Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File:                     E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier:          gh/ZDVzpUSnCwuUzAWQ+wgc6LhQfCRrvuRd3P+r26Eg=
Subject key identifier:   23:B2:84:2F:60:F0:6A:CB:EB:A3:8E:1E:30:6E:F8:FD:3D:C3:C2:64
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       019352AE62A8808D2A564E54F304419F35B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 07:03:00 +0000
Manifest this update:     Fri 22 Nov 2024 07:03:00 +0000
Manifest next update:     Sat 23 Nov 2024 07:03:00 +0000
Files and hashes:         1: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: 0pVqFsGFN3kMwUPAFAVg4ZtReDOTAPvOGRSnoirlCIM=)
                          2: jVwPAXESnSK8OkgYTla2s7ccqv8.roa (hash: VJTYTXpp5SECPHl2NL755Mp+1UXK6f6lIWxuVUctoT0=)
                          3: jck5BlqwlXE8_rx_3q5eTxro4Yk.roa (hash: jwnMjkOR3CVGiCytZbX8aEFylGy9xQAvy9IWRADM9dg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:62:a8:80:8d:2a:56:4e:54:f3:04:41:9f:35:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Nov 22 07:03:00 2024 GMT
            Not After : Nov 23 07:03:00 2024 GMT
        Subject: CN=23b2842f60f06acbeba38e1e306ef8fd3dc3c264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:7f:18:33:c7:d1:2f:47:2d:9e:a1:fa:4b:
                    9a:ab:c6:02:85:49:4d:ef:a4:5e:ff:96:e2:06:3e:
                    ce:2e:dd:a6:8f:67:31:dd:fa:48:5d:77:9c:e7:5e:
                    e5:56:0f:50:f0:76:1e:16:e8:6d:8d:08:de:c1:ed:
                    91:8f:ab:9c:9e:7d:5f:dd:42:fd:a6:15:92:b0:8e:
                    fa:fc:24:1b:6c:db:27:fc:9a:03:88:de:82:79:d4:
                    05:cb:c8:c3:c3:41:bb:6f:ee:cc:0b:6b:08:cd:e2:
                    d3:94:fd:42:48:18:8e:49:8b:72:9c:03:f9:71:93:
                    b0:a2:4c:fa:38:c0:87:d5:05:e9:39:d2:5c:39:5b:
                    37:8f:41:33:b1:8e:8e:a7:9c:9a:de:1e:e3:2c:10:
                    cd:a4:13:e3:a8:b3:74:72:67:7a:f1:f7:f7:f9:e0:
                    8e:05:19:6b:d0:47:1b:a3:92:8d:87:c8:a0:f0:3d:
                    bc:a5:e8:10:d2:66:0b:00:32:b7:75:84:7f:15:c4:
                    2a:2f:70:17:c8:f1:a5:24:53:12:ff:56:ac:50:88:
                    9c:ab:56:6d:e5:a2:0d:42:94:40:54:e8:d7:0b:a9:
                    4c:db:00:76:4a:46:82:00:78:63:1e:34:15:48:e7:
                    84:89:42:91:7f:84:f4:d7:7a:a7:4d:84:56:6f:3b:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:84:2F:60:F0:6A:CB:EB:A3:8E:1E:30:6E:F8:FD:3D:C3:C2:64
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4a:83:aa:b3:71:00:07:0a:87:44:19:04:ec:ab:b0:d4:38:
         d5:40:b7:07:e7:f1:37:1e:6c:f3:57:14:41:15:8e:23:c6:88:
         3c:b3:1c:c1:58:36:98:b5:e6:6d:20:a7:58:aa:f6:d4:42:c5:
         51:26:65:61:50:ea:00:ca:49:47:35:e1:23:04:dc:cb:cd:6c:
         c2:f5:5e:d5:92:e4:87:7c:8d:58:cd:ff:f3:86:cf:9b:2d:a9:
         21:a1:25:20:33:24:5b:b3:b9:1c:86:a5:17:56:ce:6b:99:f7:
         c6:fa:f5:f5:3d:55:17:0f:d5:03:56:d2:55:b5:91:8b:89:3e:
         f9:ce:67:5d:56:9c:0c:08:3f:9d:f8:6d:8b:02:3f:59:42:60:
         b3:a4:f1:46:ce:38:a4:58:3d:06:8a:86:c1:12:54:91:ec:76:
         2c:4d:78:49:b2:3f:0b:61:a1:2d:97:5e:b5:55:6b:b3:3d:e4:
         35:e8:d2:64:fa:57:ff:88:76:9b:a7:70:c8:43:14:c6:40:ab:
         40:25:82:77:74:ec:56:b5:a5:cf:be:d5:55:f5:a3:cb:e3:83:
         ed:73:12:29:08:26:de:c5:89:82:0c:ce:fb:41:ce:fd:67:f2:
         e8:a2:f5:c5:6a:26:00:7a:73:15:15:e3:e9:08:c5:d5:99:9b:
         be:0a:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:49 2024 by rpki-client on console-ams.rpki-client.org