Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File:                     2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier:          UtybByNJHyz55WjlF/vKGFPJK9us0eHBstjsZP3M0bs=
Subject key identifier:   A2:22:1A:A3:1F:5B:28:B1:31:15:6E:F1:95:A6:A4:79:BB:5E:C4:45
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer:       /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial:       01935576023AA8DAC627D18F78DCC485E896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number:          137F
Signing time:             Fri 22 Nov 2024 20:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:17 +0000
Files and hashes:         1: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: SNvVXBzjwXL+WgexBS7pFrCmgNrkYH8sTmVZzYWrITw=)
                          2: FN9DCAJoPvjoqEggWi_3GH0axSk.roa (hash: yhxA9PjBmJl6nUJb8aNyLGm7ItEVhwXjyHzrHTwkAGg=)
                          3: PeDc1lHOrUe0BdrkqKBp6IdXJh8.roa (hash: h1csIof0DlGoRY1tPMjbgzssq0lcLh8ekfsWATqj3jA=)
                          4: RPCwftNuHeyXzcabKRJsXI90_m8.roa (hash: u/jMyZPNh/9pkF9QBPc4asZV4w/a7+iAdvTy5+as3k4=)
                          5: VaX-bnyKsywGaJlVPSDDKJqz5W8.roa (hash: yrPK0kuLKr/ctpzQ4xyQFy3a/NegRzHfSkhUDHGrOaU=)
                          6: Zswh882YU3DbI3hMSYP9PASAmEQ.roa (hash: g6Cqjxu/dOZwHY3CPsztItdlnELg/vChl6xagNjm66A=)
                          7: mpY3C582JK7lxxN1PJ_nIUylLVI.roa (hash: hEKJabPnH4423mfqWpnuBiYIHA1u47ik/BLh++TcT8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:02:3a:a8:da:c6:27:d1:8f:78:dc:c4:85:e8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
        Validity
            Not Before: Nov 22 20:00:17 2024 GMT
            Not After : Nov 23 20:00:17 2024 GMT
        Subject: CN=a2221aa31f5b28b131156ef195a6a479bb5ec445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:39:32:79:21:66:a5:d3:83:21:45:74:a4:
                    6d:e4:a2:2b:84:53:bd:33:15:b6:49:b1:18:61:58:
                    47:9f:6e:16:aa:83:0c:5e:46:cb:73:d1:5a:b6:96:
                    fc:3c:d2:9d:b6:e3:3a:29:97:e3:54:b6:9a:68:a6:
                    91:58:dd:9e:85:20:fc:cf:1a:90:9d:26:63:86:e1:
                    ab:7e:8a:25:99:d5:84:95:fa:fa:4e:ed:85:02:88:
                    66:b3:9e:cb:cd:82:cb:87:f7:cb:b7:29:dc:2a:49:
                    6f:41:64:5a:eb:f4:39:9a:cf:b4:30:38:c9:a7:96:
                    2a:22:67:85:c9:ce:92:40:74:80:85:77:87:65:32:
                    86:35:84:fc:39:f5:03:5c:90:60:a2:e3:51:15:de:
                    c1:f8:74:4f:f4:28:62:9a:a1:07:3b:47:ae:af:30:
                    1d:63:d1:bb:47:79:90:8f:67:86:1d:7e:44:1a:29:
                    7b:32:b7:6e:28:f6:23:d3:9a:c0:bc:6a:34:65:d4:
                    40:06:11:db:5b:af:4f:f6:48:07:4e:92:3a:f6:48:
                    f5:69:d3:5e:40:ad:38:ad:4b:e0:5f:ad:c1:93:50:
                    f9:51:a4:74:87:2e:fb:fb:47:9a:51:18:e1:ed:76:
                    3c:ec:d8:09:7d:e9:d5:32:52:32:06:86:0e:ee:0e:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:22:1A:A3:1F:5B:28:B1:31:15:6E:F1:95:A6:A4:79:BB:5E:C4:45
            X509v3 Authority Key Identifier:
                keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:de:9d:46:7c:65:86:fe:5b:81:d7:8b:24:7f:a3:1c:eb:0e:
         49:e6:3c:1c:aa:78:97:13:41:75:cd:c4:29:8d:bb:52:7d:0a:
         48:37:c8:0b:de:97:c5:79:db:e3:a1:21:13:83:ef:c0:50:b8:
         2a:b2:fb:fb:44:e6:db:92:7c:68:e6:8b:7b:db:1d:2f:1d:57:
         b6:a4:6e:26:aa:4a:c7:d5:90:95:5b:ed:42:38:98:75:4c:63:
         9c:68:87:be:05:18:0a:69:e1:fd:23:04:e9:d0:a0:00:80:a2:
         78:70:31:f5:01:44:10:dc:ad:91:08:fc:4f:36:ac:7d:4b:f4:
         52:a4:01:df:c0:b0:ad:74:88:19:34:ac:36:40:50:c9:d5:e4:
         87:58:17:f1:01:91:c2:14:4f:96:8c:59:8d:2d:cb:ff:78:b2:
         14:4f:1a:de:40:46:42:9f:78:28:6b:2f:af:78:ea:0f:e8:f4:
         73:11:a1:07:7e:60:d4:87:0e:29:03:4a:52:96:3a:78:e0:6c:
         7e:80:1e:75:d7:e6:fc:99:77:a6:59:60:74:88:8b:a6:30:8f:
         7f:12:ba:3b:3d:5a:ec:ab:64:3a:28:0e:4b:1b:a3:08:68:b4:
         f7:73:f9:64:35:49:42:2b:a7:fe:f3:9c:71:6e:84:62:af:b7:
         93:3e:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:19 2024 by rpki-client on console-ams.rpki-client.org