Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File:                     JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier:          UJeSkgL/Yg4cq1EfCw8hkIYBjmpODeu2P35FseL3OtA=
Subject key identifier:   53:2A:07:69:EE:B8:11:57:F9:DE:9C:39:2B:E4:CF:6C:48:BE:4F:B6
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       019352AE3A0CF89809468D1EA50355D8CD8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number:          137A
Signing time:             Fri 22 Nov 2024 07:02:50 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:50 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:50 +0000
Files and hashes:         1: 0suOtXJPQtSFUvb6pHc2yNEq1oQ.roa (hash: VvuPHZSeXlx0aKsfLbsiuEPZ1NIzkSuMLRGdpu8Iw7E=)
                          2: 99qWPUL_82E6cRmXQyd-PXKLR7w.roa (hash: h716kbN54VFu845Ep0/KgpG1ZUdyhdzQp9rh7G1yvqc=)
                          3: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: 6YaJt7oUChYNkmJc4Igsl/yvSA1uA37C47Mvj0tdUG4=)
                          4: MEttmNRddlrJTJnFTQB-VraunwI.roa (hash: KQqRDexXHDQBU78dU4io7lxZ7c4BxPVnLt7PXIwAOLE=)
                          5: Owidvv3qRyrVqJ5-NvrwYS08Oy8.roa (hash: ftsWOVKoIdrub8Z4+bN5B2sW0k4Bu4DwwT7V2+M20fg=)
                          6: ZEyfnNYb2rAV75IjNI53ZY4N2QA.roa (hash: 4yAY4pRTxooNzCZ4YzhOc0BK5UcmnvcwokF3NEzqn5U=)
                          7: g2_t0PdPD8rp6-wXfd4W3qLNoGY.roa (hash: XKui4b0SHImCKIunhPWwtnscgnMxKN49L4tzEf3+/Bg=)
                          8: jbsiYOapleeA487UNMU_0KlUapA.roa (hash: t2/lr1EjZwwRRIXN1+QooA66jaFwKxMmtUKUg22A9NA=)
                          9: lHHU7U-KKAvnkVsGIgg-xZjjoyc.roa (hash: /vtbubbVS9NzgwyVLOVQnntiOS9LXWjL/EWe+h1ozFk=)
                          10: r9OYUHQEWvLvzoIOqiROVB7OYc4.roa (hash: u+1ndhXL9q4POWihwuLCfUWN8DsqTs4rGzXFbG1UymM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:3a:0c:f8:98:09:46:8d:1e:a5:03:55:d8:cd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Nov 22 07:02:50 2024 GMT
            Not After : Nov 23 07:02:50 2024 GMT
        Subject: CN=532a0769eeb81157f9de9c392be4cf6c48be4fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:88:ac:cc:2a:60:fc:4d:e4:a7:ae:b6:ed:
                    14:df:07:a2:ec:63:6b:bc:03:d4:64:4d:ed:24:20:
                    92:89:40:d6:63:d3:eb:2c:b3:d4:e6:3a:09:d6:1e:
                    6d:89:5f:07:b9:11:13:47:f0:a2:a5:4a:18:d3:b7:
                    e6:f5:87:e1:be:a0:4f:96:9d:ed:b6:86:cc:f3:17:
                    9c:0d:93:3b:af:2e:48:7b:7d:6b:c1:c5:f8:fc:56:
                    80:78:7c:02:21:64:fd:2a:c6:9b:e7:ca:9b:75:1d:
                    b9:e5:f6:f8:dd:1a:48:a5:20:14:ae:65:38:21:e8:
                    94:2a:e9:c9:b7:4a:4a:ad:fd:43:23:93:61:8e:5e:
                    77:a8:f3:cb:30:f2:00:f1:c7:09:5e:f7:ba:ba:8c:
                    15:7c:b8:ef:04:6f:6f:f7:71:10:3b:41:fd:aa:44:
                    e1:08:df:6b:2f:19:8e:73:e2:8d:11:91:64:56:8b:
                    2f:41:40:48:94:47:4f:30:af:ee:eb:45:dc:6e:c8:
                    51:1c:58:ac:c1:dd:dd:e5:4a:e8:59:cc:19:e4:87:
                    59:d4:0a:81:69:21:8b:61:dd:f0:00:4f:48:80:48:
                    ec:2a:77:98:4e:45:61:2b:c3:4e:7d:7c:d5:5e:f8:
                    f3:b4:c7:e1:90:80:2f:1d:b6:57:64:0e:2a:18:6d:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:07:69:EE:B8:11:57:F9:DE:9C:39:2B:E4:CF:6C:48:BE:4F:B6
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6e:6f:db:70:3f:f0:28:26:f9:88:7a:1a:07:c0:ba:4a:af:
         2c:19:12:d2:4f:60:31:91:ec:96:54:38:1e:09:0b:82:a8:12:
         79:0a:8e:3e:c6:f3:29:7d:c2:3a:a5:67:34:5e:69:1c:9e:39:
         24:63:ed:dc:28:0f:55:0e:80:84:a9:2e:ec:74:24:da:6f:95:
         14:8a:5f:b0:50:e4:bd:70:33:12:16:59:a2:11:61:25:e6:f1:
         24:31:ea:ba:d2:0e:93:b7:83:37:69:91:c6:18:a7:dd:e8:4c:
         2a:57:b2:e7:24:99:6e:08:3d:1d:95:80:02:47:1f:c2:01:e0:
         ad:11:3d:82:db:f5:79:d1:b6:47:9e:a8:28:b9:80:f3:86:87:
         32:b5:c8:16:9e:57:68:5f:59:b2:b5:32:04:29:ff:2c:9c:2f:
         00:e9:28:0f:17:e2:d7:00:60:a8:f7:bb:73:bb:85:90:c0:20:
         22:a0:ed:85:65:4c:ad:67:8f:78:c2:e9:dc:87:e3:5b:71:3f:
         91:78:1a:1c:f2:15:c7:ff:d1:4d:40:32:8f:fe:ab:5c:ca:ce:
         b3:46:f7:e5:c3:cd:6f:cc:de:01:eb:3d:86:de:05:4f:79:90:
         0f:2d:6e:b3:26:f1:63:10:b5:56:ff:3c:d5:7e:9a:ae:2a:7b:
         4a:0e:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:55:32 2024 by rpki-client on console-ams.rpki-client.org