Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File:                     aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier:          QesQAozmZYL2ZCA2oF8IGoTe47e1wLkz0qWV3Sh4X/M=
Subject key identifier:   50:E1:1D:C2:D7:8F:87:52:4F:47:AC:FF:D0:D6:83:AC:B5:3C:27:73
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer:       /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial:       01935199ABE6A786366D6E757AF0F5A45F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 02:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:45 +0000
Files and hashes:         1: 1-MsoIK47d9YIf4NiDuymXuWELGY.roa (hash: F0a4rahsg1NyyNHDU0TRWA9ZlmPAPQ85CySFGUe38jA=)
                          2: JFe0BgWzTfWPErZk90Gdrvcp3IM.roa (hash: k3UHYUQnhHrd4/5p9x16IHWSntdW487DEos+u0D08J0=)
                          3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: 7Dpx5x2YFM++PGbqrfCKbKV3P5cQDPXDhzGcglczdiE=)
                          4: d8zeWrXcSK5smiQmBLm0kKEfBlc.roa (hash: hosMlLCdC8Px1vyROtrP0coHtSKHHeK1AcG1e2Oay64=)
                          5: dJjkF115j-rAyk-l2vXVFKZjjVs.roa (hash: EuJeBYQb0zC7yvcPfrrKyKErZjK7f3w56Wt0g0r5dgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:ab:e6:a7:86:36:6d:6e:75:7a:f0:f5:a4:5f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
        Validity
            Not Before: Nov 22 02:00:45 2024 GMT
            Not After : Nov 23 02:00:45 2024 GMT
        Subject: CN=50e11dc2d78f87524f47acffd0d683acb53c2773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:ba:ed:24:0e:4e:c4:5c:b5:da:85:59:12:
                    7b:20:07:0b:ce:40:28:31:ad:23:b0:f2:52:a1:27:
                    ef:c5:9f:b0:e3:84:cd:98:62:76:cd:7a:7c:29:c5:
                    58:af:63:0a:c3:19:a5:26:b4:78:1d:b4:83:1b:db:
                    40:2d:e7:54:05:3e:81:e0:c1:e4:fc:69:0f:27:d0:
                    14:65:b8:a0:c0:11:b3:76:85:9d:ed:de:0d:df:bd:
                    f4:97:ca:55:3d:45:95:09:1c:d7:0c:3b:2d:17:15:
                    a1:b1:8d:db:22:c5:78:99:67:a2:42:2b:ab:97:fc:
                    4f:3a:95:69:7d:ee:3e:0c:4b:75:e5:e9:d5:ba:ae:
                    cd:f4:2c:4b:93:8e:a1:61:d2:8f:6c:f7:da:4b:c4:
                    74:ea:35:4c:a8:0f:0e:4f:3b:44:44:d3:25:5b:25:
                    b0:22:4f:61:77:91:ac:1a:b7:2a:f8:d1:ec:ec:b0:
                    29:0f:88:09:85:02:1a:b0:9a:a8:4e:53:e5:98:c6:
                    5a:ac:cd:52:fb:61:bd:3f:69:62:c6:ef:53:75:07:
                    5d:73:d8:35:f8:76:93:ad:a9:10:fe:ed:37:d1:16:
                    05:fc:f1:5a:28:bb:35:33:00:39:ea:1f:ab:f3:c4:
                    9a:7f:c3:24:43:f8:b7:65:8a:15:fe:22:ef:ac:b5:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:1D:C2:D7:8F:87:52:4F:47:AC:FF:D0:D6:83:AC:B5:3C:27:73
            X509v3 Authority Key Identifier:
                keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:dc:0c:eb:e4:46:29:b6:cf:5a:fc:bf:45:7c:da:9e:6d:
         ed:4c:04:e4:8c:11:e2:f9:e0:3a:28:0b:bc:00:9c:34:08:20:
         ec:54:5b:f5:5d:09:67:03:ad:6b:b4:cd:15:19:bd:71:bc:8d:
         27:f5:1c:e0:04:23:f4:f5:7a:c9:7e:86:d9:35:6b:6d:9d:e2:
         f2:f5:a7:c3:3f:04:9a:f8:07:73:fe:0d:9a:65:d6:56:06:b6:
         62:44:47:bb:62:b6:39:f9:4f:59:5e:9c:35:ec:5d:13:e5:f4:
         08:59:14:66:53:c7:f9:18:0d:f3:09:f7:51:23:44:fc:b6:df:
         a6:6a:1b:ee:74:5f:2f:8a:17:1c:d5:4a:9e:15:43:7d:de:6d:
         b8:34:12:c0:97:82:a8:5f:59:dd:b3:03:bb:fe:a8:44:81:e7:
         67:59:ce:1f:35:36:48:a6:23:49:f4:f6:4b:92:89:42:54:85:
         a4:89:95:20:42:39:79:f0:56:17:74:c7:50:f9:db:ba:e6:f8:
         0c:af:31:f7:f9:f9:26:88:03:0a:91:ec:73:2f:e3:6c:95:0b:
         b2:e7:89:c7:a0:e6:f4:99:8e:b9:a1:06:e6:ba:57:b4:17:24:
         ad:e9:be:f3:d7:90:47:6c:85:eb:f7:57:45:ba:49:73:a5:e1:
         1a:51:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:54:52 2024 by rpki-client on console-ams.rpki-client.org