Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          7yMxMAe7Iqk/FHmp4zqNxWyR36L2R8ys3mxRRRXEjj4=
Subject key identifier:   C2:CD:66:19:82:4B:A5:E4:92:48:D0:1C:B4:57:DD:48:80:34:75:AD
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       019362FAF15080E340EF3BE733B3D10361BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          137F
Signing time:             Mon 25 Nov 2024 11:00:33 +0000
Manifest this update:     Mon 25 Nov 2024 11:00:33 +0000
Manifest next update:     Tue 26 Nov 2024 11:00:33 +0000
Files and hashes:         1: 07Qch0_-FKuJ1vgtSIutct_utqU.roa (hash: DSItPpgRBIU40OVS2xt+LFLXvDzK3CjmAtT6WojT2UQ=)
                          2: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: IXws6htOJ2bcQZAcT/lcxU3JtTpOMM25hO6jyKDad30=)
                          3: 2iEH4Zi_AHM6O2YyPcQYWWc-3yo.roa (hash: MEgMASg26WVnSVLpS5YR8K5CZ0hFOru7GyH6swkrDvI=)
                          4: 9M0AiS47Pz0Y4H4nEhLyH7lIBxg.roa (hash: JI2RcSzbSUEoNleuGE0SZtfxa4artCslIYmqUbSMEgk=)
                          5: SJo0j3z4U9HHdKdnPt5qzLyLnCc.roa (hash: isoHcvU7atNCpp3XyoRYi7olsyQtHeorLRGNXd5Mlus=)
                          6: X6PrIecGYNojLHovPIsraUKNjS0.roa (hash: D3jBagXX1xMKbz9mnmyQLJl4dk/uK0fh36Abh9O3i0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:fa:f1:50:80:e3:40:ef:3b:e7:33:b3:d1:03:61:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Nov 25 11:00:33 2024 GMT
            Not After : Nov 26 11:00:33 2024 GMT
        Subject: CN=c2cd6619824ba5e49248d01cb457dd48803475ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:43:e7:be:53:93:2f:bf:46:00:a7:2d:8f:
                    04:4d:25:82:dd:c4:b6:db:0c:ec:c3:71:31:c4:38:
                    4f:5c:5b:aa:62:28:ee:8c:4e:91:a6:05:34:71:7b:
                    58:72:af:58:a7:e3:aa:8e:0b:0b:fd:ed:2f:12:a0:
                    bc:50:1f:5b:67:88:01:b4:2b:00:df:5e:1f:91:f6:
                    4d:a8:ec:1f:2d:46:aa:49:eb:99:7b:62:e4:73:32:
                    aa:56:f8:19:02:10:91:37:40:5d:29:bc:cf:75:fc:
                    ab:d6:a6:ea:d1:d5:b1:eb:ae:85:8e:7b:01:96:bf:
                    2b:3d:75:a2:71:e2:9a:e6:94:29:d0:5c:4b:86:aa:
                    1e:84:29:51:3f:2e:52:aa:8b:9a:21:e1:6f:fa:6d:
                    91:e5:33:2f:56:73:ea:80:07:95:12:51:b8:3f:b0:
                    4b:29:53:cc:29:75:22:2e:66:9f:e3:4f:68:37:7f:
                    f8:ab:61:30:4c:1e:1a:bd:a1:cf:54:3e:4c:18:75:
                    92:ad:27:15:63:b4:7b:e7:bd:12:a1:63:8d:d7:60:
                    d4:e3:21:56:ab:e7:91:4e:ce:91:03:f5:32:5d:b8:
                    2c:97:e5:53:d8:4a:80:83:7d:47:34:63:5d:5c:82:
                    48:6e:74:a1:1e:c7:8d:b3:aa:58:60:5a:08:d2:47:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CD:66:19:82:4B:A5:E4:92:48:D0:1C:B4:57:DD:48:80:34:75:AD
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:2c:36:07:1b:49:87:fa:39:22:8b:6b:8a:21:de:14:b8:
         73:e8:97:9a:8b:94:6e:78:b3:34:41:86:3c:ab:3d:6d:20:2e:
         5e:43:4a:41:f0:8f:8f:f9:89:35:17:b3:46:3b:ef:c7:fa:b0:
         5b:3c:02:22:c2:e2:55:f6:fd:47:84:15:98:03:72:94:3c:4e:
         d1:e8:f7:ac:2e:bd:88:31:4b:0b:07:f4:cb:fe:e7:17:b9:eb:
         ae:3a:af:91:88:ff:e9:c2:c5:f6:36:68:5a:10:b9:a0:10:cb:
         cd:2f:de:ca:38:b4:b4:cf:e3:2e:58:4e:94:b2:c1:6e:b7:41:
         29:9f:cb:c3:3b:fd:ce:f5:c6:31:c9:07:ac:76:a8:f2:d4:ea:
         be:04:f9:da:bc:a4:37:27:96:ae:32:2f:3a:94:be:87:4e:da:
         57:1f:30:28:85:90:76:dd:3d:38:ba:f9:8d:2a:5d:9e:67:0e:
         bb:e2:eb:c1:b2:93:7b:f9:f5:2a:e7:6f:50:16:1a:2b:be:1a:
         8f:f4:34:b8:ba:b7:51:1c:b6:c7:8d:32:39:c5:8e:b1:4c:bf:
         64:aa:53:73:22:9b:85:50:4c:61:24:4b:c2:ae:90:e6:24:e3:
         4f:7a:fc:a4:c6:74:ce:d6:d7:9d:d1:6d:77:a6:0a:b7:be:5f:
         c3:65:b1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:52:32 2024 by rpki-client on console-ams.rpki-client.org