Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
File:                     kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json)
Hash identifier:          4/rFVWRvDQxEzUgfbcJ5x6b+tN83JD/QE+OGFfP70dQ=
Subject key identifier:   DB:36:DF:E0:C3:2E:C1:B0:4F:E8:F5:51:B5:81:5E:DC:D9:8F:F9:ED
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Certificate issuer:       /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial:       01936B226EB94DB6119FACD93154E86D3109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
Manifest number:          137F
Signing time:             Wed 27 Nov 2024 01:00:38 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:38 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:38 +0000
Files and hashes:         1: DhyL9Ux9uiNEcbqwUG-_jrUBV-I.roa (hash: 1SKd6sCGTtlfVms4cxDJ68ywUjzp2YabeKryWwJy+CE=)
                          2: FFhuCrAqlIr4ykRzWQbKeUIEERI.roa (hash: ghja0rcRVCvxUWIXFejmKHVbRsrqnlGR10okuYy9uLg=)
                          3: NwEcHgCJGtjzHtotykCZN7jn6nk.roa (hash: 3A3C+Y+wrS/0lioY6Xr5vU8pQ51ae+9GC/GEARB95o8=)
                          4: O-EAOuq1EWcYfIiGqkh-JdQ7hk0.roa (hash: +rxP5S9LszZnXWPrTU+nwMEhlytmqNEZ9BEz3ywttCo=)
                          5: OLgCHEw2EOO61IoUQJ1vYAtAvjk.roa (hash: SG0CnjikiEd6KjjHbyrfPGIdV2yOL5aW/FuUL0mXgEc=)
                          6: U_5B0rVJsnsRIes1EQIZbEGBxZc.roa (hash: jb0yqfWg2SPjUl+flcECBXDY+nMA868FA8FxXTuN8FQ=)
                          7: UxVeKJGgaOtrLnGmjywBXwoP1Tw.roa (hash: OE1LL2kOJNUWiPm8uGl361Tq5ZZgzefn1HuJottA8v0=)
                          8: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: S5ykPDdWU+E7J7vd4fAQVLKW3HSQBs0ISiOmkNWxim8=)
                          9: lYFtGqVixP5Gd8GD6R8xlxVh-Gc.roa (hash: bO1F+0MuaDMii26zUzn9n9S0y2o+hKBLdDv2iKWMcG8=)
                          10: ulOAwKf8VOuvz5zvH4kDkiCCZCE.roa (hash: f0TIXlBCJaLFRYxtADtJbLsvPhAQEXTVfANfS02C+EM=)
                          11: yFR6LxSKV4H9oIeJTKHzQH2W6EE.roa (hash: dWDpd/t39C3FR12Wo01/sd11uq2c4Vz0Lf6w2v3Y+0k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:6e:b9:4d:b6:11:9f:ac:d9:31:54:e8:6d:31:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
        Validity
            Not Before: Nov 27 01:00:38 2024 GMT
            Not After : Nov 28 01:00:38 2024 GMT
        Subject: CN=db36dfe0c32ec1b04fe8f551b5815edcd98ff9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:c7:b6:73:f4:6d:2e:25:93:47:21:c8:08:
                    5e:d3:56:77:f2:3a:56:d4:e1:b5:f3:71:b5:64:6b:
                    ad:97:d5:fc:81:c0:c4:28:d1:32:30:6a:76:d6:23:
                    07:a2:fd:1b:ce:d6:0e:d0:c2:35:c2:85:df:94:32:
                    6f:9f:e0:43:09:71:a4:48:89:19:68:80:81:27:fc:
                    28:54:8e:b3:f6:f5:23:82:94:3e:c9:24:56:79:7a:
                    f8:9c:6b:d5:44:28:88:9e:d0:a2:27:88:55:5d:47:
                    d5:ad:be:05:cd:19:e6:cf:20:19:4c:da:5c:a7:85:
                    27:6c:c4:bd:c2:99:0d:d0:e0:bd:a9:ff:2d:4f:f5:
                    bf:40:be:08:92:d5:3b:3f:c9:ca:21:aa:4e:bd:2a:
                    bf:dc:71:fc:f2:c4:3f:c1:32:1c:30:92:44:67:18:
                    b9:a9:d2:de:eb:75:f5:f6:23:0e:77:ff:7c:52:5f:
                    7e:c9:c1:5b:b6:c5:8c:32:43:7f:a9:b3:fe:c1:8c:
                    95:c9:e1:db:bf:b8:45:32:10:e8:69:d1:f5:f3:7f:
                    01:c7:30:76:5e:40:65:d4:d7:61:9e:9f:e9:6b:1c:
                    e0:97:4d:39:cd:4c:92:69:29:b2:41:ad:58:6a:87:
                    2e:bf:1f:3f:d6:d1:ac:36:1f:fc:0b:44:be:fa:f7:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:DF:E0:C3:2E:C1:B0:4F:E8:F5:51:B5:81:5E:DC:D9:8F:F9:ED
            X509v3 Authority Key Identifier:
                keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:7d:eb:c6:08:cf:a6:59:e9:f8:dd:95:3a:87:d8:28:5f:
         53:d9:c9:c5:8f:7b:41:a4:c5:e1:61:93:73:3e:d4:2b:0a:3f:
         54:8e:fe:27:a1:eb:82:b8:cf:c8:f7:04:8d:d6:e7:c3:8e:0f:
         a0:4c:ce:85:75:85:eb:1e:e3:2c:35:88:0a:69:f5:4a:a3:e9:
         14:95:f5:3a:96:0b:4b:d9:20:fb:b2:76:0d:ea:22:c3:31:97:
         54:cb:54:b2:ad:1a:2d:c9:b0:14:c3:ac:3c:c1:be:6c:de:3f:
         b3:ee:da:93:bf:c7:13:c0:6e:92:aa:c6:05:17:e8:24:ed:2f:
         3a:4f:ed:a3:c8:e9:9b:df:28:da:69:a6:f9:65:a8:9c:cd:ec:
         ed:4a:cb:67:5d:32:0c:48:b4:a2:68:4e:d1:9e:33:5e:11:e5:
         e3:2d:5b:d0:c2:ff:37:79:17:37:c7:79:eb:dc:f2:a6:51:22:
         4e:45:a0:fc:f5:ae:84:94:8c:8a:18:ca:c7:89:bc:b0:2f:ae:
         8d:dc:03:4e:ab:e4:3c:db:25:e3:cd:e0:79:6f:fd:a9:72:17:
         8f:09:10:1b:92:e7:8c:5f:80:b3:bd:81:0a:27:51:ad:84:22:
         8a:88:17:5f:07:20:6d:d2:42:03:67:ae:79:34:0e:5b:a2:b2:
         61:a9:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:31:15 2024 by rpki-client on console-ams.rpki-client.org