Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          wwtIbHaWLQjYEgaHHX/WTGjyA6QyperwN7uXTNiWDRU=
Subject key identifier:   2E:C9:7A:B7:87:1D:EB:84:64:D4:B5:12:DD:B0:68:CC:8D:E2:B5:9A
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       0193568A192A8FF0C2C74FE86ECB27256498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          137A
Signing time:             Sat 23 Nov 2024 01:01:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:51 +0000
Files and hashes:         1: NXfguCPsR4Ys9eL2Cn6r0TFJK88.roa (hash: fa0B2cj1SwTB78R0DHIPgEgMgxcpVoaPJYTaBQxZva4=)
                          2: W6G3zr7twnCR9K_8bn9YjIq3Y5Y.roa (hash: 8IC9UP/QUsmPv7fidr7tuO0tx2wglosKmoR28Qot0Z8=)
                          3: Z7aiPluYEIOymkTtYHGHYk-dedc.roa (hash: e5tt1IIURNdWbHrLnbauhe6D5U02KLtvfR0jJEqljn4=)
                          4: cn0muSg0dETqGdHX56l5mplfnbY.roa (hash: r5ykVEQ6BosqsqCg0i+nMKhNaiboDhMcm+C3jdM96Xg=)
                          5: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: 0NAU7XkIv6Qbeb41TGDqHh8rx8MIcCWUcecWpLIsBvg=)
                          6: kjdI05Z_2ng5FX3Yo_ttlFODTcA.roa (hash: SQlNldMBRbosTQVwZjYr24FDgibHgnwRXF3qEiUzOlI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:19:2a:8f:f0:c2:c7:4f:e8:6e:cb:27:25:64:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Nov 23 01:01:51 2024 GMT
            Not After : Nov 24 01:01:51 2024 GMT
        Subject: CN=2ec97ab7871deb8464d4b512ddb068cc8de2b59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:8a:a7:6c:ec:a3:84:85:4b:4e:bb:20:98:
                    62:ba:be:56:23:22:d3:63:e4:ed:6e:50:e1:cf:28:
                    dd:bc:f7:c7:65:ef:64:12:51:94:be:d3:7a:fa:07:
                    71:3f:9e:9e:ef:f1:51:e7:5f:f2:15:f9:2d:13:4c:
                    f9:ec:22:d0:97:b8:49:3d:ce:90:01:ca:86:5a:2e:
                    17:fe:c5:f0:12:ae:18:4e:4c:82:5d:a2:cf:14:2e:
                    47:b4:ff:31:fc:28:66:8e:e1:3b:c0:42:d9:03:ad:
                    40:44:f1:f6:0f:46:9a:1d:df:04:a5:0a:58:7f:96:
                    80:de:1c:b0:bf:27:42:36:8d:0e:16:f4:7b:b5:82:
                    c3:41:bb:2b:26:8d:f9:07:3e:49:ad:19:bc:6a:b6:
                    eb:62:41:81:ce:a9:1e:8d:ca:d9:74:0f:eb:3f:65:
                    f6:68:a2:97:45:06:fc:18:6e:c8:ea:cc:bd:e3:09:
                    19:43:a6:d4:d8:04:ae:4c:de:33:8a:1f:1c:2a:11:
                    dd:e1:fe:b7:78:8f:4e:0d:f9:6f:0d:f5:80:53:4a:
                    07:39:33:2a:48:22:07:e9:02:7b:5c:cd:69:4e:b3:
                    70:d1:c0:9c:05:1c:88:18:de:bd:04:06:af:ba:37:
                    d1:a8:b9:53:4d:bc:34:41:7f:dc:a5:24:ee:bf:e5:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:7A:B7:87:1D:EB:84:64:D4:B5:12:DD:B0:68:CC:8D:E2:B5:9A
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:96:85:57:ee:81:cc:d6:2a:18:dc:0f:16:a3:a9:2f:1f:
         3d:e4:45:e5:2c:b2:59:0e:a8:be:7e:1a:b2:7d:ea:4e:b9:4a:
         50:5e:37:ea:84:7b:0e:b4:28:6d:07:c7:5f:91:d2:67:e4:cb:
         8e:0a:01:7d:71:dc:17:53:27:49:a9:cf:15:f6:c8:c6:24:ef:
         70:9e:b3:c9:6c:b5:3d:02:8c:fe:bc:00:7b:fe:8b:2c:82:15:
         4c:1e:17:2a:e3:eb:dd:5f:a7:a7:28:22:74:ea:9e:2e:8a:7c:
         cf:7e:2d:bc:46:b5:58:ab:d0:00:c7:60:9a:2e:e2:cb:93:ce:
         f4:27:87:c5:d7:8a:ed:1e:f0:eb:c7:01:54:8a:92:a8:4b:27:
         f7:17:ef:90:6d:66:63:e9:d1:5b:cf:2a:d6:da:3d:bf:2d:1c:
         2b:e9:a1:88:4b:41:d2:1d:47:7d:fb:28:f3:47:eb:9f:be:b9:
         d4:11:f3:83:86:a1:82:65:54:14:3f:d0:94:b0:95:b8:56:21:
         2a:89:1a:f4:2e:ad:a0:aa:78:b7:b9:8f:c9:fa:12:ae:a7:8a:
         af:86:0e:da:89:70:6d:90:d9:30:2d:59:cd:a9:8a:3c:d1:5f:
         cb:08:fb:7e:37:32:d2:c7:d1:ce:c7:ee:07:16:f9:ca:eb:c6:
         2a:90:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:32 2024 by rpki-client on console-fra.rpki-client.org