Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File:                     Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier:          oGA68QvfzlhYg1Q13m/uiYDBLeMzxzA6HspIa/YmfUY=
Subject key identifier:   A0:E9:1E:E1:BE:16:31:54:50:41:98:7D:35:C8:09:DC:C1:81:FE:A3
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer:       /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial:       019352AD64F0CF1B7CC5886AF65F4ADA8BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 07:01:55 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:55 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:55 +0000
Files and hashes:         1: 69_XawaIVt0Xs1R-wtdIEByrk9s.roa (hash: q+0XjiPxutBa6U7LbK6CVD8mQyRlkWea/6zx3sJsF0g=)
                          2: Z_dIf9Lv7Xm0tsdDsDHS8VX3DDM.roa (hash: +dK91yXR2v4lP/8i1LhqEvZJaUsqexhaGg6TXQhat4U=)
                          3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: qqNyMVZcYUII85PD44ar3MHofUJptvZDcZEDzBo2QG8=)
                          4: n7dvXs46PJvH-fvJf3blKX8JhWk.roa (hash: w7waTTDZYz+QmxcU1/skRxYwOak0DGxoKCTCZA1IiYA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:64:f0:cf:1b:7c:c5:88:6a:f6:5f:4a:da:8b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
        Validity
            Not Before: Nov 22 07:01:55 2024 GMT
            Not After : Nov 23 07:01:55 2024 GMT
        Subject: CN=a0e91ee1be1631545041987d35c809dcc181fea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:58:6c:fa:2a:d1:91:e6:56:71:c5:e2:c5:
                    02:14:b6:79:dc:aa:c2:3d:03:c5:7b:1b:5f:5c:56:
                    f8:f4:36:5a:3d:5b:c2:6e:7b:c3:6f:34:23:8c:34:
                    fc:bc:31:18:4c:44:56:77:87:f6:ac:f2:32:24:08:
                    22:f7:84:0c:1c:8a:c1:75:7c:fc:a6:f5:c6:b7:8f:
                    77:f1:55:95:2b:ff:c0:e7:a5:bc:15:25:9a:66:bf:
                    b9:51:af:4a:99:27:7e:cf:3b:36:66:4a:f3:7e:3d:
                    52:c6:ed:db:74:7d:28:ae:de:42:7c:f8:9e:de:8a:
                    d7:8c:a1:06:51:62:d1:5f:60:f5:51:0a:c6:c6:9b:
                    c4:a8:43:51:b2:aa:46:f5:0d:3c:81:c9:17:e1:38:
                    62:ab:27:84:82:ab:82:5f:fb:64:21:53:fd:fe:57:
                    8d:70:43:de:4b:9d:cb:b0:dd:a0:ca:6e:52:a2:ac:
                    2b:fc:da:68:8e:00:de:be:49:4b:01:f1:6d:dd:b7:
                    dd:56:5f:57:02:65:0f:77:68:dc:09:87:bd:dd:da:
                    10:3d:29:f0:dd:0a:d9:13:8c:23:3a:57:5e:55:1a:
                    66:cb:ff:e3:aa:7a:1b:6e:7d:ce:93:38:a3:5d:66:
                    e3:48:7e:ac:24:89:be:db:3c:cf:01:80:61:12:a4:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E9:1E:E1:BE:16:31:54:50:41:98:7D:35:C8:09:DC:C1:81:FE:A3
            X509v3 Authority Key Identifier:
                keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:00:89:19:fe:86:cb:ec:bd:cd:11:77:4d:7e:51:6e:44:29:
         e0:4c:45:87:20:96:5d:ca:94:a8:5c:d0:23:87:35:11:80:e7:
         f2:9b:08:8b:e5:a7:5a:66:3a:a0:97:35:57:fb:8a:fb:3d:6a:
         f5:9d:4e:0a:09:cc:a2:00:71:6e:0f:25:4f:ef:fa:8c:df:e4:
         10:10:6b:5b:6a:4c:75:8a:ec:01:1c:2a:10:b3:c6:dd:78:0b:
         b4:e1:25:72:a9:f9:50:db:3b:56:3f:6e:28:76:9d:28:3c:d3:
         8b:bf:13:71:e8:36:d1:77:72:01:48:b4:f8:20:e4:a0:55:26:
         3f:20:df:c4:7e:f2:3b:af:e9:ac:1c:10:1f:aa:15:17:60:82:
         cd:fc:62:0b:b8:28:69:c8:11:57:24:6d:c2:27:f6:70:73:2a:
         a7:67:51:b7:6d:87:27:89:a0:60:7f:c0:60:8d:e5:ae:a7:a4:
         c6:98:74:e3:74:d9:50:a3:cc:11:6b:76:e9:8f:9f:ba:57:f7:
         26:b9:f7:23:5c:ef:9c:e9:7e:d5:2d:05:74:4e:52:d2:42:81:
         f8:42:89:65:cb:8c:0b:e6:7d:7b:46:dc:80:c6:77:a5:1b:67:
         42:c0:5f:55:3c:06:4a:68:5d:b0:f8:b6:91:93:1b:48:ec:26:
         38:d0:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:47:12 2024 by rpki-client on console-ams.rpki-client.org