Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File:                     p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier:          a/LQvgzY6h3HpvepS8MlO38sYKhz2+Z9EyWh2yGt4Y8=
Subject key identifier:   95:3D:63:0D:7A:CE:44:AE:AB:F8:96:FC:CD:7F:54:84:2B:46:B8:5C
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer:       /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial:       0193652054AE36389F770E3F175F586E9D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number:          137B
Signing time:             Mon 25 Nov 2024 21:00:37 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:37 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:37 +0000
Files and hashes:         1: P6mU7zqXkmUrEOL_gQQ-LD5GyB0.roa (hash: /tjwbMLFEYfqIW7kYGsgU4Qiw9sMATebwQOdbgCR2dY=)
                          2: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: IijRIhNfTt+gxYzs4HP4IkbO8V3+WQMTJS8sDYPbPg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:54:ae:36:38:9f:77:0e:3f:17:5f:58:6e:9d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
        Validity
            Not Before: Nov 25 21:00:37 2024 GMT
            Not After : Nov 26 21:00:37 2024 GMT
        Subject: CN=953d630d7ace44aeabf896fccd7f54842b46b85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:b7:ff:8e:e9:37:eb:54:62:7a:3c:d9:85:
                    a9:84:87:b6:3a:63:ab:32:31:95:e7:cb:6c:34:3a:
                    ca:e8:0b:4e:8d:c3:0a:ad:86:50:6b:ef:eb:8e:1f:
                    32:99:86:59:cc:5d:4e:07:93:52:26:95:c5:96:0c:
                    dd:54:26:a0:ed:57:28:1d:a4:69:33:6f:dc:c2:28:
                    7c:83:56:9a:a2:93:a4:cb:e4:37:f8:75:94:6f:15:
                    64:19:06:86:32:cc:1d:a1:f8:fd:5d:cd:d1:52:89:
                    e3:6f:49:3b:85:df:86:5a:8c:d1:cb:c6:a7:61:d3:
                    8d:15:5d:20:80:42:ab:b5:7c:cf:42:ac:fd:c3:52:
                    ff:54:12:0e:ac:32:e5:c9:35:14:94:ac:db:43:d8:
                    57:cd:64:56:11:6b:1b:3d:bd:1a:28:5a:2e:77:7d:
                    b9:89:cb:f0:11:29:96:96:16:53:2c:bc:cd:0d:00:
                    df:14:1b:04:dc:c7:30:be:92:2b:e9:14:a9:61:f6:
                    77:be:83:98:9c:2a:96:7d:9b:f3:4a:e4:d4:fe:ab:
                    65:b5:52:de:f7:f2:a6:3a:52:62:86:b1:a9:0a:4f:
                    09:8e:98:98:46:6c:0c:6b:e5:f7:42:36:f9:d0:07:
                    94:4f:82:89:54:7f:da:26:ae:1d:cb:bc:14:6f:7f:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3D:63:0D:7A:CE:44:AE:AB:F8:96:FC:CD:7F:54:84:2B:46:B8:5C
            X509v3 Authority Key Identifier:
                keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:ce:d4:4f:26:5b:5f:51:6c:44:5a:ce:d1:02:f8:a7:98:
         ec:38:ac:b0:88:77:93:ad:74:59:e2:07:74:a1:95:59:8f:59:
         52:0e:c1:ae:2d:55:87:d0:60:57:93:a8:e0:44:9c:b4:51:fa:
         51:09:ab:f4:3c:57:de:7d:67:7f:81:30:46:44:49:1a:51:ba:
         97:b0:9d:bd:93:7c:10:88:e6:54:7f:2d:9a:ad:ff:35:f9:be:
         65:ab:90:97:02:81:0b:e2:9f:38:59:92:da:16:5a:ac:71:4a:
         5d:0d:59:a8:28:bf:59:15:1c:db:07:6e:b9:c1:c1:fd:75:7c:
         4d:23:92:57:64:52:f4:0f:f6:f3:d7:2c:63:b1:37:d2:f4:32:
         a3:bc:ee:a4:8f:a8:1c:bd:0c:c4:a4:66:a2:50:fa:1d:84:81:
         c0:e8:ea:02:a7:66:9f:82:cd:3b:7d:cf:0a:8c:6a:95:7e:4f:
         e0:03:63:40:5a:f3:84:e7:ab:c5:d8:a3:c8:af:be:db:38:29:
         cf:38:ab:7e:2b:6f:27:48:d7:06:57:32:3b:6c:0b:6f:00:48:
         be:2e:af:ac:37:11:f5:1c:c6:18:2f:04:45:7f:34:99:35:b5:
         75:15:e0:5b:45:6d:e2:05:b6:90:aa:f3:53:20:54:54:4b:b8:
         8b:b0:40:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:49 2024 by rpki-client on console-ams.rpki-client.org