Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          PfyzsO7TmoyIGKlY6jKmAMTjNBAskSVn5tDnBiKhyvo=
Subject key identifier:   C1:3E:17:41:4A:EC:49:26:98:CA:8C:98:33:9E:3B:24:59:CE:45:7D
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       019352E2DC6C8612D92C1F5B810245260F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          138D
Signing time:             Fri 22 Nov 2024 08:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:19 +0000
Files and hashes:         1: Fk5V4cyrIE8FgUu4RrNzaKZGZF0.roa (hash: KHSHc/W62PBjpqd+cCsjN/sTRpSpBplpliNHeaa+x6g=)
                          2: Iun51VLgtP1oqhEE9sRT93CFjKo.roa (hash: sIikdKmdx2FkPlvu7MWdYvTdHOLU9XMOHj43tdHtO7Q=)
                          3: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: goesZsIysPeASFh3w1IimUrI3tuSsSIDxyiorR9uXDw=)
                          4: bpF1XeMhBtMCrFZBTbI06TJ1Jmw.roa (hash: LOaD+sCf/2D7Mim2JGFH8PEnrqbRK6l+U7TNwt79J+A=)
                          5: mlqReunX9_KtE1M8h_0wBQms1Ek.roa (hash: 2Ys74bmsIISzZZpg3vGKGwZYQWooJUT0e8Nkf6lCAJ4=)
                          6: wJZ78Uw2J_U1Wli4m2jTOJcHUWM.roa (hash: 82hui/RpjWRuuPlVuEkTZ0tWkh28v5Qzbx2WuF72E/I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:dc:6c:86:12:d9:2c:1f:5b:81:02:45:26:0f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Nov 22 08:00:19 2024 GMT
            Not After : Nov 23 08:00:19 2024 GMT
        Subject: CN=c13e17414aec492698ca8c98339e3b2459ce457d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:95:9c:57:4c:06:e3:20:2e:83:36:c8:8d:
                    de:fa:c8:de:0f:92:9f:8f:1f:85:e3:77:a7:0b:5b:
                    87:23:1c:17:b4:ab:17:54:7d:06:3a:79:fe:64:ff:
                    2d:a2:fa:67:53:d3:8f:ec:88:65:f4:11:dc:06:d8:
                    6c:0b:a7:8a:ac:ab:14:53:63:5d:8f:11:6f:59:73:
                    13:1c:ea:c0:fa:2e:a4:09:ec:8b:89:41:55:68:00:
                    a1:c2:f2:2d:d2:79:09:f6:3c:df:31:61:84:95:fa:
                    a3:0a:42:67:0e:32:af:fd:7f:78:77:83:be:a6:4f:
                    7c:1b:97:35:4a:02:e7:8e:6d:37:c0:df:8f:d5:96:
                    27:d0:f3:ce:5e:38:de:f2:8b:2d:0e:f4:bc:7a:c2:
                    ef:d8:13:08:69:c0:f4:19:99:96:5b:e2:66:f1:92:
                    6f:2b:9c:b4:b9:68:7e:33:a6:a1:63:e2:91:bf:b8:
                    19:d5:d5:23:51:b9:c1:d9:44:6b:f9:5e:2e:d8:7c:
                    ae:b9:d1:34:d6:4c:fd:58:11:d1:e2:eb:0c:00:e8:
                    7f:43:fd:c4:68:12:9a:f1:87:01:a4:3b:cc:c1:cd:
                    f0:27:88:5f:5a:31:8b:33:71:35:29:b7:f1:c9:20:
                    26:53:41:32:3e:68:2b:7e:5f:50:d6:31:10:21:27:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3E:17:41:4A:EC:49:26:98:CA:8C:98:33:9E:3B:24:59:CE:45:7D
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:a8:a7:8e:e5:fd:65:eb:de:1b:46:3a:58:54:0f:c1:fa:
         0e:15:11:a5:88:6d:5e:23:12:fa:c2:b7:b0:ce:04:26:74:a0:
         72:7c:26:37:3e:4c:24:2d:c2:59:d7:80:8f:fa:9f:d9:e2:98:
         f9:97:37:20:8b:d3:aa:db:0f:04:ed:b0:86:e3:6c:b5:e9:39:
         dc:02:7f:d1:b6:9e:8f:3e:74:29:d4:96:43:26:fb:4b:2b:1e:
         f0:ad:59:2c:96:65:d6:e9:49:31:16:37:f0:b1:b5:1b:44:eb:
         1e:4d:f3:52:5b:25:f5:a4:ce:82:7f:14:03:c0:d7:db:46:24:
         2c:9c:04:70:72:b4:df:cf:8a:12:a1:08:d2:31:e4:aa:c0:dc:
         4e:81:bc:53:77:c1:8f:d4:56:65:4a:fa:cb:9e:14:d9:53:24:
         d2:0b:19:27:d7:89:59:dc:72:de:c9:66:67:a5:77:87:4b:f4:
         88:29:3a:91:e4:ab:3c:77:d8:74:66:09:2d:14:a2:fd:2f:38:
         9d:ad:6d:70:51:29:da:b2:9d:74:c8:ba:ae:97:06:38:97:38:
         85:3c:d1:17:0a:df:ae:1c:dc:7b:8f:d6:81:f3:7b:87:4b:21:
         40:9b:fb:87:6b:d9:5c:f1:f2:f3:00:75:f1:59:b8:92:1c:8c:
         6d:e5:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:26:55 2024 by rpki-client on console-fra.rpki-client.org