Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          O0c97mk+4DRQWXBqGOvszevFCG2/z8pAHa4jcxadBCU=
Subject key identifier:   82:A0:D6:1D:55:60:D0:C6:75:DD:B7:50:DB:37:8D:98:D9:9A:6B:E1
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       019356899BAAD020CD5F0D66F8214F924DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:01:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:18 +0000
Files and hashes:         1: AxIrorYut5WtFz1Y_41j-dLtYco.roa (hash: htT/nvQHTuI14l27mvD56BJmEUJerBxUXtUiT60Cl9s=)
                          2: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: BW0qDTQbui468XKEHyWyslRfMpFvY6o1HO6/oP4EMHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:9b:aa:d0:20:cd:5f:0d:66:f8:21:4f:92:4d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Nov 23 01:01:18 2024 GMT
            Not After : Nov 24 01:01:18 2024 GMT
        Subject: CN=82a0d61d5560d0c675ddb750db378d98d99a6be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e6:7c:85:f9:33:ff:56:2c:fc:75:52:ce:56:
                    49:47:b7:60:63:cf:af:3f:8f:e5:73:9d:db:0d:f9:
                    dc:13:b5:ee:df:30:c7:95:59:50:f2:c0:c0:a4:f9:
                    81:82:62:00:e0:e5:d6:be:8a:f9:62:d3:70:f0:58:
                    c9:8a:01:dd:e2:df:b1:30:3d:10:45:bc:b4:6b:2f:
                    6e:81:79:47:b7:f5:0f:73:c4:b7:37:69:12:b1:a2:
                    a8:d1:a6:42:19:2a:eb:9d:33:f3:67:d5:34:9f:86:
                    4c:d5:bb:7a:cf:e2:5a:39:cf:a9:ec:90:b9:87:1e:
                    93:03:09:7d:39:45:af:fc:e3:2a:3a:c2:fb:4d:fc:
                    8d:a3:04:b3:67:ca:38:75:76:d6:3a:33:bf:d5:83:
                    b0:84:b4:3d:28:c3:e0:27:9b:9f:d7:90:ff:6e:0e:
                    72:fa:b5:18:aa:2b:58:c5:f2:ec:0f:34:76:af:34:
                    37:3b:41:a0:f6:68:92:b5:22:38:82:16:59:bc:0d:
                    d8:d0:ef:5e:bb:db:04:41:93:b4:2f:1f:34:9d:47:
                    5a:36:02:fa:72:20:57:c2:55:e8:12:86:14:b7:8b:
                    ca:1b:a5:b2:8a:0f:95:e7:bc:21:f7:2e:77:34:29:
                    e6:41:f0:cf:26:b9:84:c4:cd:27:2e:3a:e0:a2:bc:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A0:D6:1D:55:60:D0:C6:75:DD:B7:50:DB:37:8D:98:D9:9A:6B:E1
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:41:f2:86:b2:49:72:0e:9e:fe:f6:42:56:e3:88:6f:67:6d:
         78:04:00:67:8b:aa:5d:35:f3:a1:b8:c1:f6:7e:01:3c:c1:50:
         4f:9e:6a:e0:ad:00:50:2a:31:df:dd:81:bf:1d:49:16:d7:d5:
         46:a8:df:48:9c:16:f2:ec:f7:b0:45:69:9f:c7:c0:9c:ef:43:
         34:a2:56:c7:25:e9:e4:2c:4f:bf:00:ba:78:1f:86:48:fa:5d:
         57:f3:de:15:f9:d3:9b:28:4e:47:3e:73:0d:4f:8c:48:5f:4a:
         2e:40:aa:16:28:7b:ff:e9:99:7c:0e:44:98:e2:0b:01:01:95:
         38:a1:8a:b9:fd:9a:d3:b1:ed:11:76:99:87:1f:c8:ec:23:a8:
         ae:00:a6:65:dc:1a:d3:f3:09:d0:bb:1d:9f:86:ea:e8:b6:a5:
         f2:b5:26:af:52:22:00:94:39:23:2c:3e:12:85:86:89:d0:00:
         a4:ae:aa:b6:9a:37:f0:98:3e:98:63:80:50:f6:82:7e:1c:32:
         b5:8e:9b:db:91:64:0b:6f:a5:0f:46:71:e9:f6:af:1b:67:fd:
         f8:54:09:9c:df:ca:c0:e6:7e:84:9b:e8:91:0b:76:a5:c2:db:
         b0:a2:e5:4c:70:de:c8:5f:4f:1f:14:59:51:a9:cc:da:8e:90:
         e5:3f:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:09 2024 by rpki-client on console-ams.rpki-client.org