Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File:                     c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier:          L5p4VpU51cn95DhZg81MsHzAg33rZnYxk2T8drZ8OmY=
Subject key identifier:   EB:53:A6:27:74:4B:AC:A5:AE:C0:40:8B:05:2B:00:B5:14:8C:DE:79
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer:       /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial:       019356BF7D347E877B32868556920058B603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 02:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:10 +0000
Files and hashes:         1: CSbGjCXmK9UWJwCqqtP52mpkEZo.roa (hash: HDe3hmHgKivdkcNxJ239FXFnBgk23yy7rz9ifS4T1O4=)
                          2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: jbal1QAh0ptWrpcYUjhTp3z6kHv5lc6sLnSmOV70N1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:7d:34:7e:87:7b:32:86:85:56:92:00:58:b6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
        Validity
            Not Before: Nov 23 02:00:10 2024 GMT
            Not After : Nov 24 02:00:10 2024 GMT
        Subject: CN=eb53a627744baca5aec0408b052b00b5148cde79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:50:e0:46:77:5d:41:e0:1e:07:db:6c:32:
                    b9:d7:2b:93:a8:f2:bc:0b:8e:3f:bc:ba:f3:0a:25:
                    7f:53:08:7e:35:f3:e4:06:4a:f9:5f:81:b9:5d:70:
                    4f:fb:59:02:f5:d6:0e:ba:42:4c:2f:37:63:09:26:
                    9a:66:5d:b9:42:8b:16:7d:71:a5:07:c0:dc:cf:9c:
                    bd:d2:9a:54:b7:81:90:7e:a1:39:ab:29:76:df:67:
                    27:60:09:6a:4c:80:24:e4:77:86:c4:28:65:b0:37:
                    d6:67:27:a3:e5:d1:5e:82:14:9f:03:14:47:a5:02:
                    07:df:8a:c0:b7:f5:e4:71:16:dd:ca:86:f6:ce:5a:
                    13:d7:a4:b8:47:07:5e:54:34:89:54:28:f3:3e:b1:
                    f5:31:d5:ca:1a:b9:29:41:5d:9f:7e:93:b4:02:c8:
                    d6:bc:a0:1d:3d:c0:e0:0f:3a:71:e3:c3:06:1e:cd:
                    ef:bd:f6:38:0a:0d:82:65:ad:71:c9:33:4f:1d:d2:
                    4d:38:e2:27:e1:97:fa:8e:cf:f2:50:47:3a:af:a6:
                    6c:98:ff:77:dc:a4:4f:a1:5c:d3:27:ca:9c:32:c1:
                    f5:a1:5c:5f:be:04:39:64:d2:a4:be:08:bb:83:c1:
                    58:81:f3:03:22:e8:81:bb:d1:00:c9:51:53:c4:da:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:53:A6:27:74:4B:AC:A5:AE:C0:40:8B:05:2B:00:B5:14:8C:DE:79
            X509v3 Authority Key Identifier:
                keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:88:5b:b0:5c:13:3b:d3:fc:f1:15:46:f6:a2:58:53:2d:38:
         5d:c5:5b:eb:2a:39:bc:d9:f5:5e:70:88:a2:43:da:94:a7:0e:
         0e:e5:c2:fd:76:e7:b8:8f:f7:fd:3d:6e:e4:e3:55:82:01:e7:
         d5:8c:3e:bf:32:3d:11:db:29:a5:dc:1e:4a:c5:1f:e7:90:c9:
         a4:4c:7e:ee:0f:99:d2:bf:05:9c:7e:a5:1a:c2:f7:3b:d2:24:
         41:9b:47:9e:fc:6d:e5:07:f4:f0:24:0d:65:52:24:8c:3c:04:
         77:58:9d:ce:f0:1c:1e:f0:62:8e:38:ad:8c:f9:10:f5:ca:2c:
         8a:89:c7:7f:ad:25:f3:7d:4f:54:df:c1:a8:f5:59:6c:a6:0b:
         11:76:2a:cf:e4:8b:10:9d:9d:46:d2:a4:01:ab:94:28:8f:a1:
         2a:ef:a2:d5:34:c1:32:b1:26:24:fd:07:1b:62:2e:18:ca:50:
         61:07:ea:8e:1f:ad:c0:4e:c0:39:a8:4e:84:8d:8c:aa:ee:ae:
         4b:6a:2b:e9:4a:5c:d9:11:30:6d:fd:71:80:6e:12:f3:e7:67:
         48:17:c1:4c:be:31:16:ff:30:a2:41:d4:db:e0:b7:5a:30:0c:
         34:f8:f1:e6:f1:f5:3b:dd:d4:a8:15:d9:4b:b7:4b:f6:df:43:
         bb:2f:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:02 2024 by rpki-client on console-ams.rpki-client.org