Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File:                     U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier:          r/ooNNTYTAfjdAHutpawrpeCcfL8l2kSJu0DHyyJBs0=
Subject key identifier:   A4:C3:6A:E6:A4:26:7A:E8:25:D3:16:A8:79:99:86:54:C3:00:73:89
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer:       /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial:       0193572D69FD217D06991EA2B4688B8B12E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 04:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:13 +0000
Files and hashes:         1: NA0trVDP3IfIOrtlvb9lgC3R-yE.roa (hash: ESnKqvhcd8RRpPRGfijRBHm6LGBNOfvPLl3iN2vbV6I=)
                          2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: wFflplks4oTn0GSgznQ5yzNUUxfI2PV4b3TKmjtJXxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:69:fd:21:7d:06:99:1e:a2:b4:68:8b:8b:12:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
        Validity
            Not Before: Nov 23 04:00:13 2024 GMT
            Not After : Nov 24 04:00:13 2024 GMT
        Subject: CN=a4c36ae6a4267ae825d316a879998654c3007389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:6b:c8:55:0c:fa:9e:b3:88:6f:78:a1:c2:
                    0e:7c:7b:30:bd:e5:1a:bc:a9:63:3c:f6:13:92:ee:
                    f2:8c:8f:5d:80:4d:95:e8:9c:bb:4e:2a:7a:8e:92:
                    d4:bd:8b:0f:70:f8:41:fb:57:d9:27:7b:80:b6:b2:
                    58:41:a8:cc:43:11:97:cf:d2:e2:ee:a6:13:b7:fa:
                    99:f7:f4:98:42:03:88:79:5d:81:19:12:cc:f3:79:
                    24:5b:2e:de:79:29:9b:9b:92:b4:a6:dc:03:61:06:
                    fc:e1:f1:4b:aa:5c:c9:33:76:21:6b:79:c3:ae:92:
                    ac:95:57:95:c5:9c:2e:0f:cb:60:94:ae:6e:f2:95:
                    38:df:71:6e:50:a1:ff:c3:f6:1d:6d:cd:71:1a:8d:
                    77:0e:20:df:47:85:5c:4a:18:b7:17:c4:aa:03:7a:
                    dc:5b:90:22:1a:da:42:99:3e:73:62:a5:26:1b:e8:
                    05:1c:92:c3:f2:1b:8e:0f:35:ce:e0:86:17:93:b7:
                    8e:03:54:5a:46:ba:d2:5d:5a:1c:fe:db:3f:31:ff:
                    be:f5:7b:52:5f:c9:b0:c9:3a:c5:d2:37:46:8e:b8:
                    cb:95:c1:e4:79:e0:6f:92:1d:de:54:b7:7a:15:4b:
                    12:f6:d0:31:54:7e:e2:2c:a7:d6:f0:73:a1:b3:c2:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C3:6A:E6:A4:26:7A:E8:25:D3:16:A8:79:99:86:54:C3:00:73:89
            X509v3 Authority Key Identifier:
                keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:28:d2:6a:de:00:1a:0d:ae:89:02:b5:6e:5a:7d:91:b1:44:
         ea:dc:2d:5e:c1:b4:dd:dd:41:b5:45:f8:fb:02:d4:85:d2:88:
         20:c1:21:ed:7e:67:7a:cd:6c:48:10:ab:6d:3b:75:b7:5e:97:
         84:21:06:6b:b5:ac:36:83:3d:d5:b6:1c:94:7c:2b:1d:63:20:
         0c:17:f3:f0:93:0c:a6:03:91:f2:d2:87:ff:b3:6b:ce:ea:95:
         a7:7a:cd:ad:79:6c:29:e9:7c:a7:f1:97:ea:da:9c:1b:bf:e7:
         39:fa:f9:e3:4e:91:bd:a0:e9:c8:66:91:80:e4:9b:52:25:97:
         d2:4d:c8:3e:54:e3:8e:75:7b:47:98:d3:74:ee:86:08:d8:e7:
         7a:9a:88:29:59:87:fc:7f:c0:af:d7:05:aa:95:d1:88:64:8d:
         0f:5b:31:e6:8b:12:1c:00:65:21:bc:1c:8c:bb:ee:72:85:87:
         94:78:54:cb:e8:46:e3:30:fa:ef:21:de:ae:f5:98:cf:6a:61:
         c7:c3:1e:d6:5b:d4:1e:f0:9b:4a:4c:0e:f9:93:e0:a7:eb:d3:
         8c:92:70:49:5f:04:a8:ef:8d:45:cc:34:76:08:30:c4:d1:67:
         f3:ab:77:c1:6a:f2:72:e5:ce:64:4a:72:2c:22:fd:2a:cd:af:
         11:a0:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:47 2024 by rpki-client on console-ams.rpki-client.org