Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File:                     mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier:          ZkjcR9nL2GUq9VwuokUTHOfmAu/yA8wR+ag3NezJo/0=
Subject key identifier:   5A:AC:39:06:D3:1A:5D:5C:4A:F1:A1:8B:DC:6F:0B:31:4E:72:79:09
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer:       /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial:       0193549A80E2893E9C79D481FE7605828490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:31 +0000
Files and hashes:         1: UR2RuHCBWF4wKv4yVoxaXNNCi_4.roa (hash: jHf0mvprSEbxpqn/IM1esqYL8393M8C/Q1WQeX3vbFM=)
                          2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: E8YpOdCTlYuj1Y9gAJ17HDV5yG2gxSH0uWZ06SQn1Vw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:80:e2:89:3e:9c:79:d4:81:fe:76:05:82:84:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
        Validity
            Not Before: Nov 22 16:00:31 2024 GMT
            Not After : Nov 23 16:00:31 2024 GMT
        Subject: CN=5aac3906d31a5d5c4af1a18bdc6f0b314e727909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:17:ab:81:7a:78:ed:5a:aa:1c:30:b3:7a:
                    54:b7:b5:75:ad:77:34:7e:01:e9:77:4a:b0:3c:7b:
                    76:06:d7:d9:21:63:57:eb:2a:4e:aa:3c:c0:9e:08:
                    3c:59:0d:6a:e7:e3:6e:5e:f5:13:15:1f:95:6f:12:
                    e6:a7:38:5b:44:9d:df:80:1c:ef:ec:66:96:a7:5f:
                    4d:3a:bd:c1:86:40:ec:10:c7:1c:ac:4b:bc:f2:9d:
                    7d:1e:09:c2:6a:01:12:06:83:ec:d5:5f:9d:3d:2f:
                    f2:16:b9:21:e6:9c:ac:2c:7e:25:5c:88:29:22:fa:
                    a6:c5:3b:82:86:87:7f:d1:bf:b2:3f:bb:f6:0c:35:
                    39:e2:d6:97:22:45:e5:ac:6e:0f:8d:36:c5:17:62:
                    44:a6:80:10:dd:66:b7:19:68:50:1a:3d:73:7f:54:
                    6b:46:b0:ac:bb:af:7b:0f:fa:fc:61:e8:4e:4f:6e:
                    55:92:fd:b0:ff:58:6e:09:ca:8b:62:9d:db:5b:c1:
                    c4:db:6d:bd:6b:68:41:fa:21:7d:cf:3e:b6:aa:00:
                    f6:64:71:3f:0d:b3:8f:ac:12:9f:2e:48:d3:19:13:
                    1d:7d:06:36:11:e9:db:5e:63:07:d0:d2:3a:37:92:
                    e5:03:25:87:f0:53:84:90:86:15:b6:ad:51:f1:2f:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:39:06:D3:1A:5D:5C:4A:F1:A1:8B:DC:6F:0B:31:4E:72:79:09
            X509v3 Authority Key Identifier:
                keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:49:d6:04:9f:70:b0:bb:55:c1:47:15:cb:ab:f7:72:6f:10:
         34:b9:50:e4:3f:60:9b:ec:c7:3d:bf:50:1c:d5:40:f1:93:ce:
         e9:a3:67:71:69:5a:73:cc:9a:0c:87:99:cc:34:2b:69:ba:da:
         be:1f:c4:ec:e5:cf:7e:fb:28:40:ef:a8:1f:83:dd:f5:ba:26:
         8d:d6:bf:d6:cf:2f:a9:fa:04:e8:51:ff:da:5e:2e:34:f7:43:
         1a:39:5e:43:15:ad:41:e3:fa:12:c5:11:eb:38:81:81:8f:c3:
         82:39:d4:06:cc:28:1b:5e:63:39:8f:12:54:4d:14:3e:cb:5c:
         7a:cf:ce:ae:1a:62:92:e6:e4:ec:55:bf:af:45:d8:d6:f4:d0:
         2e:c6:68:dd:de:75:77:92:21:71:46:be:8f:ef:08:02:93:4e:
         ba:98:08:34:0c:ad:18:70:6c:50:53:9f:66:99:b9:d9:88:66:
         98:f0:6e:05:1e:06:7b:6f:a5:0e:b6:65:70:8f:bf:4b:4e:93:
         6d:ef:64:2c:e1:cc:5a:e4:bc:00:71:4b:81:a4:f1:3e:6f:a0:
         15:57:ee:93:ee:2d:80:bd:d1:7f:c1:73:8b:0e:6e:ca:60:ee:
         91:db:4a:63:98:68:da:c0:a5:b0:6f:a8:82:e1:31:12:10:78:
         2b:cd:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:29 2024 by rpki-client on console-fra.rpki-client.org