Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          wjvImOZcr27yb+L3dOhT0Hk4N/9fa8KFxgezMj429Ss=
Subject key identifier:   97:3A:F1:54:F8:BA:90:1E:96:7C:E8:40:98:16:40:CF:0B:72:7D:9A
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       01938BF6EFBEE4301DF844ADBE3029635D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          138C
Signing time:             Tue 03 Dec 2024 10:00:36 +0000
Manifest this update:     Tue 03 Dec 2024 10:00:36 +0000
Manifest next update:     Wed 04 Dec 2024 10:00:36 +0000
Files and hashes:         1: bCKFiU5msrRwnLJjfedGdtT3E-U.roa (hash: TEu/r205SBSw5/jdNeZrXZsPyVmD1DdjvOIXoPfIPO8=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: nbsp0yAFWXufAMN719TDBBXP1+HAZF5R7JcQsSUnewI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:f6:ef:be:e4:30:1d:f8:44:ad:be:30:29:63:5d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: Dec  3 10:00:36 2024 GMT
            Not After : Dec  4 10:00:36 2024 GMT
        Subject: CN=973af154f8ba901e967ce840981640cf0b727d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:5f:ca:a0:35:a3:98:d1:42:7e:71:8f:bf:
                    25:2d:8f:2d:2c:f9:53:6e:b2:91:43:91:2a:f7:a3:
                    21:e2:5c:a6:49:9b:93:12:6b:76:c0:3c:20:73:f4:
                    78:d8:51:d7:00:e0:a5:98:81:f6:7d:04:a7:18:9f:
                    cd:ae:7e:11:54:e7:a2:e0:fd:8d:a4:50:ee:95:0f:
                    a9:f3:fa:29:04:5b:d0:42:f9:14:95:ce:91:29:cb:
                    66:2d:9b:52:9b:7f:22:77:f9:19:03:94:dd:be:b7:
                    56:1d:b5:04:50:ee:68:de:77:2d:37:e7:bc:17:eb:
                    56:50:16:4a:b2:11:2a:18:6a:8d:aa:e1:4f:db:80:
                    6b:d7:89:f8:5d:3e:13:9e:a8:90:7f:d2:36:29:85:
                    d4:c5:1c:64:2b:86:43:6a:6e:30:b0:89:aa:a5:91:
                    1a:b5:3b:c8:f9:84:fa:42:75:3c:1b:b3:df:89:04:
                    08:a6:68:07:a0:57:c3:69:fa:fa:ac:ba:6e:97:fb:
                    1c:3a:90:05:30:19:b8:fd:51:9a:b3:69:a0:35:d2:
                    d4:57:a3:06:6e:b2:52:98:81:8e:93:8f:01:3d:c5:
                    cb:c5:2b:20:8c:05:fd:1f:5f:67:99:7c:6f:98:82:
                    73:e2:fe:d2:08:74:90:75:68:9a:e1:bf:88:04:e3:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3A:F1:54:F8:BA:90:1E:96:7C:E8:40:98:16:40:CF:0B:72:7D:9A
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:16:cf:0c:e2:b9:88:bb:87:cc:52:85:74:37:50:d1:47:c0:
         ed:6a:f4:17:59:65:ec:51:11:74:d2:d5:78:f4:ea:36:37:c1:
         d3:40:e9:3e:30:69:0b:f2:f3:cc:fb:38:36:c0:d9:ab:1e:ee:
         6f:29:ab:54:22:98:f4:5f:73:51:b6:f0:ee:f8:88:f0:9c:87:
         4b:2c:cb:bf:0a:52:6b:11:67:b2:e4:02:82:9f:a7:bb:a4:a2:
         90:bf:c6:30:39:85:ee:12:04:37:c8:24:6f:ff:d4:c7:7b:04:
         d5:62:86:b8:0b:65:99:c5:14:9e:e7:ec:8f:7b:15:72:8b:81:
         38:46:1e:1f:be:38:c1:91:a3:cb:81:ca:75:ed:ba:d8:72:d5:
         39:31:71:94:2c:0e:5e:5e:fb:ac:fb:69:0c:9e:78:91:f9:66:
         4b:18:14:61:94:c5:f0:cb:d4:ae:5e:bf:06:3c:5f:22:8e:0e:
         8c:0c:8e:39:e9:29:30:4f:11:55:d2:35:24:d9:34:3e:7d:70:
         8d:75:17:4a:42:b0:8f:4b:6a:77:d6:ac:14:56:eb:6a:d7:44:
         df:f6:f5:65:3a:06:3b:58:59:b6:12:86:d1:6d:d6:3a:d0:c0:
         fd:1b:ed:ba:9e:cb:25:0e:ea:77:a7:9e:23:b6:1b:e3:12:7f:
         8e:d5:4a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:33:23 2024 by rpki-client on console-fra.rpki-client.org