Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File:                     7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier:          uAafFmjWKWMkxYN+wBhpzDGf0YSgBQ3A1Zup8xf27gA=
Subject key identifier:   A0:50:42:53:37:A4:E9:85:AC:D0:0F:67:45:9E:1D:E2:51:7C:CD:BA
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       019351D0D26C03C0C6B9287164528946269D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number:          137A
Signing time:             Fri 22 Nov 2024 03:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 03:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 03:01:00 +0000
Files and hashes:         1: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: F9nEoDY+p/KBGq8CHovTTRZfw49aO+8CDui8kwP5Fxo=)
                          2: EXx4otQ9wEKxlGQE9Ljf5VFh44M.roa (hash: 0fk02nAFtzvrv7AaNHLjiagOPLyu3rzzcmp2AUlOxAA=)
                          3: QI1Z1gW7fSrMJE0WEmoklw4nVY8.roa (hash: yiHNGf5C94GAE8omjdB0coIpDFZl8svokmdyFmBiAlg=)
                          4: QUvY20620dK6qUW49oobl2Ib9Og.roa (hash: E1KFLvEFY9eLPlFrZvsclW0FHMHJ6OXEK/PuT4NNzc4=)
                          5: Y73ON_ND6UuINnEtVg6TuKtXhqc.roa (hash: 3Iw+jcIuheGF//0J5Fk7TQMiSCfxyqjvZrnMgOVzVNY=)
                          6: ojbE75CI5kHcMA_3y6nxTvIz5z0.roa (hash: F9GG9QsNheHdTFEVBAB1jc0JcdcZpBa9YdoJVs6d/7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:d2:6c:03:c0:c6:b9:28:71:64:52:89:46:26:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Nov 22 03:01:00 2024 GMT
            Not After : Nov 23 03:01:00 2024 GMT
        Subject: CN=a050425337a4e985acd00f67459e1de2517ccdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:4d:30:96:cb:58:01:fa:97:7c:fc:d9:43:
                    bb:c5:be:d2:38:c2:ad:96:19:3d:a3:24:a7:84:8f:
                    a9:50:1b:70:d8:58:9c:b9:e3:09:91:1b:6d:65:e1:
                    c0:71:77:e3:12:1d:32:a2:0b:4b:78:5b:8d:09:16:
                    67:7e:b6:3d:91:34:22:fe:ee:3e:ee:01:a2:82:c8:
                    ab:a3:c6:3d:70:48:6f:f0:df:c2:97:81:b2:29:de:
                    d4:8d:01:10:73:78:dd:8a:04:e2:dd:e1:13:bb:38:
                    06:1f:4b:15:0b:2e:4b:9c:e0:ef:1d:4f:ca:a1:c7:
                    a8:37:d6:92:a5:e2:50:ae:cc:58:15:20:6b:90:ea:
                    8f:cb:50:78:a0:fb:5d:68:4b:e0:84:f7:f9:1c:8e:
                    f8:84:cc:27:50:5d:ab:6f:22:3d:48:33:ba:19:60:
                    1a:91:d2:7d:1b:3d:90:50:3f:1a:ba:31:33:ef:0b:
                    7f:f8:97:31:c1:61:a4:f5:e4:08:42:fc:e2:3e:61:
                    ae:f9:b4:c8:e4:93:84:8b:d9:f4:19:0b:56:72:e1:
                    f5:d0:7d:36:3e:ca:b5:04:2c:ce:4d:28:83:4e:38:
                    69:34:ef:50:3c:75:92:09:dd:cb:9b:95:69:e7:96:
                    4f:cf:e3:65:d7:88:36:74:9c:74:79:7e:18:1e:c1:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:50:42:53:37:A4:E9:85:AC:D0:0F:67:45:9E:1D:E2:51:7C:CD:BA
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a8:e2:7b:8c:a4:a6:d1:d3:f0:18:8c:69:e9:b2:9d:1e:fe:
         da:49:96:31:a0:e3:61:c0:28:33:86:cc:aa:c4:33:67:d6:51:
         f5:e0:9e:72:c4:d5:a0:63:7e:0c:fb:29:6a:8f:73:9e:82:d0:
         d4:3e:cf:87:92:ad:71:af:ad:38:a4:42:d1:c4:dd:4d:c1:a6:
         1b:a7:2f:f8:0c:42:c7:26:d2:d6:47:68:a6:2e:27:a5:a6:61:
         95:79:44:7d:f0:1b:f6:f5:d2:c8:f0:dc:5c:83:11:1a:26:47:
         5b:86:ee:7e:92:ea:5e:83:f3:0c:69:2a:7d:81:19:ad:a8:8e:
         de:f4:fb:cb:56:d0:3f:7f:3e:ea:2d:36:f4:60:29:a8:76:47:
         05:21:69:cc:24:79:3f:62:5b:78:e0:85:1b:76:04:7c:a9:74:
         4a:e4:5e:54:50:ce:55:ec:91:23:8f:30:4e:3c:a2:5a:bd:68:
         57:ca:a7:56:27:85:e5:73:23:72:dc:a7:d2:7b:94:c9:da:c3:
         3d:d0:28:a5:0e:1d:14:72:aa:18:25:54:a7:08:d5:1a:15:24:
         cf:e3:cc:39:cb:fb:00:cc:2d:e3:a2:87:18:41:57:6b:52:88:
         f1:69:e7:3e:82:0e:ed:55:3c:fb:47:4c:61:fc:cc:3d:f7:2e:
         ae:bf:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:11 2024 by rpki-client on console-ams.rpki-client.org