Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          YIT4cucMRezb+aTk6s0j7rY6yhmTyAL1kLXEV4D/hpY=
Subject key identifier:   BA:8A:3D:71:87:A6:7C:39:CA:D6:18:87:2E:E5:37:68:5F:EB:51:59
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       0193549B0E25C93078EABE6E6D3102ED37F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 16:01:07 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:07 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:07 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: iw4KhCY4HqRSDMUMmjm6LRS+78yyaelsBnX7oD5yGNw=)
                          2: C73J8CW86S-V3s54I-lVfgyIKbo.roa (hash: 22SvsroMb+DNtrI4AdcNF+UBGk2oM+/nB8dyhB6wRAw=)
                          3: HVMwvoqiQxnWp1sWSOHVQE0zxNg.roa (hash: d7SKnCW8ku4fGrlZ7xr3HJS4+umCvsIcXc5uSkZlzas=)
                          4: JT5nYGykUQ24zAs75PBCm6hvjMI.roa (hash: L/SGQx0E6hjlNQpLGW6pGHpx3Y7VaSUiiEgz416DWqE=)
                          5: aTxlaFN4mu5w3B9fPU0VoYRZ8rw.roa (hash: DRxaaJ5dblHp3qqZiPB9qyOZJ+pEdC20JKMWpEOqrgQ=)
                          6: y3w4ETTqstMaPLA6xy2xBvSIRiM.roa (hash: X9y/3aqIJ54xW0YOCEY0N2uzFAM2RD+9jafi4raTwds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:0e:25:c9:30:78:ea:be:6e:6d:31:02:ed:37:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Nov 22 16:01:07 2024 GMT
            Not After : Nov 23 16:01:07 2024 GMT
        Subject: CN=ba8a3d7187a67c39cad618872ee537685feb5159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:1d:fa:f7:a6:75:9c:37:31:9c:b8:ac:2e:
                    bb:f5:33:b6:81:88:41:ae:a4:54:66:d2:a7:5c:32:
                    2a:2d:cd:cb:96:f9:dc:ec:b3:e7:69:f0:77:07:0f:
                    9a:df:ce:01:46:f7:53:5f:83:41:af:c2:8f:c1:4d:
                    96:98:09:a5:79:e5:fa:1a:3a:b4:b4:d6:70:ee:7e:
                    3a:f5:43:e2:10:04:f6:60:d2:00:1c:d4:ca:d1:75:
                    78:79:1d:5e:91:ce:47:20:17:d6:cb:02:89:ec:39:
                    b8:81:d1:a0:9c:f2:80:52:ec:cc:7d:1d:cc:74:03:
                    37:e8:b6:cc:9a:68:40:01:ee:54:fd:f9:e3:b7:7a:
                    23:3e:e3:02:f8:cc:5a:b9:08:6b:da:fe:f5:67:62:
                    25:2c:29:02:62:7d:7b:2b:68:27:d7:41:d3:74:ae:
                    cc:ee:52:ab:93:5b:5c:c0:bb:40:05:08:0e:19:40:
                    28:44:a0:47:14:3b:25:20:41:96:79:6f:5e:21:81:
                    69:26:46:25:64:a9:6a:b6:42:45:64:75:cf:e1:8c:
                    d7:bc:6a:ba:47:9a:ff:1a:5a:a7:48:31:74:67:f9:
                    a3:10:8f:07:d0:c8:a2:4a:d2:c9:37:9d:61:26:91:
                    bf:2d:e7:1a:7e:e3:8f:23:62:5e:0f:19:2e:ae:05:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8A:3D:71:87:A6:7C:39:CA:D6:18:87:2E:E5:37:68:5F:EB:51:59
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:64:55:f3:fa:29:06:83:28:54:c7:81:2e:4b:ab:45:9c:
         fc:2a:6c:58:be:4e:da:ea:bf:72:e8:d4:c4:53:14:ba:28:36:
         31:75:3b:86:c8:d7:79:9b:90:84:c2:40:df:72:0f:a0:2f:44:
         4f:13:7f:9c:0a:d4:fe:08:1a:7d:ed:e9:14:77:95:70:3b:3d:
         1b:6f:42:0f:83:0a:b8:27:cc:41:44:69:7f:bd:af:b6:a8:c1:
         62:e2:6d:92:29:7f:e1:72:8d:77:5c:50:45:e2:08:cb:1c:79:
         aa:72:df:51:35:c8:d3:4f:5d:bd:91:d1:e5:27:b8:8a:69:11:
         a1:87:d9:7c:db:9f:03:6d:17:2f:cd:6d:7b:dd:8d:53:b2:ec:
         83:30:da:c4:6e:1a:ae:ac:ac:8d:ee:6d:f4:ec:86:0f:e2:ef:
         a8:10:5d:45:cd:d2:46:52:cd:78:9d:96:b0:ed:f8:3c:72:88:
         57:09:70:3d:78:ab:ca:82:35:99:2a:64:3d:47:61:94:8a:b6:
         15:a5:dc:dc:85:63:2a:61:2a:b2:5c:43:b4:3d:03:ae:ba:d9:
         f7:93:ba:e3:cc:66:bc:a0:10:0d:3e:59:06:89:81:c2:78:c7:
         b8:61:cd:1f:1f:05:de:bd:0c:7a:3c:b4:1a:fc:ad:c8:83:fc:
         e3:41:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:58:10 2024 by rpki-client on console-ams.rpki-client.org