Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File:                     enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier:          kJqqT5Ki/c7sEu+pEqizqD8QI14Eb7XkwO0gt+yPVQY=
Subject key identifier:   7B:0D:D7:B9:A5:E7:4B:EA:CC:60:88:08:EE:A9:5A:4A:39:56:89:89
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer:       /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial:       01935764B2E2D3C4509BC16BAB6CF53B11E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 05:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:37 +0000
Files and hashes:         1: EztB8IKdtbGF9QGK1lztPbDMjCA.roa (hash: +BHlhr/9+RXgmjD/HTIuYhMOolhL2+ywgFuegAEpdB8=)
                          2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: gRmLx9H8ZYOSSCFt5gh4acYEhhT94+Xj14pyvfxDXRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b2:e2:d3:c4:50:9b:c1:6b:ab:6c:f5:3b:11:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
        Validity
            Not Before: Nov 23 05:00:37 2024 GMT
            Not After : Nov 24 05:00:37 2024 GMT
        Subject: CN=7b0dd7b9a5e74beacc608808eea95a4a39568989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:77:e0:30:1b:20:ed:73:7b:b4:1f:c5:f1:
                    d6:6c:8c:a4:73:d3:81:7b:0f:ad:fb:d3:a5:e0:d1:
                    86:3a:2f:4f:8b:62:f2:c2:a2:17:22:16:54:75:8d:
                    ac:ba:f2:f6:a3:c0:84:73:63:a6:a0:cf:2c:7f:34:
                    55:f4:5b:35:4d:2d:b2:ca:e7:72:15:e2:c3:97:f6:
                    03:51:8c:ac:e5:ed:b7:cd:83:53:2a:fb:3d:c7:a1:
                    de:bc:4d:ba:cd:f6:e6:1c:8c:b3:50:f6:92:f9:f1:
                    34:ac:ba:69:7d:de:e6:ce:54:6c:6d:0b:13:4b:1b:
                    0d:a6:45:18:82:90:d7:35:ca:b4:49:0a:fb:6b:77:
                    f4:ba:9b:f1:a4:9c:d3:97:e8:3c:c0:06:65:80:98:
                    cb:28:a4:00:4d:e6:2e:e9:4d:2b:05:57:ec:21:2c:
                    69:73:7f:13:1d:f9:8d:52:3b:17:67:08:2a:76:5b:
                    55:23:4b:7a:07:c0:5d:3e:0e:eb:b5:0f:90:2a:e8:
                    d4:11:0d:f6:e4:71:d1:62:a6:97:99:ad:b0:64:65:
                    a6:9c:d5:13:89:23:29:28:5a:bd:09:ba:55:84:0d:
                    32:5c:c6:08:73:38:bf:d2:4a:23:60:ed:70:45:df:
                    8e:01:0c:36:49:24:1d:20:66:3a:94:94:f6:8b:0a:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0D:D7:B9:A5:E7:4B:EA:CC:60:88:08:EE:A9:5A:4A:39:56:89:89
            X509v3 Authority Key Identifier:
                keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:a1:6d:8a:72:2e:9b:b4:03:5f:d2:e4:50:55:36:bd:f2:
         ab:24:93:44:8c:91:d6:0d:fc:1d:a5:28:f7:76:71:4a:6c:e6:
         8a:0e:58:ae:3a:c9:da:5b:87:47:c6:99:17:50:b4:00:7d:60:
         7e:b7:42:04:d3:b0:6b:8d:c8:99:3e:ae:f2:fd:86:da:ff:46:
         5d:63:d1:bc:aa:b3:0b:89:11:94:3a:a3:6a:2f:c1:0c:c0:6d:
         be:35:78:94:f6:21:ab:c9:e8:80:95:86:a3:9e:8c:cf:e1:b2:
         75:6b:db:d9:08:91:56:eb:da:06:b3:51:b7:0c:bd:b1:54:f8:
         32:b4:2f:31:29:39:70:fd:39:6a:50:b0:15:a8:be:df:cc:bc:
         ee:32:68:74:2d:78:c5:45:07:42:ee:83:91:70:6a:c9:3d:8e:
         2a:93:d5:79:f3:dd:34:aa:d7:39:ec:4d:9c:da:52:95:31:a0:
         83:34:3d:3c:44:c0:39:66:2a:c0:4e:20:52:2e:43:be:7f:d6:
         86:54:83:27:f5:50:37:6a:04:fb:d2:0b:39:4b:08:65:f7:8a:
         52:75:8a:fb:7f:32:06:34:e9:e2:30:f6:4c:0f:08:a7:a2:ea:
         44:58:99:0e:54:62:53:ba:73:98:5c:7f:cd:c3:b9:2e:c5:7e:
         b2:59:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:04 2024 by rpki-client on console-ams.rpki-client.org