Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          8JF+oQDbIA8S82F/Hd9mNdbNwC29GKLhD3inLXQqewY=
Subject key identifier:   92:AB:ED:11:BB:6E:4C:B7:0A:EC:76:48:8F:B8:62:D1:BA:73:CE:A2
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       019352750C2EE313D8C10E636A157619FED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 06:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:22 +0000
Files and hashes:         1: 8X1PRYPmNXj_nVFKPAtlxtT3zTA.roa (hash: x31133Z7Mg++KdLJpRRjAShgGN2+l0RZVha3A/5JQBg=)
                          2: EBk93I4900QqTMvZRzqyplsvM3c.roa (hash: s1i1d8VQsWm5nV3CVj1X9heIVd4MWnvwOkF7NpRyouY=)
                          3: JlrRrhy5i0y0C4YLN9asYntIdNw.roa (hash: WwIUsjrqtXmbFpF4GI8MU9JnE4Smd0htBF4ppivEWA8=)
                          4: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: GvR3QyvHQAoJVWGSn1zyoD3/A19OTfpBkhIUc6f+1QA=)
                          5: UpAIYdHVaETBz-8k_UNZLyJboys.roa (hash: 8yu2yU2ku+dGcf+5j/6HmRic82BIbu6UDbd0YfwKONo=)
                          6: bjncL9hKwd0kphuwCqwycSKBlyg.roa (hash: cwf933sFullHyR2a7qrDEJKehtwHXhyQsp0M5XlepaU=)
                          7: lAh6dTOl6hK4NmKInZdTw4Fj6pM.roa (hash: 92Sapu5C3PW5WM6kwVh1AonYBdKtonqeTFNAU2tqLGY=)
                          8: tBDOfp78QQgiiS6CiyoFLxXj5tg.roa (hash: BKA0WERBhvktRgfff7zBBfzGNLJTMrK9WQO7PtSPclg=)
                          9: yFaQpt2HRHWCmo4eSPrCEXVRWbM.roa (hash: t0f/9yN9ywI66yqf1F7mp1gOG2XAL24/o+CTFS4OToQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:0c:2e:e3:13:d8:c1:0e:63:6a:15:76:19:fe:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Nov 22 06:00:22 2024 GMT
            Not After : Nov 23 06:00:22 2024 GMT
        Subject: CN=92abed11bb6e4cb70aec76488fb862d1ba73cea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:04:f9:4d:05:13:91:f4:10:2d:99:3d:71:
                    bd:74:bb:36:9f:cb:01:c1:63:ab:48:b6:d2:91:7b:
                    db:25:2f:41:f1:cd:ad:69:0b:5e:c1:8b:58:48:75:
                    ee:38:4c:4f:e0:b2:13:97:37:b7:9a:60:2b:3a:5d:
                    cb:a9:eb:63:66:2f:67:69:89:2c:9a:ae:f1:5b:f0:
                    5e:ca:09:6b:c5:60:96:15:67:ea:7f:5f:62:f3:93:
                    42:72:24:6e:a1:9d:84:fd:03:d6:70:dd:6a:2f:2b:
                    04:23:6d:d5:76:f0:3d:2a:2d:62:d5:98:4f:8e:bc:
                    48:d9:8c:71:a7:1c:26:d2:ce:3e:fb:8a:bb:2f:ed:
                    dd:d5:30:f7:66:58:57:b6:84:62:3b:39:ad:1a:8d:
                    4d:2f:92:f5:a4:58:c4:f3:7e:85:b7:ef:25:78:e9:
                    6c:01:6c:6e:54:87:86:b5:c3:b0:1a:03:03:02:25:
                    1f:98:84:55:c2:34:24:c0:bb:b6:8c:04:94:68:43:
                    43:83:53:6d:3e:fc:62:f2:43:aa:b4:11:cc:b3:ab:
                    c8:49:c5:59:af:81:38:e2:99:85:1a:e8:11:51:98:
                    57:0d:c6:fe:f0:e9:5a:be:15:e0:96:ca:e9:4f:78:
                    a5:6a:e3:fd:22:ec:12:83:43:f6:41:c8:ac:f1:56:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AB:ED:11:BB:6E:4C:B7:0A:EC:76:48:8F:B8:62:D1:BA:73:CE:A2
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:3b:b0:cc:cb:0a:57:58:7a:df:0b:01:1f:9b:c5:73:e2:
         de:17:3b:7d:a1:63:7f:8c:ea:c1:24:b8:6d:92:25:42:19:6e:
         9d:8b:46:3a:8b:fa:e0:49:b7:cc:7a:23:07:d0:46:7e:02:b4:
         04:c2:8c:fe:e4:c4:79:aa:00:d5:7e:d9:28:c4:0f:cc:72:bf:
         b5:12:e7:93:d6:c3:69:9f:c2:8a:e8:d0:72:90:3a:5f:d8:76:
         a9:77:dc:12:e7:07:19:19:3a:16:b1:b9:e9:98:19:dd:06:80:
         08:09:fd:44:8f:08:ed:18:9d:a0:54:76:2a:ad:cb:17:e1:18:
         53:f8:65:ca:47:ef:5f:10:32:12:45:65:99:8f:f3:65:2b:dc:
         10:92:79:4a:fa:ff:ac:31:61:79:1f:c1:7e:f7:21:02:16:77:
         5a:03:92:40:66:f6:cd:7e:eb:4e:3b:45:86:45:37:eb:3a:1c:
         e7:1f:95:89:56:b1:5a:32:34:63:e2:bb:78:1d:f0:31:39:9d:
         d5:41:a3:78:a1:6d:77:c7:f3:56:72:be:b7:38:0c:65:e3:4e:
         a0:2e:ec:ff:67:cb:34:ee:99:e9:c6:0d:cd:05:c0:46:4f:f8:
         a9:9e:a3:9c:24:0e:24:3b:7f:da:5d:f5:de:cf:0b:51:a0:a5:
         be:e0:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:07:37 2024 by rpki-client on console-fra.rpki-client.org