Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          xOoaDHEajVoAmnrUFMAcJd1NB7/tdKv/CWGreSseaTI=
Subject key identifier:   DA:18:62:3F:0C:AA:A7:CD:B9:BF:1E:23:C7:93:FF:D0:74:EC:73:28
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       0193561AF999E6DBB63E6D70B54322E30931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          137C
Signing time:             Fri 22 Nov 2024 23:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:28 +0000
Files and hashes:         1: 1-WJDAzNtHm2UqXpk8MBNCsdodsM.roa (hash: WOMo94F2AinAAcBVEVkKj9jZ8HclEtjkWhJVwJerRC8=)
                          2: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: zilIA7Ainw6M7ktFQgTWAz79zoDUKzwAkodnjwAz/Wk=)
                          3: QIxE4l_2YUwEBIQmacEYR4sUTC0.roa (hash: 27OruYbPLTAwFpPL9OyqaMKt8q14gAIkSdZKm7cus68=)
                          4: UZs7JjwS9VddEzxNIZsMg4I3YGY.roa (hash: mtUV1GUWjR01Jyul5DDVShYfohD2GuK2n3SbnE+lGBY=)
                          5: VlKAYHQUbZsjESP3HmqmaqQ6SWw.roa (hash: 7OVwmsxB5AB76MsTAUcZkOkmtxLDIsZhTmLS3fVez9A=)
                          6: Zc_2xPSWCJaMF2F1bd0u4VSi5pE.roa (hash: 41IyngbswRY0cq14ZQHxRc6JxZUdgxExTRUqx46fmaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:f9:99:e6:db:b6:3e:6d:70:b5:43:22:e3:09:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Nov 22 23:00:28 2024 GMT
            Not After : Nov 23 23:00:28 2024 GMT
        Subject: CN=da18623f0caaa7cdb9bf1e23c793ffd074ec7328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:f2:50:33:90:f4:b5:56:f5:b0:a6:20:74:
                    74:2c:c5:b2:17:7a:65:4c:fe:0b:5e:0d:7c:00:0f:
                    27:49:d1:56:44:95:42:1a:60:ea:64:f3:82:7b:51:
                    af:f8:d2:de:a9:3f:06:bc:18:76:2d:f9:a2:07:6b:
                    44:b7:2c:67:2b:94:ab:52:00:e9:58:9c:82:8c:66:
                    a9:8d:65:60:48:4d:f2:0b:97:04:80:07:b3:58:03:
                    95:f4:be:84:8e:9a:42:ea:97:b5:91:06:35:13:b0:
                    b6:06:0b:79:e4:90:ea:92:5c:59:ef:41:92:60:4d:
                    a4:7a:8e:0e:cb:f5:fa:f8:7c:54:8f:1d:95:ea:cc:
                    50:3f:6e:83:e5:70:d9:63:35:b8:2a:34:ab:a8:ee:
                    e8:6e:32:6b:2b:cf:79:14:52:e3:9b:21:25:b4:59:
                    e4:72:11:e8:4f:14:d2:04:a0:5b:4c:77:04:77:0f:
                    e3:df:a9:73:80:79:46:eb:84:74:07:e4:6f:17:ab:
                    18:11:a8:35:fe:a5:2e:f3:79:ff:94:9a:d5:ab:48:
                    98:e0:ae:d0:10:4f:8f:5a:38:bc:84:25:25:ba:a8:
                    c2:55:12:31:f5:ea:9d:5c:0d:56:b9:a2:19:ad:d7:
                    fa:22:dc:f1:25:cd:2a:62:69:d5:1c:33:3d:f0:94:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:18:62:3F:0C:AA:A7:CD:B9:BF:1E:23:C7:93:FF:D0:74:EC:73:28
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:42:38:22:92:de:7b:85:d5:db:bb:68:9b:dc:32:f7:6d:d9:
         6a:48:bc:0a:a5:05:5c:d7:c4:02:c3:95:f0:1c:7a:b6:1a:5a:
         5e:c5:17:38:24:bf:b8:35:de:0e:62:63:8e:4f:81:20:c0:6f:
         6b:f4:db:5f:5e:95:0d:b8:e9:42:2f:19:11:18:0c:ea:ea:e2:
         dc:15:25:ec:20:d3:77:f9:77:de:e6:db:73:aa:0a:df:94:2d:
         19:82:0d:db:01:eb:8d:38:18:73:fa:e3:a6:46:db:c7:3b:95:
         aa:3b:e0:f4:2c:d4:1a:7c:e2:14:93:cf:d3:be:ae:f6:08:eb:
         5b:79:c0:86:35:1d:71:60:09:43:58:1f:0c:f9:63:7c:25:2e:
         23:3d:c4:d5:cc:eb:48:7f:62:6b:a2:8c:19:89:f1:da:fe:ed:
         23:2a:24:c2:7e:bf:d2:98:96:c0:ad:1a:67:63:63:9e:48:82:
         19:33:31:7f:29:30:e9:64:db:e2:30:10:af:ee:39:c3:56:17:
         37:d4:1a:30:5a:df:fb:e4:60:eb:0c:6c:c3:3c:16:48:2c:d4:
         d7:a2:34:e7:25:ca:39:6b:f8:ea:32:4c:db:39:3b:c8:f4:34:
         e7:a3:99:18:eb:d2:94:c6:db:4c:82:82:5e:13:03:b2:58:40:
         96:bb:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:34 2024 by rpki-client on console-ams.rpki-client.org