Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          vb4QYoueS3TO4wMK4ns3ej1eF8tOYcaRLsaIZ87t7OQ=
Subject key identifier:   F0:37:F8:50:43:D9:47:4E:9E:05:F0:F0:B7:34:68:72:11:E3:A2:79
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       019352AD1CE1A6A38381671D9A205210DC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 07:01:36 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:36 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:36 +0000
Files and hashes:         1: 1Ibq9p4r_2nmzxUnXILAgp4hTmU.roa (hash: OPaN64NF/Pvgw6uIT2esv1cvd6xf/jmzeKQZQIELyCA=)
                          2: 2XLsgkYFF_At_R8CADoSTjOSGLw.roa (hash: kidiW8M3bybXJaTUyZgIMUELgEWmn23t2JlprMH7ukU=)
                          3: 6_9QDbVP5qrgT3MDHZPD-TgwyjM.roa (hash: KNEn6mkyDUlEo3s153xYwuOJJ3o0vlN9hiu6DDMs1j0=)
                          4: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: i1VRhwmkVUOmKdlHRFOWlOwEFC0gXQBKTOwbpNAI8Og=)
                          5: VP1WhwbBlOVusKe895eSrmMT59M.roa (hash: xtiYG6MINgcFzPCNh0uwAp/NIJexbXt5a97xvhNpYnM=)
                          6: l_PoOXMK2S_xlBDJFcCZU5JZSqM.roa (hash: nU5NLNQR8KUD3uCMiOKYb0TUFVHhYaH3xHbbsg8PEoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:1c:e1:a6:a3:83:81:67:1d:9a:20:52:10:dc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Nov 22 07:01:36 2024 GMT
            Not After : Nov 23 07:01:36 2024 GMT
        Subject: CN=f037f85043d9474e9e05f0f0b734687211e3a279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:d5:95:fb:35:ef:74:57:ba:bb:4e:a5:7e:
                    13:95:56:1d:f1:81:d1:d4:28:00:c4:68:01:49:b6:
                    d8:5b:b7:65:ff:d0:45:c3:d3:bd:e0:dc:d6:f7:98:
                    10:87:fb:e8:5c:9b:d7:a9:79:f1:e7:6d:9c:99:6c:
                    b4:f9:1b:3f:5b:be:3e:fb:94:c3:38:1b:7c:96:b5:
                    1e:95:47:b9:44:c7:a2:d7:32:a9:ab:86:4e:fa:4f:
                    b8:3c:da:c7:64:c6:90:72:68:0f:f3:ac:65:10:b4:
                    23:17:85:0e:94:23:6f:cf:cc:25:cb:a9:66:ab:c8:
                    bd:0f:f4:fa:81:0d:0a:81:b3:25:3a:ba:be:bb:f1:
                    c0:7c:9a:f2:c1:74:b0:8c:7a:e1:c1:7c:af:e8:a6:
                    35:73:f4:e5:31:10:09:cf:f3:9b:43:14:b2:52:5f:
                    85:71:a2:70:e6:c0:d1:83:b0:fa:b9:c9:df:b7:ab:
                    8c:56:03:1e:9b:d6:84:3f:45:cb:fe:6b:f8:da:de:
                    8f:b0:75:12:fc:f7:0d:44:e1:3d:1e:44:4d:b5:20:
                    d8:5e:9d:12:fd:79:57:94:a0:79:ea:c0:69:2f:b3:
                    a1:93:b1:76:a1:bc:a8:ae:de:e7:ff:e6:17:9f:d2:
                    3e:84:ad:09:33:d5:9a:42:cc:fd:31:62:ad:c6:34:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:37:F8:50:43:D9:47:4E:9E:05:F0:F0:B7:34:68:72:11:E3:A2:79
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:51:7d:78:02:65:e0:68:2d:80:b3:ec:7b:d1:22:00:43:fe:
         eb:e1:7e:3d:18:f5:53:09:99:17:f8:bb:cf:0d:8e:3b:29:40:
         89:73:ae:b8:cc:20:7d:86:c9:65:ce:09:cc:fb:39:a4:e8:d2:
         d6:6d:65:ff:0b:22:20:84:b2:1b:9c:3b:00:51:67:b3:a7:2e:
         ab:96:9c:28:b9:43:0a:ff:73:81:98:af:0a:36:88:4c:43:b0:
         9f:60:3c:c3:a3:7c:87:fb:c7:f3:d6:0c:e4:6b:de:38:58:61:
         37:dd:32:8d:61:8b:4d:79:ed:1d:46:6f:ef:4e:71:7e:6e:bf:
         63:14:4c:a6:14:4f:a6:45:b3:42:86:da:49:61:14:42:1c:a0:
         08:78:6a:a1:6b:78:2a:99:4a:89:9b:40:0e:91:79:92:87:fa:
         ff:c1:81:c3:b5:07:c9:26:76:0b:8c:19:7e:b6:ca:d6:1c:04:
         d1:e6:ad:74:f0:3e:f8:06:ee:56:bf:aa:aa:f4:ee:6a:38:0c:
         cd:c0:74:79:13:7c:78:60:39:c8:ba:9e:ea:7c:82:33:fb:40:
         1f:93:74:2d:8c:00:f7:8e:aa:40:a4:e8:b6:7d:12:84:6f:a3:
         63:ef:22:b0:c7:ed:64:c1:fa:2e:15:28:51:25:24:32:30:55:
         fe:39:43:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:11 2024 by rpki-client on console-ams.rpki-client.org