Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
File:                     6_q_pigGP2uOmIhWb18_z6eYxiE.mft (raw, json)
Hash identifier:          8q/CwnE2WKK3n/fkmqBQ0r76Kf0AKyLVtXGWRs6WByc=
Subject key identifier:   ED:66:1A:93:07:15:C7:4B:4E:00:DC:5E:6A:B1:CD:36:EB:CE:F3:E0
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Certificate issuer:       /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial:       019369DADF931A26AB9DB3B01C0C8AB9CF87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:02:51 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:51 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:51 +0000
Files and hashes:         1: 1f8o8NkPxfZHC9a-rSOWMP6wcMo.roa (hash: ALz22zJVQjfyvAm0jds+IzmIrO3LFbojeBh0mO7wWz8=)
                          2: 6_q_pigGP2uOmIhWb18_z6eYxiE.crl (hash: A5h/Eh4zE2vF+4h8ZCNt1k1njicgkzRF2zA4pYUEE2g=)
                          3: d72IM6z88Uje7lVvyETdD9aTpsg.roa (hash: bvUJRvCOCCVq8XChHrh1N4BbGamYAWVZeiyCwCqIaPU=)
                          4: nIDNZ_l_YiJ9DFcDbnApB0SWqe0.roa (hash: RgfRxqe8cpAUb1zK5TlzJElleBnxgNER634M9Q+5AVw=)
                          5: nonbD71ydlyG5h2hlCTnQv-PahI.roa (hash: UficMPEvZDFA2E5WPRxQnTaKazysNspGjL458TrPC9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:df:93:1a:26:ab:9d:b3:b0:1c:0c:8a:b9:cf:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
        Validity
            Not Before: Nov 26 19:02:51 2024 GMT
            Not After : Nov 27 19:02:51 2024 GMT
        Subject: CN=ed661a930715c74b4e00dc5e6ab1cd36ebcef3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:dc:4f:0f:8e:33:a8:dd:05:33:3c:6c:71:
                    6f:e8:d5:26:74:92:7d:e1:6d:20:72:6c:44:13:72:
                    34:e1:74:e8:5f:2c:b9:e5:f5:ef:26:12:ac:70:52:
                    53:75:e4:fd:15:2c:24:da:6e:c0:66:52:07:b9:82:
                    51:02:ec:9a:eb:7c:82:7a:3a:50:ae:37:59:c8:fd:
                    54:6e:c1:71:fb:44:00:c7:43:69:00:46:f0:58:aa:
                    2f:e6:e0:31:0b:ba:cc:25:5d:71:dc:7a:4a:b2:5a:
                    83:16:39:c4:34:fd:7b:35:fa:c5:40:47:38:92:40:
                    5c:57:01:6e:f3:b1:0a:0d:89:20:58:bd:71:da:93:
                    7d:9f:47:40:25:1c:a3:d9:4f:8b:ad:c0:84:0f:5f:
                    da:8b:52:c6:d1:6d:4a:60:59:40:27:b0:7b:d6:72:
                    79:d4:20:7d:d3:9c:18:7f:ff:1c:a8:7e:96:ef:de:
                    94:08:3a:5e:36:3c:f0:45:39:bc:54:9f:ab:a2:25:
                    17:6f:54:dd:0b:c0:8f:5e:1d:4d:6e:54:35:23:1a:
                    67:19:df:66:e1:c4:62:12:36:68:1d:1a:f6:25:54:
                    4f:96:6d:62:18:7f:2f:a9:c1:b5:a7:c6:08:ce:72:
                    f1:f7:c4:bd:9a:14:65:9a:6d:4a:38:9e:24:ce:b9:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:1A:93:07:15:C7:4B:4E:00:DC:5E:6A:B1:CD:36:EB:CE:F3:E0
            X509v3 Authority Key Identifier:
                keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9b:c5:1a:98:e9:5a:e1:69:49:84:68:5b:b2:28:48:86:3c:
         6a:37:c1:64:95:a4:51:ee:38:c0:15:6c:d0:aa:09:eb:f0:52:
         c7:1d:f0:b5:40:3b:cb:cd:2c:83:21:4b:a6:61:17:1b:5e:df:
         17:e1:45:3d:3d:ba:59:e4:36:6a:f4:6d:14:47:21:52:1a:ff:
         3f:88:06:cf:5c:c3:48:20:31:9a:67:b9:12:af:d7:e8:81:90:
         50:62:e7:58:2e:ce:8a:98:e3:1f:41:04:89:3b:ad:c1:73:d0:
         b5:55:cd:a8:cf:a4:a4:a0:74:2c:71:60:44:fa:fd:15:75:1e:
         8e:b3:85:ef:38:07:db:47:72:d4:7e:e1:e0:54:29:0a:bb:96:
         2f:03:32:9c:2d:15:00:3e:ca:62:4c:4a:a1:db:60:97:cd:9d:
         f8:b7:69:32:63:25:0b:6e:4d:97:80:c7:c1:6f:a9:8c:26:1e:
         8b:5d:9a:4d:a4:30:4c:b5:15:97:71:d7:58:63:09:50:be:f3:
         e0:ee:92:ac:52:ec:23:b1:7b:80:49:0e:e4:5d:f5:d8:4e:93:
         f1:22:66:86:6d:9f:84:a8:32:4f:65:a7:6e:04:70:57:98:18:
         b4:34:51:fe:48:bf:36:0e:1d:09:90:61:fd:34:f1:f1:df:2e:
         df:f3:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:14 2024 by rpki-client on console-fra.rpki-client.org