Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          g1WRV1xFgpbwOkOHd4BRJ+VDxiwb1ojQsAHNrTd6b3Q=
Subject key identifier:   21:CE:C5:28:C3:83:D0:38:07:D6:39:E9:FC:CA:70:E6:50:93:18:07
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       01935878CCE570CDBB1622212D72EC557B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          137C
Signing time:             Sat 23 Nov 2024 10:02:11 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:11 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:11 +0000
Files and hashes:         1: 1ESXNafcRm0Y4ztw2XV2s7gTUBw.roa (hash: hFdYg3lvZyEKV/JZEKe9l14Xa+L8WBpynqnUAdvp518=)
                          2: FbESP026SDu4r3vUpGPRdY-0JMo.roa (hash: B7U28oJRsanxbl0MwYRXBWlYBI0lFvle+m2jCJCjAds=)
                          3: d5yI5opT0Cbkk44zYMREu8p8iB4.roa (hash: hR+I1R/G1iKdcizDw6xImco1zYNp3GZJwFK5bj7CMsw=)
                          4: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: LoH3LyxLNmgUctXnuK8CwhLJ7u8dtZVKgUeHTKvFlEM=)
                          5: wzKjh6BHaRNDac2yeLYLKiOgaHI.roa (hash: WCBvi6ux6uzlR2ZirLD/h/6ZvSwzqoJpdBo5NOiwJv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:cc:e5:70:cd:bb:16:22:21:2d:72:ec:55:7b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Nov 23 10:02:11 2024 GMT
            Not After : Nov 24 10:02:11 2024 GMT
        Subject: CN=21cec528c383d03807d639e9fcca70e650931807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:1c:63:6e:fc:bc:a3:98:5d:c6:0a:39:40:
                    f2:1f:f8:a1:02:ef:6f:76:d0:10:f5:6d:51:b0:75:
                    5d:00:fc:82:53:70:b0:3c:8f:f7:0b:f1:ec:22:13:
                    ec:b6:8e:1a:e3:e0:eb:3d:6e:ba:25:24:02:47:3f:
                    e6:2f:eb:ea:e5:b5:f5:dd:d2:dd:c9:8f:68:13:6e:
                    da:d1:40:84:ea:f0:27:af:3b:3f:74:e2:ee:58:c7:
                    42:cb:b1:19:e6:a5:db:60:16:05:e7:de:43:a8:dc:
                    5e:3b:60:46:3f:fe:0d:83:2d:84:d9:f0:89:95:25:
                    e6:e4:d7:2a:ef:e1:1d:e7:96:bc:51:28:42:d1:c8:
                    31:89:06:9a:74:54:e7:5b:76:cc:1c:f7:48:c8:2b:
                    14:45:d0:3f:54:2c:18:ca:44:fd:2a:58:96:a7:c4:
                    ff:c9:54:28:53:45:07:d3:3b:ef:30:c0:ba:ad:cb:
                    26:c6:35:98:82:c7:07:55:3f:68:78:5f:b3:d0:f6:
                    e3:3a:ca:fe:a3:87:1f:5c:61:38:d2:16:82:b2:2d:
                    ce:7c:af:49:c1:fb:1b:75:5a:5c:47:d8:ed:26:1b:
                    82:55:f9:02:c3:51:82:49:a6:62:2c:a3:d1:07:f1:
                    d5:c0:d4:76:34:8c:d6:7c:de:47:83:99:a2:03:c9:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CE:C5:28:C3:83:D0:38:07:D6:39:E9:FC:CA:70:E6:50:93:18:07
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:45:e4:d6:8c:14:ed:05:5c:ca:f7:05:01:62:15:64:65:c2:
         a8:6d:8d:9b:e6:51:d9:07:bf:16:80:84:a6:56:41:fa:36:fb:
         30:8b:8b:8b:90:48:56:e2:9d:38:6b:ab:50:b0:e2:2b:11:98:
         a5:22:0c:4e:9e:45:e9:09:ad:f1:ad:be:20:e6:ba:39:c0:12:
         3a:b7:7a:7b:75:68:56:38:b2:1b:ac:c6:b6:ef:97:33:3a:85:
         59:c0:e8:c5:6b:e7:c5:3d:0f:ea:81:82:52:63:d0:f1:85:de:
         0d:2b:4f:08:2f:43:22:9b:51:1e:36:75:7c:38:bd:d3:46:b1:
         09:e9:75:47:d8:53:35:4e:6e:d4:7b:d2:67:c0:41:de:31:9f:
         d0:b2:bf:50:9a:5f:f0:6d:aa:9c:a6:f6:2c:45:48:7b:12:b2:
         67:f0:0f:0b:16:88:6d:e6:91:b4:51:a5:ac:d9:37:25:12:1c:
         81:c7:26:bf:e5:28:9f:d8:a0:67:aa:c3:7a:3d:57:13:8a:54:
         e0:d6:cb:82:53:de:57:d2:20:6a:3d:8e:c5:83:38:80:46:7f:
         30:3b:67:32:f0:ec:35:3d:2c:71:43:5a:a5:9f:5e:bd:93:29:
         1c:7c:1f:ae:08:f9:db:f6:fe:63:d8:68:2d:be:13:4f:c3:56:
         f0:e4:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:04:54 2024 by rpki-client on console-fra.rpki-client.org