Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File:                     FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier:          iwI9I401v7tY0Fji5viEZ9wDLIdev8jUiH1DgFq9LEw=
Subject key identifier:   C2:F3:35:12:57:F5:C2:EB:A3:5C:74:8D:C8:0D:6A:DA:FF:97:DE:F3
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer:       /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial:       0193549A76BABC1D565EF001C0592B44731F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number:          137C
Signing time:             Fri 22 Nov 2024 16:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:29 +0000
Files and hashes:         1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: W1Ghdlr9LjRX6Ez3xMAovujLpFZcurVqh50rsEFWtwc=)
                          2: PiOLvjeAguPppY49znhBf1M8_Lw.roa (hash: O1AW4KFUdmO5X1W6u5qXYJZP8LKulY7D5/Er3Ov60eM=)
                          3: uI3MD3WXqTNNqKPFMblRDxgoxHw.roa (hash: 2bosj0BtHS3PcghOtTwkkyMylh75hE59a0QGISHqFlM=)
                          4: zMsB9kb8PXCP5ZzAr6qiAs0jbuQ.roa (hash: k46lhElmW/djElcqdcL15Hz4fmztPEokPit1c7sQA/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:76:ba:bc:1d:56:5e:f0:01:c0:59:2b:44:73:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
        Validity
            Not Before: Nov 22 16:00:29 2024 GMT
            Not After : Nov 23 16:00:29 2024 GMT
        Subject: CN=c2f3351257f5c2eba35c748dc80d6adaff97def3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:ca:98:cf:3c:14:fc:3a:8c:39:b0:44:1d:
                    8d:57:ce:a1:86:04:55:ee:c8:b2:f3:47:55:ce:40:
                    c5:83:9a:f9:a5:8f:17:a6:eb:68:1a:1d:3e:5b:3e:
                    5a:04:3b:4b:6e:71:9a:a5:96:2b:55:62:ed:87:e5:
                    35:83:69:87:a5:c7:e8:df:6a:59:28:11:dd:9f:0f:
                    94:9f:04:6f:d0:d0:c4:b0:b5:5a:4f:b9:47:76:bf:
                    b9:15:fc:0e:2c:8d:68:df:8a:b1:ba:f1:39:96:77:
                    99:9e:79:ec:8b:ad:77:69:29:5f:42:44:75:60:67:
                    76:e1:72:dd:26:d6:7f:8b:c2:8f:62:4b:bc:36:6f:
                    33:90:ee:b1:7f:00:28:c2:21:dc:1d:49:39:29:a7:
                    47:59:ab:ce:ee:65:11:0c:1e:ed:5f:24:5a:87:3f:
                    10:28:a7:6a:6e:a4:02:09:fa:4d:db:8a:b1:d0:34:
                    ce:d5:0b:df:4a:c8:7e:ac:15:e1:93:74:07:d2:b3:
                    3b:08:a8:ba:f5:ce:54:c2:c4:ee:38:db:4a:fe:47:
                    9b:09:12:ae:7e:b4:47:48:d5:ba:ee:25:dc:db:1e:
                    77:af:c0:db:92:39:b1:6f:cf:07:73:82:a6:e3:8a:
                    db:5e:f4:50:fe:f1:ec:e8:9a:e1:c9:47:76:16:60:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:35:12:57:F5:C2:EB:A3:5C:74:8D:C8:0D:6A:DA:FF:97:DE:F3
            X509v3 Authority Key Identifier:
                keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:69:a0:26:f2:25:e7:77:ea:20:b1:75:1b:4b:87:1c:77:
         48:d4:a7:91:d0:15:92:cb:9f:5e:97:55:67:6e:a6:0c:91:93:
         0e:a8:b9:06:e4:20:6d:07:7f:63:d7:3c:a2:c8:9e:33:1d:cc:
         0c:2f:81:9c:df:35:60:fe:ea:b2:dd:2f:88:41:c4:82:b1:64:
         ab:3b:11:9f:4c:f7:24:06:37:c8:db:b9:a5:4c:bf:72:f3:82:
         ef:a0:cc:19:7e:ea:3a:c6:80:e8:1d:15:80:c6:38:67:dc:da:
         5d:f8:e9:46:30:7c:5c:5e:42:bb:7a:98:2d:54:75:19:35:9c:
         10:1a:c9:9b:e1:d7:aa:85:11:fc:88:a1:5d:46:79:24:b9:61:
         89:1f:f5:f5:b8:63:86:f8:ad:13:f8:fe:a2:6a:3e:67:3d:fe:
         46:e7:ba:29:ad:44:89:60:27:3b:99:0d:d8:f3:b0:45:7b:9d:
         28:da:f4:cb:f1:e7:ce:c9:29:81:59:1c:ea:70:13:63:11:29:
         5b:86:47:5c:90:09:29:58:83:30:35:9f:84:fd:d5:82:55:68:
         cc:3c:93:71:52:b1:00:f4:d4:7c:8e:cf:49:f3:97:88:3d:b2:
         36:6a:92:96:32:07:60:fe:41:fc:37:08:fa:76:6a:64:05:30:
         8f:47:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:43 2024 by rpki-client on console-ams.rpki-client.org