Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
File:                     gyhvptp9JS54KPhJI_VZGRQrAH8.mft (raw, json)
Hash identifier:          DDYvxQPJGz9AEqGxgI10nnna9TfAvVsheJQOj+Xwf7k=
Subject key identifier:   23:8B:90:F7:C0:98:63:BC:BA:C4:9E:76:62:02:91:53:6C:55:3F:1E
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Certificate issuer:       /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial:       01936A467CDFF2F62E12D3018D86646ADA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 21:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:24 +0000
Files and hashes:         1: 4_ARmldoYjQlfYJXNTR1Q_yZ9KE.roa (hash: nOfzdm/L337vXfKTfj7hspYN+7zCD9cBym6gy6ywVy4=)
                          2: OWUru03ttk8vTI7jO6n2nGkHuVQ.roa (hash: Gsf7KNcog9avaA5G6BDe6X+xU8y9yom1ykOgK26V95g=)
                          3: UlNP0XVpQL8yx9t0WY07DOo9clg.roa (hash: 6z2hqxnhcAqrW+0qirQsneZFJdEzE2mKi/+NVqPRUwI=)
                          4: ZQ5OAAV6EJIJn3rL4kGgiIXzy88.roa (hash: LEB3SN5mpwdKHZE8ZTUlpUajjQB1sefUlhOdKM1MwR8=)
                          5: gyhvptp9JS54KPhJI_VZGRQrAH8.crl (hash: +GYqJFKqDAEA9UNxJ49fF2xG+/V7NfiCj4xQTwduiAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:7c:df:f2:f6:2e:12:d3:01:8d:86:64:6a:da:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
        Validity
            Not Before: Nov 26 21:00:24 2024 GMT
            Not After : Nov 27 21:00:24 2024 GMT
        Subject: CN=238b90f7c09863bcbac49e76620291536c553f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:b6:af:53:06:8b:4a:ce:ab:ff:65:0f:20:
                    cd:22:a6:2a:ed:1f:7e:3b:dd:8d:97:a3:c7:bc:c3:
                    28:40:68:10:81:4b:4c:07:1e:3c:12:a2:30:80:9c:
                    9b:e5:4e:83:df:6e:65:bf:7a:10:ee:b1:96:83:64:
                    01:56:14:1c:f1:3a:2d:1e:06:7d:28:be:7c:c6:21:
                    5d:8e:a3:61:81:19:7d:cd:03:ba:26:ae:96:c8:4c:
                    c7:8c:26:0c:03:9c:e1:17:f1:e1:0f:46:76:45:92:
                    0b:8e:d8:5a:a2:24:d9:fa:2c:55:78:d9:19:49:67:
                    92:6c:42:01:a3:58:60:d2:63:a2:ea:0f:27:ae:37:
                    c7:92:8c:dc:3c:04:8d:8f:89:8a:44:16:bf:74:00:
                    13:94:22:fb:1a:83:a5:de:b8:5e:d6:93:b2:b7:8a:
                    16:e3:e3:48:a6:7e:96:3f:4e:96:70:ec:1b:1b:4a:
                    d3:eb:c3:53:7f:66:30:e6:f3:d4:4e:41:2b:74:69:
                    63:55:13:38:56:84:5a:03:a2:d1:53:4a:95:7f:08:
                    54:83:0a:23:03:54:cf:10:f1:b2:be:c9:d8:20:76:
                    61:11:6c:15:8b:54:a5:8f:be:fe:97:37:15:84:2b:
                    94:36:ba:82:0c:10:57:19:71:59:46:7f:96:65:6c:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8B:90:F7:C0:98:63:BC:BA:C4:9E:76:62:02:91:53:6C:55:3F:1E
            X509v3 Authority Key Identifier:
                keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:bf:4d:fa:b3:f1:df:eb:8b:9f:87:1d:92:6b:ad:43:80:
         29:e8:99:c8:ce:73:23:6a:ae:30:95:da:d7:25:c6:52:03:68:
         6e:21:f2:dd:1b:4d:05:d6:61:44:ea:ef:75:4d:e7:0c:2f:15:
         60:2f:0e:66:0d:10:48:fb:4e:bd:f3:af:ec:ec:ef:83:1d:23:
         d9:7b:bb:b6:d6:43:d0:e7:e5:08:50:dc:dd:f0:84:04:37:37:
         a5:e2:4d:d1:5b:b6:f9:43:24:47:21:81:14:1f:ad:b9:72:03:
         68:14:21:7d:6d:f2:cf:3c:77:57:4c:a1:76:20:24:2b:a1:78:
         3c:cb:80:ab:38:20:37:36:c2:78:91:65:22:db:91:6f:0a:73:
         5f:73:78:0c:a6:03:dc:fe:fe:78:f7:21:02:9d:a8:6c:a8:3e:
         cc:a9:85:f0:b2:ad:f3:12:c0:f2:7c:4e:e3:8d:c6:14:73:3e:
         67:c0:ed:2c:ee:b6:d4:7d:9b:0f:5e:3d:18:ad:b0:ee:fd:36:
         0a:2a:9a:34:ac:01:a9:36:fa:ea:d6:2f:a2:48:e0:2b:80:c7:
         c4:27:ee:a6:ed:8d:22:ae:7b:02:e3:4c:b9:44:01:ae:f6:ca:
         65:26:a7:fd:1f:c4:83:76:57:6d:b6:7f:a5:ac:b3:94:82:cd:
         77:88:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:40 2024 by rpki-client on console-ams.rpki-client.org