Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File:                     fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier:          Pur/BWSXPYcAJsIBECzX6T2tPztgdLy0byL0/EN0NXA=
Subject key identifier:   E0:60:EC:8E:23:04:14:C1:DB:B6:49:FC:96:66:E7:C4:49:86:B6:59
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer:       /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial:       019362215F7187A0666EAC1EAE4D7F29E971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number:          137A
Signing time:             Mon 25 Nov 2024 07:02:54 +0000
Manifest this update:     Mon 25 Nov 2024 07:02:54 +0000
Manifest next update:     Tue 26 Nov 2024 07:02:54 +0000
Files and hashes:         1: 2XE1S5jPNshNL_VS5Kchyq2Dmzc.roa (hash: 7oDzcnyspznt471bYizuFC0lBGXEbr+kmoCFj7/DZ/c=)
                          2: 5QXCfyDPPphpcAX5JvnC-ujHBCk.roa (hash: CqYuNfocldGsQ/CXtBO2QCu+/15iww0b0d3v8e23hrY=)
                          3: XtNYT_Dj5Z5A6MQbH_1BYVuV9DQ.roa (hash: BMTr2ccM98F11g7cRkVNxsvAE8csx8v/5iMv+Aj9aho=)
                          4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: gD6FJtilMxq9T6FfyLAf2Pg6AvL15dL64JipoVqLdcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:21:5f:71:87:a0:66:6e:ac:1e:ae:4d:7f:29:e9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
        Validity
            Not Before: Nov 25 07:02:54 2024 GMT
            Not After : Nov 26 07:02:54 2024 GMT
        Subject: CN=e060ec8e230414c1dbb649fc9666e7c44986b659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:c6:b5:91:08:e8:6c:1a:f7:83:96:7a:fb:
                    f0:17:35:b5:7e:ae:93:3c:35:c7:51:53:24:60:70:
                    51:88:41:ab:72:0e:2e:0a:25:20:07:68:53:33:e9:
                    8c:e3:90:15:60:56:83:f7:4e:38:15:f7:fd:aa:a5:
                    b7:07:af:75:d0:92:ae:77:a8:5f:c6:3c:97:d1:c7:
                    e4:97:d3:b0:b2:0c:c9:2d:0d:ef:e5:2e:b6:f7:86:
                    e8:d1:62:40:3f:32:40:c3:53:e0:a7:1a:3e:1e:8f:
                    50:0c:88:55:d8:f0:ad:44:72:d4:ca:f4:40:75:e0:
                    22:63:7c:6a:9e:62:5b:ae:05:2e:73:bc:ef:a7:7e:
                    a3:36:6c:2d:26:50:eb:9e:3a:d7:86:60:95:34:63:
                    eb:d9:f8:77:78:4b:0d:ca:f0:60:7a:69:80:d9:9e:
                    ff:83:31:0e:1a:c4:e6:e5:cb:be:05:1d:8b:54:9a:
                    5a:97:2e:ce:76:c7:6c:53:1e:d6:e0:35:20:98:42:
                    d8:10:02:64:4f:e1:af:52:63:31:cb:ab:c2:a2:93:
                    13:81:f1:b1:3a:ba:c0:1d:09:2e:98:cb:b9:0f:62:
                    54:3f:01:6c:51:2e:83:36:b3:aa:b6:a0:7d:03:84:
                    c8:10:e8:c7:94:dd:19:e1:da:43:ad:a1:1f:df:75:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:EC:8E:23:04:14:C1:DB:B6:49:FC:96:66:E7:C4:49:86:B6:59
            X509v3 Authority Key Identifier:
                keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a1:fe:f0:bd:c1:fb:d0:6e:de:11:1e:f8:82:14:f2:fc:43:
         d8:1b:94:f4:82:e3:10:1d:04:1b:f7:00:e6:ca:46:3d:5a:8d:
         4f:a0:3e:5b:d0:c2:b7:65:cf:16:80:db:c8:47:26:02:4c:5d:
         76:9c:4c:aa:d0:22:ea:b2:e7:fd:78:f5:ea:d2:3a:de:43:7a:
         a5:93:9d:86:99:aa:69:8a:6b:01:d9:83:05:79:27:72:8e:1e:
         67:09:10:fa:4f:92:82:a0:15:d8:55:06:4a:af:5e:e4:cc:a7:
         42:e8:b5:11:bc:ba:1c:9b:a6:15:45:38:46:a5:b5:2c:e7:98:
         9f:30:49:ed:f7:9f:61:68:28:d6:d4:29:6d:57:0b:d1:cb:0f:
         54:76:04:c1:4c:8c:a0:c7:eb:b9:39:96:47:ee:fc:4a:db:9c:
         31:2d:c0:fe:9f:4c:e6:e4:60:a9:64:99:12:78:58:a6:43:c4:
         b8:f8:25:24:4f:36:a7:e7:cb:a6:20:2d:80:ac:ab:6f:2e:7b:
         c5:20:c3:aa:81:15:34:01:d1:cc:76:6b:f9:d6:f8:65:a1:81:
         c4:df:bc:6e:1d:cb:bf:3a:29:8c:af:c8:21:11:a1:a0:9a:27:
         3e:ba:54:56:6a:b2:04:3c:34:ad:16:aa:52:e1:95:7e:2f:63:
         1c:53:f1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:37:22 2024 by rpki-client on console-ams.rpki-client.org