Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File:                     aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier:          Lj5bDfnJTNio+pXnUcUM5P4E4utSnwSga2K8akTH2dQ=
Subject key identifier:   0A:A7:41:70:16:03:9C:ED:93:FD:42:0E:50:9A:53:7B:35:CB:38:53
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer:       /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial:       0193658DCF7C5BEA9E03B985752A33737178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number:          137C
Signing time:             Mon 25 Nov 2024 23:00:12 +0000
Manifest this update:     Mon 25 Nov 2024 23:00:12 +0000
Manifest next update:     Tue 26 Nov 2024 23:00:12 +0000
Files and hashes:         1: 4bwae-a8pxGF-v2rsIP2Sf9eobU.roa (hash: 0MqE+Zw2rq/15VaGxS2lp0EHS/XMzWsUyLwconT/Up8=)
                          2: H3U-XbfX-hpsZalplHzr25wWkRc.roa (hash: hHV1nrCAiEBy+cwmUMGBEGZfn4DT3vzBQZMzloqpOwc=)
                          3: IgEjxACf9MrVS-wP256JW3b7eJs.roa (hash: L1Fm7PVegB4TDn5da+KEz9erXEqBnriwZ4yECt0mZb4=)
                          4: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: x+vanFDm9Ja36AivLrtHJVpoCEIn2wxHwgcz/g1/I4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:8d:cf:7c:5b:ea:9e:03:b9:85:75:2a:33:73:71:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
        Validity
            Not Before: Nov 25 23:00:12 2024 GMT
            Not After : Nov 26 23:00:12 2024 GMT
        Subject: CN=0aa7417016039ced93fd420e509a537b35cb3853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:7c:5a:4e:b1:9e:98:b6:7e:cf:6c:5a:37:
                    64:95:ca:5b:fe:62:3c:68:9d:20:b6:f8:51:09:80:
                    f5:d8:6e:b0:bf:15:96:4e:95:ee:b2:dc:39:32:85:
                    ef:e5:58:d7:40:35:01:a8:44:20:fa:34:87:e6:2c:
                    a8:c5:fc:b4:4d:69:88:75:5c:e2:e8:5e:b0:4d:1a:
                    59:3a:53:a3:c8:c2:f0:07:f7:f1:58:1c:d5:4b:8f:
                    4a:b5:99:9d:b2:74:37:a3:5f:51:c1:f6:68:5c:f1:
                    9f:66:b5:cc:c1:fc:eb:ac:fa:b1:f5:91:db:1b:f9:
                    b6:a0:ab:c9:05:9c:12:d3:6c:50:2f:ac:aa:9e:a8:
                    4b:1f:28:6d:6c:79:20:90:cb:8a:84:30:05:2d:6c:
                    03:a0:10:1d:96:06:0a:99:cb:57:a3:2c:bb:d0:02:
                    b2:51:30:31:30:19:b8:d6:0f:14:c1:a0:99:75:33:
                    82:a7:63:e5:17:b2:08:f5:0b:27:d0:65:ac:42:86:
                    ef:12:81:45:13:14:e3:b0:75:ce:54:a7:7f:77:46:
                    11:7c:b3:b8:52:1c:4c:96:1f:2b:f1:00:38:36:39:
                    de:f3:68:97:21:fe:31:f1:06:87:b0:cb:b3:7e:6b:
                    3f:54:ff:ec:ac:70:55:f5:60:39:d8:9c:37:d3:55:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A7:41:70:16:03:9C:ED:93:FD:42:0E:50:9A:53:7B:35:CB:38:53
            X509v3 Authority Key Identifier:
                keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:03:89:56:f3:00:7e:90:0d:8b:68:8b:7f:ae:3b:24:c7:7f:
         13:cb:d9:c3:cc:51:cf:81:3d:dd:63:d5:05:56:f2:16:e9:cb:
         60:b4:c3:d7:8b:d7:3a:cd:8f:0c:14:9d:4b:2d:94:18:cc:a2:
         37:ce:37:7d:3d:84:33:b9:cd:72:45:3c:ab:27:62:7d:bf:13:
         89:c4:ea:ac:dc:f6:27:31:01:4e:f4:d4:0d:1d:b6:0c:b1:00:
         c5:e6:aa:f8:99:35:4c:72:8f:4b:db:58:b8:ae:56:5c:d2:84:
         ac:c1:1a:72:42:52:9e:d7:cb:d4:92:8b:3b:89:b2:81:48:a3:
         5d:c7:8d:c2:31:60:94:e3:d1:53:1a:7d:10:83:07:93:b8:e8:
         f3:7e:66:7e:1e:63:08:34:e3:d1:30:d2:6e:1a:fb:fa:41:04:
         75:19:3a:8e:83:b6:a2:79:df:16:96:87:79:1b:79:02:69:89:
         e2:35:aa:3d:70:ee:25:d0:c7:fb:5d:1e:b0:26:16:7f:56:17:
         9e:17:35:ca:9f:15:d1:fc:37:73:52:25:68:fd:5a:48:c6:85:
         9c:6d:13:b0:be:49:9e:1f:a3:40:89:52:bb:ac:72:ac:c0:05:
         ea:20:e8:3c:6c:0b:73:4d:1f:f5:fa:9c:39:97:6d:48:56:be:
         33:0a:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:03:34 2024 by rpki-client on console-fra.rpki-client.org