Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File:                     29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier:          eh/56OP2b7i8nqDOwClZjh7DkxrKtdJWxpOxF7xFzj4=
Subject key identifier:   21:AE:EB:B5:E4:E0:EA:4C:52:84:50:42:47:64:ED:83:9F:C8:6A:01
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer:       /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial:       0193549CA62C66610907AAB0B20BAC405CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number:          137D
Signing time:             Fri 22 Nov 2024 16:02:52 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:52 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:52 +0000
Files and hashes:         1: 25fDYiozCriyzQrJc7xSlHgy3uA.roa (hash: GCnslpnW5X5r0fPTW1oNmrNykT1lPryfTDj+EgFiTU4=)
                          2: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: 461RZ6W9qtdgb3h9IFU26jr5etWU6Lv6gHdhJGOe+Yw=)
                          3: 7bJXskbznb0ncquvAgjTA7MzrUc.roa (hash: 3k5yk4XsFp7D3dxp716QjTvf8HxoYfTiCgc9Sbgqm5w=)
                          4: T69PIW6CtrxEyVHICp_G_9cVoJ8.roa (hash: 05faG5/xdUBs/Jf0emYw1cQqlo9XmW8Ou2XVCizbdjM=)
                          5: WDiePfFCLbv6TYFsZh9otFWz8qI.roa (hash: 6Q7ogjuKDpUxEIuhIILJEBumfZ9kyFNRGoymzDBP7Us=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:a6:2c:66:61:09:07:aa:b0:b2:0b:ac:40:5c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
        Validity
            Not Before: Nov 22 16:02:52 2024 GMT
            Not After : Nov 23 16:02:52 2024 GMT
        Subject: CN=21aeebb5e4e0ea4c528450424764ed839fc86a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:2c:c7:69:4f:eb:c3:bc:b6:5d:74:ac:cb:
                    06:25:52:4a:77:e7:32:a5:7d:ac:7b:f6:ca:3c:47:
                    1f:1e:56:2f:0b:c5:3f:b8:35:15:26:ce:9e:90:df:
                    a6:fc:6b:99:9c:9d:98:ab:b4:f9:b0:39:51:89:6b:
                    fc:5e:2f:07:47:a1:db:0f:66:54:0d:8b:68:1b:c9:
                    c5:bb:f3:90:47:85:a5:55:f5:cd:d4:50:76:eb:5b:
                    06:6d:e2:1b:ed:56:00:42:b2:9c:c5:ab:87:aa:0a:
                    1a:61:1f:e5:3a:95:7a:51:02:d5:52:99:d2:56:ea:
                    ef:d2:ae:33:0c:fc:e1:fc:f0:86:b1:3e:ea:44:39:
                    af:ed:12:b6:18:5e:6f:88:8b:a4:58:06:02:2a:c8:
                    b6:d7:c6:55:ac:55:cf:56:6b:3c:b0:34:23:3f:23:
                    a8:cd:91:81:b9:c8:69:fb:2e:fe:eb:4c:5d:38:bf:
                    0a:8a:d0:c9:62:44:0a:0a:ca:40:e8:8b:65:34:5e:
                    e8:de:e7:80:c6:07:6f:6d:ff:61:a6:e3:9d:84:fa:
                    58:3a:2e:e5:6d:ad:8c:9d:6b:a6:28:34:09:9d:14:
                    bd:b2:66:a8:82:da:0c:db:61:78:e2:33:a8:c0:20:
                    a7:e6:cd:8b:ed:56:27:66:e7:e9:84:d6:19:08:a2:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AE:EB:B5:E4:E0:EA:4C:52:84:50:42:47:64:ED:83:9F:C8:6A:01
            X509v3 Authority Key Identifier:
                keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:fa:1a:98:fc:4e:a0:10:6b:1c:2c:46:74:c3:31:76:cf:
         6f:00:dd:c6:fd:d3:e2:90:04:f8:ad:28:e2:b3:90:19:ab:9c:
         b9:b7:bd:a5:35:f7:97:77:ff:3d:41:38:53:a3:15:cf:cb:58:
         21:4e:b2:45:2c:88:a3:bf:27:60:a0:42:e1:66:22:2f:6e:fb:
         60:80:e7:41:07:e5:d4:6e:04:57:79:ba:11:34:dc:4d:e8:30:
         a0:3e:05:74:fe:08:b9:4b:12:5f:ae:77:cd:62:0d:0e:b2:f7:
         58:15:c1:27:45:5b:96:23:11:ae:fa:73:39:76:5f:84:9e:0f:
         c0:2e:d0:8d:ad:8d:3e:36:cc:c3:b6:3d:57:3b:f4:7f:1d:0c:
         92:26:c0:6b:0c:5d:50:d8:a0:c3:9f:73:be:e8:59:27:b0:bf:
         9d:7a:31:ec:8f:2c:18:3c:fa:45:d6:9b:79:fb:ae:a4:47:a2:
         e9:93:41:c7:6b:da:7d:9b:44:ac:8c:31:02:57:c6:59:48:83:
         3d:09:92:55:26:47:79:15:02:37:ad:76:63:87:d1:16:0d:1b:
         44:8b:3c:af:44:c6:ae:16:4c:20:79:e4:b4:f2:d3:c8:05:2b:
         26:0a:fb:f9:92:73:34:69:eb:db:1c:e6:7e:98:31:a6:b9:64:
         24:56:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:49 2024 by rpki-client on console-ams.rpki-client.org