Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File:                     gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier:          4flY/8Ag0o+9OUEzOoZ3quTBLKrrVIA1GigF0zL4VOQ=
Subject key identifier:   42:3B:9A:5E:BC:D4:8C:7A:F6:F8:FC:C7:56:1C:C9:8A:7F:A3:FE:DB
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer:       /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial:       0193644445CD0A1203AA25F0962AA27E9033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number:          137B
Signing time:             Mon 25 Nov 2024 17:00:16 +0000
Manifest this update:     Mon 25 Nov 2024 17:00:16 +0000
Manifest next update:     Tue 26 Nov 2024 17:00:16 +0000
Files and hashes:         1: L7UQ0XBRExqUpkt_o1T7EolPLgM.roa (hash: OKZasxSZPHUT/rrpXlXsAXqkM9baNltoDcVqkBsV2dE=)
                          2: ZjWgzC6eXLP-sEWwCK6MY3kbWxI.roa (hash: 3mKZ7IHyDX/09hiXIIDCKF/xkgomhJ729Se87xjHCJg=)
                          3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: AvZtXFSlBtv3rcvotjWdbUJaZPIbrKDbwREx8jMGeR8=)
                          4: toav0epsCN5bPvLo-Pa7oL4Y9gg.roa (hash: YG4HoxnQBaf2XxWGMPsXGhvD0lxjH0BJFYf3nSo49vc=)
                          5: vin48qEwqMvqvC7ritLVIEYG82g.roa (hash: Ql/RvHzo00TX7Od9Bl5RKog3quWZGhZz8wiVbKFEuxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:44:45:cd:0a:12:03:aa:25:f0:96:2a:a2:7e:90:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
        Validity
            Not Before: Nov 25 17:00:16 2024 GMT
            Not After : Nov 26 17:00:16 2024 GMT
        Subject: CN=423b9a5ebcd48c7af6f8fcc7561cc98a7fa3fedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e3:4f:76:76:75:1d:22:60:2d:3c:57:d2:a1:
                    66:93:db:49:bb:dd:91:9d:cb:fa:66:77:2a:1b:7d:
                    61:6f:a6:8c:a0:c6:50:3a:6f:e5:24:44:67:18:55:
                    a5:ac:7f:d9:10:9e:f4:4c:83:c3:f5:91:0f:f7:fc:
                    6b:ed:d2:42:5a:87:59:6b:6d:a7:84:84:b0:0e:14:
                    20:16:20:2d:fc:94:e4:93:42:c2:0d:c3:dc:5b:2f:
                    17:06:03:95:63:34:fe:cd:af:d5:42:a0:dd:96:be:
                    eb:fc:cd:02:ba:86:aa:8a:3a:40:a1:9c:c1:cf:e7:
                    ea:1f:67:0e:74:60:63:24:64:b6:03:f5:18:03:d4:
                    da:b0:c9:c9:68:ba:4e:2d:e7:2b:ce:1c:ff:06:55:
                    2e:a1:e3:90:2e:52:14:f9:9e:08:fa:93:24:83:7b:
                    14:99:9a:81:7b:f6:94:af:64:6a:7e:30:62:e2:a3:
                    0f:25:bf:e0:7f:93:1a:49:cd:66:3a:e8:96:b2:27:
                    ce:e7:8e:b3:97:c0:fc:0c:f5:fc:a5:99:a3:0f:b7:
                    08:08:24:22:50:63:9e:ce:c7:3b:00:95:44:d4:90:
                    4b:8a:39:88:4c:1b:5b:98:8e:7d:fa:f2:18:03:cb:
                    42:71:5c:b2:a2:a2:63:41:fe:2b:c7:33:86:ca:c6:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3B:9A:5E:BC:D4:8C:7A:F6:F8:FC:C7:56:1C:C9:8A:7F:A3:FE:DB
            X509v3 Authority Key Identifier:
                keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f8:68:16:c6:86:90:16:99:7e:27:0a:3f:27:1f:94:d2:f6:
         a6:4a:70:3a:5b:50:c7:86:f1:c9:58:8a:a7:3f:9e:91:e5:84:
         b2:4a:67:cb:f8:92:a5:35:15:ec:bd:78:f9:79:e5:49:73:91:
         ac:b6:b9:ee:98:85:b8:f9:99:4f:85:19:ea:7b:fc:51:28:9c:
         14:50:a3:14:82:e0:5e:c7:97:12:a7:29:87:a3:1c:55:8b:e9:
         04:00:47:12:60:44:cb:b1:0d:65:ec:db:88:01:09:e8:fa:d4:
         96:6b:82:a9:5d:43:12:69:b5:50:84:f0:a9:84:d2:54:e6:17:
         f4:5a:67:db:26:4d:bc:5e:ab:6c:e5:78:9a:31:67:38:db:92:
         6b:b5:6d:5a:d5:18:81:51:87:11:ca:05:42:70:dc:60:ac:96:
         6a:1a:0e:65:ad:b5:1d:fd:cb:6b:68:5e:8e:f2:22:bc:26:bc:
         0c:39:fa:a2:af:27:7b:38:19:73:7e:1d:28:61:5d:a3:8e:8d:
         25:d9:5f:92:9e:0a:2c:0c:89:40:0b:f7:c8:b0:be:0a:d3:cf:
         13:a6:2e:92:a6:3c:45:12:af:e4:ca:b0:f4:20:15:4a:04:c5:
         3a:da:c2:ef:dd:d8:45:f6:a2:99:b3:b9:10:af:76:7d:b2:0f:
         e6:94:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:51:04 2024 by rpki-client on console-ams.rpki-client.org