Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          nt4fORWxaCAzQvHm2pjDLj8umfmon2S6bE2XuljOHtk=
Subject key identifier:   CE:B4:36:4F:8B:89:DC:11:C8:39:6A:72:E9:CB:A4:C6:5E:F8:18:9D
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       019350F495F0877D80C285C3320C2A9E4431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          137C
Signing time:             Thu 21 Nov 2024 23:00:26 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:26 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:26 +0000
Files and hashes:         1: 7dnCzTxsPRECBdbLH-hVl5yrUK4.roa (hash: cnxhHM+pxtkasSIsZ5aLAd+LIKRNNOyt9IQGVg0QJ/8=)
                          2: GR00k5QmmfS0cOUClVnK6RS66s8.roa (hash: wElYhpa1RlJTgvoyDSQXxyiexohiV/1r6XO0SK8c8es=)
                          3: MpOI5w8DL5opeoCQN4SZ8wjnVts.roa (hash: tlbHRL/hpJq36QXY99yAxnl4FKGJfD0J7XuKeK1WloY=)
                          4: Omc-NzBN2dxYiMi16TuLg7hzefA.roa (hash: bzBYxl8ZCmgzPMyFMfqjqhagIIhX/nzIxcgT7fp00Hs=)
                          5: _DL0HmnT9m_SEQxVLnEWxe4mGd4.roa (hash: 0mvIqpr8dTb2jLMm94cIJZ+qGtjDhS4PvdLfxdW8krU=)
                          6: eo1ldKAOybCByJyYx1I9BpnwkGw.roa (hash: 4TBhc5ntwvM3jtcJYB/UDidgCV6I7Ozi7EUYCIwg31c=)
                          7: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: Ekwu5Gdv8OyAVtG+ZVJ3z8TJTSlnro713Yb97f7ItiU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:95:f0:87:7d:80:c2:85:c3:32:0c:2a:9e:44:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Nov 21 23:00:26 2024 GMT
            Not After : Nov 22 23:00:26 2024 GMT
        Subject: CN=ceb4364f8b89dc11c8396a72e9cba4c65ef8189d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:fa:4b:b3:74:37:8b:70:0e:33:61:22:26:
                    3e:25:5f:e1:71:ee:74:cc:f0:98:14:93:54:1c:5c:
                    f5:59:75:4e:b5:9e:17:b6:1a:d2:c1:b9:c3:77:cf:
                    32:42:4b:51:d3:27:23:e6:05:4e:8f:fe:e1:00:6e:
                    86:20:e5:d0:f6:07:4e:6a:e0:d5:5d:56:17:63:4c:
                    96:3f:7f:ff:41:d1:08:8f:27:c6:8d:ef:2c:a9:1b:
                    cf:0e:a6:47:67:23:ba:a6:ec:12:cf:a2:5a:97:0a:
                    5d:c1:4e:d7:ff:e0:69:e3:d5:e3:c8:93:38:3f:58:
                    79:c7:c3:69:33:c0:06:a1:37:e2:5a:1b:ad:19:fb:
                    11:49:18:2d:1c:2f:20:6b:fc:4d:9e:06:48:a6:e5:
                    80:03:00:06:35:69:0b:8e:1e:ac:e6:2e:8d:ab:f8:
                    6b:d7:e7:4f:2f:32:fb:e4:13:e9:70:fe:1e:46:85:
                    d3:a8:97:1d:36:10:65:20:46:03:c5:dc:fd:0b:6f:
                    bd:85:a3:7d:48:cd:1d:6b:02:e7:59:a6:b5:fe:e5:
                    88:bb:d4:cb:cc:80:03:47:6d:44:d9:2a:90:38:d8:
                    64:c9:e2:f0:0e:63:e1:c5:44:e5:21:f0:bb:3f:88:
                    29:f8:c8:86:9f:3f:53:53:53:3e:c1:d5:23:9a:84:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B4:36:4F:8B:89:DC:11:C8:39:6A:72:E9:CB:A4:C6:5E:F8:18:9D
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:83:c8:0d:7a:55:2a:34:98:24:4c:b6:92:da:2a:d6:2d:
         d8:39:f7:82:4f:83:de:0e:29:d4:48:61:82:28:1c:2c:4a:7f:
         fe:47:39:5c:dc:5c:73:8f:bc:11:24:12:3e:94:bc:b6:78:cd:
         59:da:a6:03:06:43:84:b6:94:78:db:38:dd:c7:57:7a:dc:de:
         87:8a:69:53:62:8f:39:01:bd:8d:58:ec:ab:da:5e:60:f3:36:
         09:47:47:26:dd:95:ec:bc:fe:0d:43:9a:f7:c2:9b:ce:a1:d5:
         b0:77:cc:11:9e:4b:9a:1e:1e:cb:a8:e3:9d:34:c5:57:72:40:
         7e:a4:9d:a1:69:2c:b1:39:98:e2:80:0d:09:54:ac:4d:3a:d0:
         f9:c6:46:3a:58:0e:b5:cf:d6:ac:0b:c8:c6:6b:18:98:34:16:
         5d:1b:89:ad:90:5b:51:52:bf:15:bf:6d:6a:83:b6:48:0d:5c:
         e1:cf:91:a6:30:81:60:3d:10:30:60:cf:cf:b6:6b:f8:cc:54:
         bd:56:f9:70:bf:a9:ec:4b:0c:49:40:25:3a:58:e4:69:02:d0:
         c5:ab:64:c8:ce:eb:97:7d:09:48:18:37:8d:fd:4b:72:e2:e2:
         26:f5:ac:34:4a:46:ae:53:c5:f7:9d:c9:60:b5:b4:74:07:58:
         35:54:32:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:16 2024 by rpki-client on console-fra.rpki-client.org