Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File:                     K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier:          48xOnn5dqfCAxoXtx1p76WbgM++ZhN8KUSeUo3t5JYk=
Subject key identifier:   9C:FE:0E:4D:D4:AD:FC:A4:25:3D:96:B1:9C:EB:9A:70:48:26:AE:01
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer:       /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial:       01938B528E487DC7CE7AA708BF1DFE2A7133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number:          139F
Signing time:             Tue 03 Dec 2024 07:01:03 +0000
Manifest this update:     Tue 03 Dec 2024 07:01:03 +0000
Manifest next update:     Wed 04 Dec 2024 07:01:03 +0000
Files and hashes:         1: 1-4UDbocNFtvjg9nQIp4alXwEFg.roa (hash: VMrDtB/HNh/gS6gEEiyGZJ6tAZbb29qnml2ItOCl1R8=)
                          2: 1-YO6Attdtx5xSs_j2q1NRX2VZ5Q.roa (hash: Gpiju3Z6ngE1F05AjTSYdcmftfpO2uuW5ocYIMpzxkg=)
                          3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: YycpIPUDhI1gWQ5uVEyIpcbXX3HY1xoeSzO3JNklhmA=)
                          4: lOD1LivQ79P--EWvMKrJ2f3poGg.roa (hash: +7O++nvqvu92NYcnNHW9HRWJxwjv6JqCzKuU2jDygqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:52:8e:48:7d:c7:ce:7a:a7:08:bf:1d:fe:2a:71:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
        Validity
            Not Before: Dec  3 07:01:03 2024 GMT
            Not After : Dec  4 07:01:03 2024 GMT
        Subject: CN=9cfe0e4dd4adfca4253d96b19ceb9a704826ae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:02:05:84:c3:7b:e8:3e:1d:44:31:eb:d9:
                    dd:de:21:6f:37:92:f7:ff:ab:17:c2:e9:67:c0:b8:
                    86:1b:07:c5:6b:c0:fb:79:d9:e7:62:cf:22:1c:43:
                    62:6b:38:f6:44:93:0f:64:e2:69:41:16:2d:ee:fc:
                    28:a9:35:ef:db:bc:76:32:f4:a6:59:4c:e8:50:ec:
                    ca:47:81:da:0b:d1:b4:95:f6:70:de:64:7d:59:7e:
                    eb:73:db:4c:b7:0e:6e:7c:8a:a8:f7:a9:f9:05:46:
                    82:75:0c:5a:8c:f7:09:53:ed:d7:4a:6a:0b:8f:f1:
                    c6:3e:cf:d7:05:e8:3b:a4:7b:0c:77:16:05:50:b5:
                    f7:75:a6:0a:4f:7d:c6:f9:8a:85:5d:55:12:35:6c:
                    c1:d5:83:a2:a3:40:48:bf:a4:46:92:2b:67:8f:bb:
                    3c:38:05:f1:f8:92:f1:0d:4e:b5:22:2e:82:e0:1c:
                    e9:f6:1a:4f:44:d0:1f:7f:a8:4f:3d:73:f3:80:77:
                    e0:1e:5c:9b:4f:6d:7f:18:66:08:21:7e:73:c1:27:
                    71:c3:5c:79:b0:dc:83:fa:45:34:5e:60:43:1e:23:
                    fe:3b:d2:93:0e:e2:eb:b3:81:e7:3e:44:bb:c4:1f:
                    b6:ab:d1:2d:71:b3:27:ff:74:75:e8:1d:ce:ed:84:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FE:0E:4D:D4:AD:FC:A4:25:3D:96:B1:9C:EB:9A:70:48:26:AE:01
            X509v3 Authority Key Identifier:
                keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:7b:fe:6d:fb:e6:81:20:02:c9:5e:75:2c:b9:fd:28:dc:
         fd:6d:12:95:f6:bc:87:3a:a4:ca:bc:5a:85:7c:32:2f:d3:32:
         de:8f:19:8e:e4:c7:35:27:2a:11:b8:77:13:e2:9a:e2:3a:b3:
         81:83:39:37:91:9a:bb:c9:c6:22:f6:c5:c0:fb:18:a0:60:3f:
         25:10:94:7b:e9:82:15:21:97:7c:c9:ec:3f:5d:69:13:1e:25:
         78:e3:ce:ed:28:37:9a:bb:96:34:c8:05:48:7d:1a:0d:55:26:
         40:86:a0:74:93:aa:b1:6e:42:7f:29:9f:92:b8:f2:19:9f:2e:
         bc:40:68:b4:5a:df:f2:5e:a8:89:73:be:ad:e8:9b:41:87:1a:
         35:06:16:36:da:4e:2e:3d:cd:c7:15:c4:47:56:9e:a8:7b:8f:
         a7:41:b7:80:e0:9e:1c:23:1f:fd:4c:0b:c5:06:20:26:e6:0e:
         f1:fb:86:f9:01:82:11:fb:de:68:f9:48:36:c5:86:46:b0:02:
         ef:d1:c8:a3:f5:d2:2c:2a:48:f6:a0:be:22:25:a6:3b:5b:a0:
         ed:31:e3:64:b4:65:07:6b:e0:f3:84:79:42:ca:c1:cf:33:cf:
         3d:a3:90:97:11:54:20:1f:3b:b5:b0:bc:7f:04:1d:cc:83:e1:
         c4:2c:5a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:49:15 2024 by rpki-client on console-ams.rpki-client.org