Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File:                     hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier:          bb6NpWRkSQIO2oX2cnM/uvwIj0fePC63IQZNUtpPK6Q=
Subject key identifier:   31:DE:D3:41:E2:1E:63:4C:F9:E9:F5:5E:33:79:89:CB:55:B1:C7:89
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer:       /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial:       019369DB150B7D0FB1EF9A9D90FE5999F3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:03:05 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:05 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:05 +0000
Files and hashes:         1: 1-HnGzdhcGaEHLfLBFhp78llqAa8.roa (hash: JktoSVq2050DethKJlzy7Wku/7HMilY0ZhkqDwP508o=)
                          2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: x33Jogeyd/9oS/t+vQtKY1m+JhqdX6VFa04qAEe/U6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:15:0b:7d:0f:b1:ef:9a:9d:90:fe:59:99:f3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
        Validity
            Not Before: Nov 26 19:03:05 2024 GMT
            Not After : Nov 27 19:03:05 2024 GMT
        Subject: CN=31ded341e21e634cf9e9f55e337989cb55b1c789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:7f:8c:58:fc:ec:94:e8:99:31:de:5f:fb:
                    06:c7:6d:a0:fc:88:26:b2:ee:1b:af:bd:f7:6e:82:
                    39:16:32:82:99:0e:35:aa:e0:33:68:c9:d7:2f:8b:
                    31:79:e8:b9:e4:91:a0:0b:a0:95:d6:03:07:dc:3a:
                    8b:ee:4e:70:75:0b:b8:3e:ae:3d:bc:10:06:b8:59:
                    17:bd:6e:12:15:ef:0f:59:2d:65:e6:0a:69:cb:9e:
                    1c:a1:94:b7:54:b1:f5:cb:af:25:f3:d5:75:81:da:
                    4f:b7:4a:a6:c2:d6:12:91:57:93:31:4f:2d:e3:fc:
                    07:ba:79:a0:a5:16:57:d9:fb:af:30:6f:9c:58:85:
                    62:82:d6:47:d3:46:8d:a1:58:79:83:ea:35:f7:a4:
                    8f:42:1b:19:f6:6e:c6:90:a3:a6:cb:11:89:b3:1b:
                    5b:97:88:34:15:3c:f5:49:79:a2:0e:df:ea:54:b7:
                    43:ce:b5:09:c1:f8:9c:41:9a:46:36:bd:d9:49:a7:
                    2d:15:6a:7f:c9:a7:2f:c6:4b:30:94:fe:fc:88:ec:
                    5e:db:22:51:b3:f1:29:04:20:0f:22:9d:4b:d0:71:
                    26:f2:f2:57:cb:ff:0d:9c:e0:0a:cf:7b:2a:66:cf:
                    97:bf:31:70:12:2c:64:e1:10:a1:8e:c9:ec:22:60:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DE:D3:41:E2:1E:63:4C:F9:E9:F5:5E:33:79:89:CB:55:B1:C7:89
            X509v3 Authority Key Identifier:
                keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:04:ea:8f:a0:30:68:b8:14:3c:82:9c:ce:4d:b8:6a:fb:7f:
         34:22:dc:8a:a3:d1:91:00:ad:4a:7d:e7:2b:ab:8d:57:d7:82:
         7a:58:eb:9c:f1:c7:43:01:9d:28:e3:e5:92:4b:93:6b:b5:0a:
         1f:83:2d:ff:b3:ec:56:cc:d3:b2:10:a5:8f:d0:54:c1:58:3d:
         76:25:ad:4b:13:87:99:25:0d:53:26:e2:51:35:76:05:3d:e9:
         aa:ba:18:b5:f0:aa:ee:09:44:7b:0b:7b:f3:ef:a2:b2:a1:b9:
         94:f6:bf:90:31:67:e7:0b:d4:b2:e3:1c:e8:f8:e1:ec:8f:ca:
         5e:f3:d6:4a:f2:c0:ec:9c:ed:99:52:3f:54:17:b7:15:12:36:
         dd:62:c7:a5:d0:c0:ac:4b:7d:11:54:99:69:2a:f1:55:6b:32:
         db:16:8d:37:53:34:0c:34:bb:02:3b:61:4d:75:b6:84:e8:6d:
         5b:d6:6a:85:9a:e3:b9:a6:7c:db:2b:91:5a:98:df:69:d6:30:
         0d:a9:e2:58:b6:86:e2:6c:19:f6:e4:37:2d:06:ca:26:a3:f9:
         be:d8:7a:0b:63:f4:10:e9:7e:b0:ca:1e:2d:29:a8:30:b2:9b:
         12:7a:d6:cb:16:33:c4:b3:6f:c7:ab:6f:04:e1:28:d0:7b:d5:
         44:5e:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:25 2024 by rpki-client on console-ams.rpki-client.org