Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
File:                     dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json)
Hash identifier:          OZoCylvfp/rbHWylxoYKvASomzeoiKoSFFzb9JLMRLs=
Subject key identifier:   1F:A1:21:5C:B9:75:A3:BD:F7:2F:14:15:FC:8C:9F:6E:56:FA:68:50
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Certificate issuer:       /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial:       019355E44BEF151D827D2A8937B52202B126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
Manifest number:          137E
Signing time:             Fri 22 Nov 2024 22:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:45 +0000
Files and hashes:         1: 1-p7d0PfphHjU468ih64hrEB4ngw.roa (hash: viaQ4RhNHjGhNMNu4jJCU6IxOiW/YA5bwZmxTfBWTlk=)
                          2: BQKCcac9UKOCD5MefolvK7NKEhc.roa (hash: iqh9nXvFYgmQfiBd9DZ/s9POX53xra8haiAqpMvoj8o=)
                          3: FjiPdMB3GSAPFhKMLS_lHhwZOHg.roa (hash: ZF6thwdNVy7hKtdBThmuIq45euuZH7Dwk52B1CwSG7U=)
                          4: H6DIpBKISeQ1pRGHFICku0H8ESg.roa (hash: nicm1L4pu3pJZG2vFoPyw7vMMBO7zuRcPn2sXPRDImg=)
                          5: IPT5oP-LwkqA56JhRDTSLza5khc.roa (hash: Zfpus25NnqmGiMj23O9fuVVVQaBjbEBRtFATNoUWIxM=)
                          6: LM9g0k53nEPJgIm715DHHllPVGc.roa (hash: OzS1a/5sXB764+zgZqfA8eJHk+mHEMypuXT3a2JMMEs=)
                          7: amw807vNgA99fhxbHxokk32dE8k.roa (hash: Qh49tILyfeB1wkK9dPnh2LaxaUJ6JeZIoEbwCTgPoHo=)
                          8: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: O/EOXlleLtJi1Qd8pfMFrK0MhvqGmk7fmC6oJwXJUL0=)
                          9: fObJCIUloqhp6tRVT7g90hAgOZs.roa (hash: aovxItBM9mHsBzv4iKQlpdWlmqq469QwRI8TunWpc1c=)
                          10: iDeqXRga2SrBBNfqrV7n3PJBJ70.roa (hash: qbCx0msNDFLD2GNcu/g1A55zu3MCb6yELGAzSPwOoy0=)
                          11: wjG5WnLQ2I7uNmypXcbq0Z6FkJY.roa (hash: UJ13SJIdGy2Aj81etqvr4DpYKyevJ7H+R85oxCs8FN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:4b:ef:15:1d:82:7d:2a:89:37:b5:22:02:b1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
        Validity
            Not Before: Nov 22 22:00:45 2024 GMT
            Not After : Nov 23 22:00:45 2024 GMT
        Subject: CN=1fa1215cb975a3bdf72f1415fc8c9f6e56fa6850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:8d:7d:ca:04:ba:16:a6:94:8f:d8:5b:e9:
                    b4:fb:b8:40:29:ee:d4:7e:50:0a:bf:09:c7:bd:d0:
                    bc:ec:53:f0:56:44:dc:18:e7:ea:63:7f:da:d1:51:
                    d3:e3:30:50:92:1e:cc:b1:77:14:97:7a:b1:ec:e6:
                    4d:0c:bb:d2:2b:1f:7d:0d:45:a1:f0:10:4b:bc:67:
                    54:0c:a2:95:e1:58:ec:6d:8e:ae:6a:92:7b:fa:61:
                    18:0c:2a:15:b2:3e:8a:00:a9:80:3f:af:b5:aa:b3:
                    5b:92:84:a6:77:97:08:57:a9:37:fe:1f:ec:b1:93:
                    01:77:e6:e6:62:d0:8d:19:cf:7d:d6:ab:38:d0:91:
                    8a:55:02:7f:d9:69:28:fe:b5:9c:c3:ca:41:25:28:
                    d5:c8:c7:bd:3c:9f:a7:d2:0b:f5:0b:30:76:3c:02:
                    26:f0:a5:45:7a:90:9a:b4:fb:bc:c7:1d:c2:3e:91:
                    36:a2:9a:6e:f0:f8:74:ac:5f:f4:78:dc:01:f6:d0:
                    5e:7a:8d:88:43:ae:42:6f:22:3c:f9:b7:aa:b2:54:
                    1d:a2:70:88:6f:a9:22:91:93:89:59:4a:70:78:a8:
                    c6:15:87:d8:87:2c:84:97:54:ed:d1:a4:60:24:95:
                    9f:a7:ec:6c:a3:48:18:ce:51:b5:c6:94:92:6c:16:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:21:5C:B9:75:A3:BD:F7:2F:14:15:FC:8C:9F:6E:56:FA:68:50
            X509v3 Authority Key Identifier:
                keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:e6:f8:5c:da:9f:41:50:ab:6b:d9:a8:da:ba:82:a1:14:
         92:5f:a0:7a:4d:0c:3a:15:11:97:8b:17:ae:2c:61:59:c1:c0:
         d5:37:5c:96:46:ab:da:52:3e:23:dc:68:1e:8f:c7:36:fe:3a:
         a9:cc:41:c0:50:1d:a7:76:d9:d5:36:1b:e4:50:fc:7a:6d:b9:
         13:05:5a:fb:75:ce:df:f2:f2:9f:3b:76:8f:dd:b5:00:56:cd:
         3f:da:84:98:02:03:08:01:0d:55:a8:3c:18:c8:d7:bb:48:91:
         76:14:c9:72:d4:03:26:06:88:ae:70:df:cc:75:e8:59:18:29:
         dd:1b:7e:64:ee:7f:43:55:ab:66:df:a9:ff:ee:e5:5d:2b:61:
         ae:40:a8:04:79:74:4c:e9:5a:72:8f:66:2d:c0:71:69:3e:80:
         4d:da:20:7c:96:bb:67:ff:33:36:ec:69:7d:16:c3:a9:72:fa:
         08:c7:c4:42:51:08:ea:58:e0:ea:f4:54:a4:64:5f:26:a2:ed:
         27:4d:fa:61:43:db:4a:31:57:de:c4:a2:4d:5e:3d:48:8d:59:
         cb:25:50:4a:c4:e1:b3:58:a3:89:99:80:e8:74:0f:e7:e0:a1:
         a8:44:9d:07:de:4a:74:e8:8b:ee:f0:38:57:c7:f5:6b:77:f9:
         ab:c5:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:41:43 2024 by rpki-client on console-fra.rpki-client.org