Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
File:                     AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json)
Hash identifier:          C71aPQVerr7u2zYr4mOtLMbQZ0U7vO0OKjhe5QKK1+s=
Subject key identifier:   B1:55:7D:A2:B0:66:B7:32:53:36:5F:CC:0B:B5:EC:46:BB:16:32:8B
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Certificate issuer:       /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial:       0193549BC54A4B9A39127DA30163E7F54F45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 16:01:54 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:54 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:54 +0000
Files and hashes:         1: 8XfU5E7MzFYuypTXvbhEP083EbU.roa (hash: KZJMURpvLn4dYSSHInwHzw6kwrtQ+DM/8s0mvaRLMeM=)
                          2: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: 3gKI8Eyd7cRYcLMUQ/4sigyaVkTf+gup9hm6fZ2YAaM=)
                          3: Fi_mTkT33r_KHTqkWtjVgCEbLGw.roa (hash: Bf/fRWw5+Fau09vB1lTqgkdZ+DJ3G1K92A7afKGyxuU=)
                          4: RAogwIMHYGq53tdXC7Gk8RO040I.roa (hash: 20D9xmPXdHE0UN/T0VfXCh0YrtJtyiqyPTxdX6SdmrQ=)
                          5: ZVZHUfHtDPLxJgLlySJt8Vk6ZQA.roa (hash: jfHTI1WAqT7TmSNH705c80gFS9ZW4BStAjhwYiblM+s=)
                          6: ZvJuu1B1zEkO_y6gw4m-plsKXdY.roa (hash: sG1vw7z7fOHMbIkWAvI0SgtkJgW7W3hglClXDs+KguQ=)
                          7: dXNR-wWG25Oj8eRcphYwSX5_jBo.roa (hash: EYEmEcdwMqQupA/JOQ7zwDC9yq0xHtc64uFATkd50cE=)
                          8: jIRtXclEyTJjwBpUJGT_WeHTNSc.roa (hash: n7Q9q+6+dREwUDBylfu335Xg7CIjHuOtPIZAXN+11qs=)
                          9: kKj3P4KulNNsNCmnryrjMJ2stjA.roa (hash: 4lf8ankOfJQjbNB+OcJ+U4PvAf6i8fdPrJ/3MJZ0Nqc=)
                          10: nTT__ogLWA4tZIC_2nUWxECfh-I.roa (hash: 7+a3W/a6shcBPkpkp62MjvKZlkBBPOLgdKEPaGAgllY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:c5:4a:4b:9a:39:12:7d:a3:01:63:e7:f5:4f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
        Validity
            Not Before: Nov 22 16:01:54 2024 GMT
            Not After : Nov 23 16:01:54 2024 GMT
        Subject: CN=b1557da2b066b73253365fcc0bb5ec46bb16328b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8b:ec:e2:25:1c:a0:33:df:45:ec:63:c0:bc:
                    f1:73:90:40:65:69:dd:2a:c1:72:7f:cd:b6:f4:4b:
                    73:30:56:d2:f6:a6:5c:b5:1e:c3:f1:d0:af:9e:28:
                    e6:72:f8:95:1e:8a:e6:e4:51:e2:df:7c:43:2a:f8:
                    7d:fd:31:fb:7b:d6:75:5b:42:9e:d4:93:2b:ba:63:
                    de:a3:27:e2:35:eb:7d:12:a8:8d:82:c0:a1:34:f7:
                    66:1b:7a:d6:29:57:ec:6a:19:db:99:6e:e1:2f:6a:
                    44:09:60:e9:e9:fb:9c:39:18:43:54:3a:7a:ab:16:
                    b3:7f:1f:94:e1:c8:d8:7a:cd:a7:0c:90:07:41:c8:
                    f2:21:a8:8a:d7:f3:bc:ef:13:2f:c7:c7:5c:f5:01:
                    7f:71:cf:0f:00:ad:3c:e1:f2:7d:63:63:01:72:bd:
                    9f:7c:b8:0a:6c:f6:5c:b3:26:b6:1e:60:47:e1:14:
                    5b:84:2a:f8:b7:83:03:3d:e7:df:00:ce:52:2f:57:
                    db:89:b8:b4:81:9c:f3:c5:e2:be:ff:b2:16:2a:6f:
                    fe:b8:d6:0d:22:55:66:0f:83:b9:34:cc:70:eb:d2:
                    b5:4d:82:42:4e:01:54:8a:da:c1:85:48:c1:43:bb:
                    01:c5:a6:b6:01:5a:ce:b9:a7:c5:3b:63:fd:e2:9d:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:7D:A2:B0:66:B7:32:53:36:5F:CC:0B:B5:EC:46:BB:16:32:8B
            X509v3 Authority Key Identifier:
                keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:46:55:f8:ca:cb:0f:58:e3:fa:28:72:b0:96:f8:f9:bc:b5:
         cd:b5:17:1e:82:30:82:8d:30:af:0b:ed:e6:87:4f:6a:2f:23:
         62:f2:86:a5:c8:9b:96:3a:9c:bf:26:5c:b4:f3:44:bb:93:1e:
         cb:07:00:3d:c1:74:85:b8:d5:5f:c1:9c:6a:c9:df:f8:4f:b7:
         3a:4d:69:ed:1c:09:7a:95:51:7c:8a:15:28:c8:98:3a:79:33:
         3d:1b:0f:15:a1:b2:32:6a:72:58:1d:ff:3e:b2:b2:89:66:65:
         cd:59:ff:7c:b9:94:aa:ba:9d:bf:c4:5d:8c:3e:db:2a:c7:01:
         42:3d:60:79:91:8c:68:e4:e6:58:e1:a1:c0:fe:5b:65:97:1c:
         65:04:de:5e:a7:e6:23:a0:75:66:72:2c:ce:14:b6:a2:9d:cf:
         2d:15:af:59:5c:d2:84:a9:33:4b:84:93:30:c0:68:eb:3a:ec:
         02:4e:c7:67:db:48:6c:c2:c7:33:5e:ff:a7:7c:91:39:74:d5:
         89:49:24:6d:dd:1f:b0:85:15:a2:e9:a2:d7:41:b4:76:99:22:
         2e:15:38:4e:8c:46:4c:81:2a:47:4c:22:77:7a:40:a6:b7:82:
         7f:cf:5b:3d:49:51:2b:c5:19:c2:47:cc:0b:7d:28:82:0d:73:
         71:c7:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:06 2024 by rpki-client on console-fra.rpki-client.org