Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File:                     tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier:          mS0VQ2FldP8y8hI4zm7BqmNM3KjQj1qP7Mq0mxrutns=
Subject key identifier:   FA:BE:4D:6F:6E:77:8A:02:0F:45:25:59:50:EF:34:6B:5B:BA:F1:19
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer:       /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial:       01936AB4D84FCE3C957213CBD2893C347E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 23:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:56 +0000
Files and hashes:         1: POCPcQKlbvz6Olki1Rq-pqBbFl0.roa (hash: EaXaIFRgz99d/D/2ZSZZvabzmKQmdpVsqHiz7De2coQ=)
                          2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: 5Y/LN04oeZX7yuVN3prV+aRvsByCfaye4JmrIvXw0Wg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:d8:4f:ce:3c:95:72:13:cb:d2:89:3c:34:7e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
        Validity
            Not Before: Nov 26 23:00:56 2024 GMT
            Not After : Nov 27 23:00:56 2024 GMT
        Subject: CN=fabe4d6f6e778a020f45255950ef346b5bbaf119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:ea:0d:b4:63:95:6a:1d:7b:a6:a2:48:0c:
                    f6:f8:70:0e:13:52:52:27:80:d9:4c:34:58:6a:c3:
                    64:ad:27:47:25:d0:db:f8:20:d7:f7:7b:92:ed:ee:
                    a7:22:4c:6c:69:95:f8:fb:23:2b:3c:7f:c7:ab:02:
                    f8:d6:5e:a7:e0:66:f0:27:8e:58:39:bd:84:03:9b:
                    e1:35:61:20:8e:4d:ea:67:af:79:e0:41:ad:cb:e8:
                    7b:25:5d:c9:d8:e8:9c:14:69:7f:c6:61:0c:16:04:
                    c5:ca:57:0b:30:a6:fa:52:46:cf:ac:55:d2:af:83:
                    8a:34:f5:d9:92:ce:53:ad:b9:83:0c:cd:41:88:cd:
                    b7:0e:35:7b:98:20:34:3a:ba:d4:78:1a:2f:a6:9b:
                    62:69:8e:44:8c:32:d4:f4:50:38:b5:f7:8f:bb:bb:
                    ee:2c:9f:ef:1c:6d:0b:5a:bb:53:f5:fc:b0:1c:f5:
                    15:0d:a1:b0:ef:28:8b:d2:cb:6c:2c:4c:f1:8b:98:
                    f4:2c:69:65:b2:13:b7:45:1d:36:e5:64:4b:da:37:
                    53:7e:11:1b:fd:82:28:52:d8:bf:77:d7:14:03:ff:
                    60:51:0a:4f:5c:4e:72:bf:69:64:08:92:c0:d2:1f:
                    cb:a9:20:80:4f:86:a3:e0:0b:1d:76:37:e0:7d:f5:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:4D:6F:6E:77:8A:02:0F:45:25:59:50:EF:34:6B:5B:BA:F1:19
            X509v3 Authority Key Identifier:
                keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cb:6d:69:e7:60:0f:5b:a4:53:cd:54:79:85:e4:07:40:a6:
         cd:29:96:d6:0e:90:62:98:7b:b7:e1:ad:e1:f1:5d:c2:d3:77:
         e0:19:f0:05:de:d2:18:c5:06:bb:46:f0:2a:00:df:9a:42:b6:
         72:17:7d:47:de:7d:2a:f5:e0:9d:bf:10:5d:af:89:22:08:e5:
         3c:20:ad:4b:d5:93:f2:a1:0a:23:95:5a:59:b6:db:b5:3d:a3:
         f1:02:19:3a:41:62:c6:84:15:f8:14:d0:86:ae:4d:52:33:2c:
         69:52:81:00:59:7e:50:7b:b6:71:5c:bd:56:2a:c4:de:f0:57:
         de:e4:af:16:87:00:31:85:a2:63:78:cd:d4:c7:0c:c2:97:01:
         df:e2:ce:7c:36:a1:68:e1:83:e6:f0:16:6c:ba:04:2e:aa:22:
         07:ba:9c:20:3c:33:e8:c3:bf:7d:11:84:33:66:a4:0b:52:8c:
         1a:03:7c:42:b0:80:da:b3:5c:ae:90:03:cc:48:33:2c:37:6e:
         03:3b:1d:a2:ee:bd:94:c1:6c:d9:c7:23:48:93:2b:7a:cd:f2:
         7b:ad:c5:e8:c7:b6:b7:55:fe:19:f1:f5:86:b3:0c:66:3a:5a:
         57:9c:03:04:83:2b:54:7f:5c:7e:2b:49:b2:5e:04:5d:47:63:
         d9:b1:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:33 2024 by rpki-client on console-ams.rpki-client.org