Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File:                     cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier:          /Mhk3fBlIWykHLy85AAQuj8yBBvDjwMVRyTXLR/mS/I=
Subject key identifier:   70:14:87:48:A2:CA:54:A3:86:EE:0A:4C:70:BF:0F:61:0D:D4:F5:0B
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer:       /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial:       01936331C1513D8DF083620301D2AB87952E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number:          138A
Signing time:             Mon 25 Nov 2024 12:00:25 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:25 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:25 +0000
Files and hashes:         1: 1-r43f9Bz5nUOgrU-gNvcbL23TRk.roa (hash: Yb8xf2tMBzQ70ILT97IqnoQHd6J2auIa/MLwbWcGuUo=)
                          2: QqSiJq5x7MHiFMbKTibpKTZyiM0.roa (hash: EbZBs6O6P8oP/uOiVfpxhN8u77TamjqlUUbFsBEmrYA=)
                          3: Uihw2v7NgzbVo4rzX88d8hmffxs.roa (hash: D2V/gJNPSGtRlbqdf9aZrSlJwqlujgwjsslljOtBDws=)
                          4: Uo-ZaL6rwhdEOjT-bTUk79W-l9E.roa (hash: 4ZGpddTvgV+MC6HonswfOalN36srOx9HVrIP+htXURw=)
                          5: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: LBlDm2cdwpPUKSpThlxoYD8oiw6AmGEf3Bkrnsu7tBY=)
                          6: nMQvGN4gPppdoitTwAYvb1OoCSI.roa (hash: EsvfF5EcvPfDSYjxPFN8clzA9r6YYd5rGyc25Q4aQSI=)
                          7: yCIpWBuuBwEvM_UMbKZwUV6NQJo.roa (hash: m0/HSfO46ugWNPD3QciEjGXX1ozXjN+wFgFeFCgfDy0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:31:c1:51:3d:8d:f0:83:62:03:01:d2:ab:87:95:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
        Validity
            Not Before: Nov 25 12:00:25 2024 GMT
            Not After : Nov 26 12:00:25 2024 GMT
        Subject: CN=70148748a2ca54a386ee0a4c70bf0f610dd4f50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:e9:20:08:42:a9:aa:ce:ea:72:bd:0b:9d:
                    68:b8:ba:ea:75:83:60:a3:f4:30:61:05:08:10:f4:
                    62:1e:84:61:6d:93:cc:e4:10:a8:99:9c:2f:5f:dd:
                    c3:9e:c1:85:b8:85:31:bc:89:e5:6c:0b:e2:20:b4:
                    e8:30:60:d9:1b:86:d6:04:65:c4:3d:08:1c:f8:6e:
                    08:3b:b6:71:06:d7:20:08:18:0f:37:d6:25:9c:bd:
                    c4:7e:d0:d2:c0:06:be:05:cd:fe:82:22:a5:39:b3:
                    d2:83:55:da:2a:9e:51:fa:0f:b3:6c:22:ef:ac:bb:
                    18:bb:7a:c7:a6:a4:f0:72:40:41:32:89:b3:18:31:
                    af:12:e7:f6:d8:dc:38:39:3a:8c:d3:1d:93:f0:e8:
                    c8:c2:7b:18:6b:44:ae:f5:84:c1:4c:57:4a:6d:01:
                    f0:53:25:0a:31:3e:72:79:2d:e9:9f:86:2a:9f:40:
                    38:c5:72:9c:61:fa:52:2e:db:cb:c2:96:d9:34:ed:
                    12:6a:af:7c:17:32:50:71:7a:af:94:de:7d:57:18:
                    37:54:63:71:df:47:5a:bf:8e:20:1e:38:45:0c:f4:
                    cb:c0:99:33:2c:cf:90:64:d8:52:df:e7:76:e1:4e:
                    1e:b0:98:e7:6b:df:ac:a0:b6:e0:dc:7d:2d:76:fb:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:14:87:48:A2:CA:54:A3:86:EE:0A:4C:70:BF:0F:61:0D:D4:F5:0B
            X509v3 Authority Key Identifier:
                keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:03:4a:22:c1:7a:16:3f:63:c3:08:f1:9a:7b:79:d4:8a:
         e1:b6:1f:ab:72:44:cc:cd:5d:33:29:d4:c2:d5:89:0d:d0:98:
         0f:7b:f8:c7:6f:4e:03:c9:35:3b:50:0a:d4:8f:05:88:6b:2a:
         b5:2e:ca:df:83:6e:5a:99:ae:f0:2d:60:b3:d1:59:99:f7:df:
         ff:9f:ed:3e:1c:20:9d:a9:cd:46:a9:0a:f7:7b:a7:e5:4e:35:
         25:13:37:db:5c:18:bc:63:df:fd:8b:d9:75:36:e4:98:ce:0f:
         aa:0a:c3:1e:fc:57:b5:87:07:71:42:ed:1a:1c:59:0b:56:11:
         52:38:54:1c:72:33:e5:4e:00:02:be:8b:93:ff:b6:7b:76:4a:
         93:26:18:3a:94:19:2d:00:4f:cc:5d:6e:9d:e2:0c:df:45:79:
         45:7e:4f:34:82:f1:1b:66:0d:60:83:95:7b:1c:6f:5a:48:38:
         0a:b9:08:c5:6a:dc:f3:53:4f:91:93:6b:89:9c:46:0c:6d:75:
         fd:1c:2d:a7:a8:18:26:0c:ec:8b:f2:3a:12:38:ac:f7:fd:6f:
         4a:70:18:49:21:a9:5b:e0:68:0a:fe:6d:ae:99:1a:2b:ae:43:
         7d:f2:0b:23:fe:cd:2d:13:ec:0b:34:22:16:a2:af:34:1e:e1:
         6c:5a:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:16 2024 by rpki-client on console-ams.rpki-client.org