Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          STpcpsw7cq4ShOvRIIhZTXXLHB42VlyZDxcZ3irLT88=
Subject key identifier:   3F:6E:D2:6D:4F:97:1A:5B:BC:F6:A5:CB:D6:78:0E:44:FD:AE:E9:E2
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       019355AD3619EFDAAB0AE0D8197BEFF91344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 21:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:34 +0000
Files and hashes:         1: q_zOdtopi-vmi40xaYIxwJZKJbI.roa (hash: AbHa8zxaHs1atdrnwtIQ5aVbhD2fe7bsN4P7uYOTD5U=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: H1PzaQH7bjQH3GWpE0gS9uBEHJHjTT5MCCJ3gO9Q3Xg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:36:19:ef:da:ab:0a:e0:d8:19:7b:ef:f9:13:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: Nov 22 21:00:34 2024 GMT
            Not After : Nov 23 21:00:34 2024 GMT
        Subject: CN=3f6ed26d4f971a5bbcf6a5cbd6780e44fdaee9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:e6:d9:92:ce:d1:47:43:9c:ec:b0:3c:3a:
                    1d:39:f9:89:26:25:eb:de:66:0f:9c:42:1f:5d:d5:
                    77:bf:a0:b5:09:ac:0d:1c:9f:56:92:10:bd:60:8d:
                    36:e3:09:3d:8d:6c:ff:b0:87:20:d0:c4:62:d1:2e:
                    5c:dd:4f:54:ea:b9:f9:9a:ac:bc:09:e0:0c:b2:a1:
                    78:6a:1c:97:3a:1d:8e:5f:70:de:69:74:19:0d:a5:
                    5e:8e:c1:ea:9e:c7:e8:98:3f:0a:ff:3b:77:62:ea:
                    36:e5:a5:df:e0:78:37:e8:45:b3:dc:cc:ac:cc:80:
                    29:07:ac:e7:0d:95:40:22:e4:d3:28:36:01:15:0d:
                    e2:13:5c:a3:ef:57:a0:82:c6:66:0b:71:d5:74:9f:
                    36:3b:07:d0:0e:89:59:17:68:b0:80:b8:5c:85:99:
                    6d:dc:75:1c:fb:14:28:5e:aa:d0:c1:30:c7:49:e9:
                    6e:79:c7:92:83:01:74:51:21:7d:c1:a7:44:73:a1:
                    28:ab:38:37:11:93:dc:c0:02:28:56:b8:fb:6e:3d:
                    3b:5f:df:68:e5:8d:84:9f:08:16:6c:4e:fc:03:55:
                    57:cf:dc:8b:27:ed:6a:30:74:a1:6b:9e:86:2a:b1:
                    3f:d8:f3:8d:c3:00:2f:45:18:27:7b:62:d6:49:51:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6E:D2:6D:4F:97:1A:5B:BC:F6:A5:CB:D6:78:0E:44:FD:AE:E9:E2
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:24:f9:6e:cf:68:48:92:fd:b6:9f:8d:15:75:c0:fd:ec:1a:
         7e:9d:47:9b:ea:da:00:c6:52:32:97:34:ad:9f:d3:88:42:9f:
         cb:80:8e:8d:5a:ad:8e:0f:9b:1b:43:47:6e:04:8a:b8:02:9c:
         6f:88:6a:f9:71:88:7e:cf:f3:67:94:47:43:fb:a7:31:a6:cb:
         ff:7f:a9:4d:a4:9f:7c:79:06:d8:1f:e7:f9:89:33:b2:7f:62:
         53:84:2a:95:85:e1:3f:58:e0:e2:bc:e2:2a:2c:47:d5:ec:2f:
         18:3f:89:9e:c7:bc:a7:a7:80:de:68:72:21:21:83:35:f5:6a:
         22:f4:7b:1f:a6:58:7b:25:c0:48:5e:0c:75:f1:bb:9b:56:21:
         03:6c:d2:53:be:36:6b:23:73:a7:c8:2f:5a:a6:36:90:16:c4:
         08:37:36:6f:df:35:1d:be:ed:e0:42:54:4e:ac:43:31:b5:90:
         09:b5:b9:1b:ed:5b:65:b5:b3:7c:99:47:2f:f0:ca:2a:72:f2:
         1a:74:0c:94:86:7a:55:b2:9d:5c:50:fe:33:1e:53:c8:29:60:
         5e:d5:5d:84:ff:ac:bb:f2:9c:a4:fe:72:7e:41:bd:e7:07:d5:
         4e:da:d3:6a:06:63:af:14:eb:8d:74:5a:76:26:ac:07:d6:1c:
         81:2f:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:31 2024 by rpki-client on console-ams.rpki-client.org