Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File:                     s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier:          YkNIHOCP5SP12s2gtHL3tK+4ThRqhS4849oXSCsBglc=
Subject key identifier:   D9:73:93:AB:A8:91:D9:BA:CB:F7:15:D6:43:8E:72:64:07:CA:74:4F
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer:       /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial:       01936933DDBBD4BC21C4F496CDDC6479EDDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number:          106A
Signing time:             Tue 26 Nov 2024 16:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:26 +0000
Files and hashes:         1: 1-WuNzs4D5Cl0FJe4HNILB6iyJ1k.roa (hash: bBgL1im973R/Gl5cXCrvJKvOUqTjjVXxWxLATAhjFNo=)
                          2: 2KomL7ThRUYw18W_-PL_MSb-wGA.roa (hash: xuGEtYiAySUCNhowhWOPFoqK37jKLtHlNul4/WvUeU4=)
                          3: Avoa6VqtY8ZPHAQrnZ181dkNF4g.roa (hash: yMkryawTVJ5kKJyWzQTyG/5W80zP4uNi8vAL+NzkWH4=)
                          4: H6YPxi-HSbjrRSbjwDXdLc9KmSs.roa (hash: 46pPCU2n51ldbTEaxBdK49rVH0GxZU/37x7D77pt+TE=)
                          5: cmoAUs6X5Pn2mhNcTO70_q2Om9E.roa (hash: ASHcNPe+MqU8takJ6f8PcyGdG5GjRJFHwhX1q1XqE6k=)
                          6: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: WHg+P2ewPOlDPUKM/lLUXUBPqPzH/kDI8zxRhw02Vxs=)
                          7: xYlv16zRAkGa3qWg6D2XLkMX9HQ.roa (hash: h1rSc2pNwRpcPRvqnwtYYpf7dL9PZcSPCSls3kQlDCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:dd:bb:d4:bc:21:c4:f4:96:cd:dc:64:79:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
        Validity
            Not Before: Nov 26 16:00:26 2024 GMT
            Not After : Nov 27 16:00:26 2024 GMT
        Subject: CN=d97393aba891d9bacbf715d6438e726407ca744f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:34:5f:00:22:05:05:2a:7e:41:69:59:27:
                    2a:6b:5a:bc:f5:5f:ea:68:d3:80:6b:c0:17:8a:37:
                    bc:b0:9c:ba:e1:c9:ae:5d:c8:c3:04:be:99:b2:47:
                    c7:f5:5e:0d:97:5b:8b:43:44:cb:27:ec:1a:f6:4c:
                    e4:83:35:23:59:58:06:5b:63:05:aa:d4:35:37:b3:
                    ae:b7:c6:9a:09:7c:56:d2:bf:31:e6:ef:58:7e:d1:
                    41:38:80:7c:1f:49:1d:74:8b:1c:2e:e1:d3:98:a8:
                    a2:34:4f:0c:ca:34:1d:b7:8e:ca:1f:b2:30:59:17:
                    f8:7b:8e:a7:36:80:66:eb:22:49:2b:99:cd:04:6a:
                    39:dc:32:1a:45:95:e5:ad:1b:d5:40:8c:5c:5d:35:
                    38:29:f1:61:46:83:e7:5d:58:92:1d:28:f3:04:33:
                    5e:8c:16:3f:a4:16:32:e9:b4:af:f2:17:8c:4c:63:
                    83:c5:0a:74:fa:63:99:0d:b1:69:3e:dc:e5:31:e9:
                    b6:b5:c3:d8:35:28:72:11:d7:6e:b2:b0:b8:61:2f:
                    9a:4f:d4:f0:1e:b3:ed:09:af:b1:09:24:d6:78:a9:
                    dd:77:7b:f2:f9:ba:bd:03:5a:bb:79:c7:d8:13:e1:
                    bd:6e:cf:9e:1b:50:63:6f:17:68:bc:ff:77:1b:eb:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:73:93:AB:A8:91:D9:BA:CB:F7:15:D6:43:8E:72:64:07:CA:74:4F
            X509v3 Authority Key Identifier:
                keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f7:b3:3b:f7:b8:2f:de:76:3e:f3:58:2e:41:9a:95:29:cd:
         d8:42:bf:e3:da:a0:a6:90:5b:e2:90:32:76:2f:51:17:3e:05:
         55:45:55:14:94:8e:17:b4:18:13:c6:91:16:ad:58:f1:0a:13:
         77:15:ef:01:45:f2:3d:fa:92:32:cd:10:e5:9b:d8:c9:07:48:
         15:b9:9a:ce:30:96:db:a5:09:46:7d:f5:f4:e1:08:aa:7e:9c:
         30:25:75:a5:b6:ff:d8:a4:5b:fb:8c:0a:7a:c9:d4:d8:aa:a4:
         58:96:60:be:ff:0f:aa:7e:58:b7:6e:1c:f1:0c:65:54:e9:a7:
         72:79:45:ef:3a:88:73:a2:c8:f8:63:c8:ad:8e:0b:45:5d:69:
         4f:84:e1:bb:d6:84:ba:fd:27:fe:dc:20:c7:59:47:3f:ee:fc:
         0f:3c:d3:15:84:4b:51:b2:41:4b:e5:0b:04:9e:68:2a:7f:23:
         0c:27:3c:06:7d:ce:67:1a:cd:40:db:9e:68:9b:57:56:59:e2:
         2c:0f:4f:5a:42:c6:32:1c:61:4c:f9:6d:f2:22:81:2d:9f:67:
         9e:0e:e9:22:a7:86:93:a4:58:a7:ba:70:e4:9c:34:99:56:30:
         a5:a8:be:02:95:fc:6f:a3:2d:04:f7:ca:61:3a:d5:92:e9:f5:
         d3:a4:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:45 2024 by rpki-client on console-fra.rpki-client.org