm/DpFybBOAzJxnixKr1dfoYkzm9Xv/BA129TIisQ=)
                          2: GoMvgoXou5K5J_FDOl4iPJf943E.roa (hash: Cx1+5gAZhBGiyWvUMjaVkE8ngdkDRzwMY9RX2wiUejw=)
                          3: Hs86o8jcPca1S2zRsc8_rXn6Nyg.roa (hash: kNV/zf8gMzHEiJN8UDPPCDcG+F5jNQe/fRdTwpdDNEM=)
                          4: JVlNxuwmte_YAG3KTKrsumqKRFM.roa (hash: BsBXvAsoSH/fPY0u4Ncz+daH2awcg1eksfROcOepPWE=)
                          5: LAJuaNrwoUY4aZ9Dpen6AmcK2EQ.roa (hash: +DtlzXzyfCLOe/jVsDDBBBXs4UOwMUXffeiherIAiCk=)
                          6: Q9afaF_f7DEIoVFyR_Etja3rWrY.roa (hash: xI63as0J2f18moZpoGR8oIuqJSNei+zQkIA3Y4EXuvo=)
                          7: aLcjKNfBxPiBC4PBcUFrh8VDrSo.roa (hash: 5ag9blLQ5WSaDQ1hqk7yQgTJP1MdKJbmc9rQASQnBHA=)
                          8: d9DMzrghhOxLm1xFHPABSqxhAv0.roa (hash: +F4BmGWj4q6c8BC/lL3mNRdJ+Z0Uc1Wg5DwWFNpG0yk=)
                          9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: g1qH9cBs1oEjGKNckirZt0wRHTJzdiFEuGEXNKpSp5A=)
                          10: ik0dBfLIH7zcHam4Ghb7aIqA-CU.roa (hash: 8S+xbJMoOWtqH93QFvZ67rXiEnzozVd57YhuJBLg4/w=)
                          11: nQlDv9Nnj3DEn-SorGDbXwit5lI.roa (hash: k9882G6y1TgrhT5UmkQzqcClNSYyiMP1Ezq1A2ObPqc=)
                          12: qnxuSQ_77tU7cI5WpI_SIb0bRmc.roa (hash: gwXEb7F7XPZVZBmPWjk+PgPa7gBx8XzqKnlSLtHcdp0=)
                          13: x5MOxIZ7q-qJkqyaseWTTTeL77g.roa (hash: jdtR9DRApAC63bxwU9GlbdYjqDkIhx2eTfzVkPHuVFs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:c9:96:e6:cd:a2:f0:6a:bf:ff:d6:f1:b2:82:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Nov 23 00:00:20 2024 GMT
            Not After : Nov 24 00:00:20 2024 GMT
        Subject: CN=8685bf806059ed521a1af21d72cf87f1233a3ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:cf:a5:5e:23:4e:af:7a:f9:cc:40:84:63:
                    8a:cf:79:1e:ae:ba:6d:51:33:db:c1:11:43:dd:62:
                    10:a1:14:25:f4:2f:d1:74:e9:fa:01:71:f8:d9:5a:
                    7d:1b:8a:b6:b0:61:26:90:1e:8f:25:78:49:1a:b3:
                    9e:5d:f4:e0:59:c8:cb:14:e0:7a:6b:ff:c3:d9:72:
                    bd:5f:9f:b6:3a:f9:ce:65:c8:ad:c7:54:f2:d8:75:
                    be:b1:17:4a:1a:03:73:e4:e2:d0:ee:fd:73:22:c9:
                    ff:03:13:64:26:52:4a:8f:74:c3:fe:89:5a:f8:ba:
                    77:c1:af:17:9b:a3:7f:36:69:65:a8:8e:53:a4:a4:
                    a5:d0:77:3a:58:d6:61:f5:1d:d6:d7:2d:8c:92:44:
                    9c:e0:c5:86:a8:80:e0:07:ac:8a:2e:96:81:8a:49:
                    17:f1:78:27:b1:7e:0c:41:b9:61:13:12:fa:a2:3d:
                    ec:bc:d0:d4:2d:63:60:7e:00:b0:f5:ab:aa:b5:7a:
                    1b:4c:02:95:02:ac:2e:03:87:c1:19:2f:6f:4a:42:
                    34:8d:93:04:c4:f3:1f:eb:26:2e:ef:96:c7:6a:79:
                    9c:dd:b1:cb:bc:cb:0f:39:18:92:8f:39:ab:39:95:
                    48:ca:89:51:93:f9:d7:6e:66:2d:e1:8c:2a:15:86:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:BF:80:60:59:ED:52:1A:1A:F2:1D:72:CF:87:F1:23:3A:3D:DF
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:25:55:ce:3f:04:8e:2d:c9:ba:4a:ed:80:46:33:c5:4d:d2:
         3d:3d:21:22:bd:bc:de:b2:35:4f:1c:0b:e6:df:d9:f6:41:22:
         22:f3:3d:48:7d:01:11:bb:a4:fc:d0:ae:cc:d1:77:e4:1f:2d:
         a9:71:e9:fd:94:65:29:72:5f:bd:8e:9b:0a:ad:01:0c:92:f3:
         d4:b3:f4:cf:65:ae:52:fb:07:50:8e:ef:78:5b:6f:77:85:2e:
         0b:5b:96:fe:af:d1:cb:61:c6:15:e6:ee:7d:f1:ac:cf:77:ff:
         3c:90:f8:3d:41:8e:3e:61:cf:72:fc:a6:34:94:36:cb:42:33:
         ca:f5:87:f4:be:75:54:2b:c3:c9:cf:b6:c0:03:ab:da:7c:6e:
         24:f5:d5:0c:39:b5:dc:b7:a6:5a:0a:62:43:89:d9:96:60:95:
         03:43:e0:76:93:b7:98:89:b5:e4:f0:27:e4:59:93:d4:ef:2c:
         1e:b8:0b:ec:bd:b8:5b:4a:ec:8a:14:d5:2f:78:64:d0:86:24:
         1f:fc:cb:67:1c:1b:56:d3:92:06:fc:7a:6d:65:2b:f3:c1:79:
         b7:24:d7:bf:60:5b:95:f8:21:30:db:54:e6:06:ec:f4:bf:cc:
         f7:fc:9e:82:8b:90:fe:d9:4d:57:51:c4:13:c3:89:3a:d6:6c:
         0d:e2:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:53 2024 by rpki-client on console-ams.rpki-client.org