Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File:                     zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier:          U29aQMtd8jqiKAe64igZ08mtYzsnTXww4pTfnIc9Ibc=
Subject key identifier:   61:52:EB:65:9A:EC:8E:AE:58:6B:24:F5:99:BD:5B:E6:BF:E5:8D:5C
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer:       /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial:       01935162EA26964C5D52C6EA6F9D6A3BA884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 01:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:57 +0000
Files and hashes:         1: AS-dO_s-LEVEagK6Tz2sVI4iVAs.roa (hash: 4WpGlLubfLH/LCuMzX6b2yFjOt/1n/ALa364DMOdXV0=)
                          2: QWb3MFmyW_4vyV38WujsgWT-yMw.roa (hash: McXzbbSbbi6Z0YlgBtzpbULQT/blKLAbUJ8PFz87TJs=)
                          3: ZLx4wVt1WtBpJ8WKTGIIRVEwqeQ.roa (hash: htxgzkTGNnAvlGwg9CHlbhDoegcFnV8BDnIAcsgDhUg=)
                          4: iqcN1W7uW9j2oY8SrsUlR6NSUKM.roa (hash: f3AmjdjZbI2uW9hsrmOaRSGMv2lb3q/ivFqs8lUa7go=)
                          5: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: LxOIhxGmQbFRjK3MSXc5wuVU87UvN7Ku60rIXSLqCaU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:ea:26:96:4c:5d:52:c6:ea:6f:9d:6a:3b:a8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
        Validity
            Not Before: Nov 22 01:00:57 2024 GMT
            Not After : Nov 23 01:00:57 2024 GMT
        Subject: CN=6152eb659aec8eae586b24f599bd5be6bfe58d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:82:28:d3:86:66:8b:ce:f9:df:23:76:14:
                    64:55:7c:94:f2:ba:ec:90:76:35:d2:77:92:6b:c7:
                    11:30:31:60:32:54:a7:5d:1b:36:5b:a3:91:95:e5:
                    f8:94:cf:78:03:b8:e9:2e:f6:b4:84:0c:9b:31:a8:
                    e1:bf:70:9d:b0:83:6c:cf:86:f6:b4:13:61:60:79:
                    6f:19:12:f6:cf:29:06:2c:a3:5d:ab:2e:fa:fe:8e:
                    6e:2b:e8:90:62:46:f8:39:d8:c5:ea:fa:9d:b7:c0:
                    26:31:b6:86:4b:16:b1:b4:82:76:80:22:66:81:92:
                    79:d8:e1:35:28:7f:48:97:2f:51:18:46:56:da:25:
                    4f:61:20:d4:e1:22:3e:90:bc:ad:58:8d:3f:24:a3:
                    8b:9f:27:e8:5c:d7:1a:52:06:eb:10:93:c4:54:14:
                    e7:cf:8f:85:31:79:65:3e:02:99:b5:21:aa:da:89:
                    3b:3d:33:88:2e:94:c4:c1:40:30:a6:85:ac:cc:0c:
                    09:28:8c:c4:9c:f3:e9:98:e1:68:7f:99:26:e8:78:
                    a1:f3:b1:cf:9b:d4:03:0a:6a:22:f3:a3:05:51:88:
                    aa:c6:45:da:7a:37:60:df:27:a7:fd:1e:71:6a:bc:
                    1a:43:f7:bd:0a:85:a6:96:26:b1:da:82:0e:48:c9:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:52:EB:65:9A:EC:8E:AE:58:6B:24:F5:99:BD:5B:E6:BF:E5:8D:5C
            X509v3 Authority Key Identifier:
                keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3a:cd:92:c6:6e:db:17:9f:31:6a:52:bf:70:6a:81:9d:1e:
         75:7d:60:e9:9a:8c:9e:77:02:47:24:14:d1:f5:92:6d:06:5f:
         64:aa:55:76:36:f5:61:25:1c:81:db:ec:91:d3:c5:93:78:2d:
         bb:ef:2a:81:be:27:c4:f8:2e:fa:77:c7:03:8c:64:fc:eb:51:
         8e:3b:0f:03:05:e9:7c:94:bc:82:8e:e5:db:cd:fd:c8:68:3e:
         67:f3:81:7e:e2:74:c4:a5:e4:40:7d:1d:13:17:93:48:2c:4b:
         c6:1b:56:1a:64:df:d8:26:6a:d2:ba:80:69:ee:66:ac:37:1a:
         e7:2d:8c:71:22:14:40:fd:3e:34:dc:da:14:06:33:aa:17:75:
         54:1c:73:8d:ac:9a:dd:7c:19:06:08:37:70:33:c8:8b:5c:b3:
         85:7a:47:22:54:dc:d6:2c:44:37:24:a3:15:55:c9:06:f6:bd:
         a4:c6:01:e5:02:0a:47:a3:c8:fe:34:f0:6e:a2:75:f1:19:76:
         16:d4:2b:de:ac:32:d0:41:c7:c5:5c:ee:f1:46:20:91:ac:e8:
         e1:09:83:91:25:12:78:8f:ef:58:a2:f0:c2:41:1f:63:85:2e:
         53:9b:ef:27:b0:53:90:1d:39:66:53:b1:2b:58:58:12:f7:c7:
         fe:a0:97:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:06 2024 by rpki-client on console-ams.rpki-client.org