Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
File:                     sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft (raw, json)
Hash identifier:          5LpswVrMwJsNuWCP9K9UINP/9A7s1dlH4pRsmpLVN1M=
Subject key identifier:   B9:B1:57:2D:34:76:56:4D:07:C7:54:56:DA:F1:A3:A8:20:19:FB:02
Authority key identifier: B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
Certificate issuer:       /CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Certificate serial:       01935689DA045D6C6ABE31A2430441892424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
Manifest number:          132B
Signing time:             Sat 23 Nov 2024 01:01:34 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:34 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:34 +0000
Files and hashes:         1: 1-Ys6qPRVw4dEA9Sx679USJiSc88.roa (hash: bei0t84vI3xuH5Lkjoowl1iutPHbhAOQsHzT7FMonAA=)
                          2: jjbkFgxddA7EZggn92DHiRq9Ats.roa (hash: C4SZeY5jHLqEwzFyu6RIM9+wkRolsK2L53zoQfW1zcg=)
                          3: kPOSuqmzBSieWy3VrLzX2cS-4t0.roa (hash: EO7zV9agxnTBbNYDna+B9Tk2Shu6WJbFV8gKIDOvHH4=)
                          4: nKaRFEx6C2AJ4uG53aPWdy8GbKg.roa (hash: Mg460YaYJGsEEFWaLRzhqDm52ak2hrCD+X2CBARI3DE=)
                          5: sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl (hash: V46kDOK0zNxE6AZfU/9SbUWFTz+xMJHKw7bmP0I9iLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:da:04:5d:6c:6a:be:31:a2:43:04:41:89:24:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
        Validity
            Not Before: Nov 23 01:01:34 2024 GMT
            Not After : Nov 24 01:01:34 2024 GMT
        Subject: CN=b9b1572d3476564d07c75456daf1a3a82019fb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:5b:cd:4f:bd:d1:b8:ab:29:3b:19:e5:2c:
                    eb:f8:ec:92:ca:e5:8f:b1:65:b3:47:99:3b:dc:37:
                    00:4e:d0:6f:9c:51:0e:1c:7f:87:3d:9f:c6:42:72:
                    aa:a3:a5:8f:13:a7:80:a6:69:a7:33:b8:26:6f:20:
                    1c:ab:5b:b2:c6:86:c2:4b:53:a2:cc:e9:d7:d7:3a:
                    88:dc:4c:22:a3:e6:3e:e8:59:3a:50:34:04:e0:73:
                    ee:8b:00:82:a7:bd:0f:c6:16:1a:30:4c:3d:b4:16:
                    ff:1e:3c:f6:1b:33:ec:3d:69:06:bf:01:22:23:66:
                    87:ce:7d:af:cb:06:80:1a:61:71:d6:8c:f8:d0:c2:
                    77:c7:14:b3:b7:b3:26:3a:eb:3c:8a:e3:cc:b9:16:
                    9d:5c:7c:d2:dc:65:49:18:14:32:f2:5c:40:8b:a0:
                    5f:cc:14:05:1b:28:ff:ad:b9:19:75:5d:28:dc:06:
                    ab:81:c6:a8:7f:1d:a7:17:50:4e:cd:8f:1b:40:fb:
                    40:06:42:fd:45:99:27:80:82:fb:32:0f:d1:4d:b7:
                    bd:a2:9e:e2:ca:f1:41:dd:87:8f:44:15:0f:a7:0c:
                    51:4f:a9:23:02:b1:c9:3d:57:f9:48:9e:37:68:1b:
                    ac:90:2c:45:97:39:6d:01:6a:00:e7:3b:02:53:ac:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B1:57:2D:34:76:56:4D:07:C7:54:56:DA:F1:A3:A8:20:19:FB:02
            X509v3 Authority Key Identifier:
                keyid:B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:39:c8:3a:c4:ab:7c:3a:4f:67:0a:2e:3b:e7:38:f5:bd:15:
         6c:c9:9e:fe:97:c3:15:0b:70:de:53:e4:3c:3d:10:68:fe:89:
         91:a0:f2:17:a4:1a:7e:eb:cf:65:9e:16:ed:70:59:ec:0d:38:
         41:8c:b5:c2:5b:3d:fe:a5:61:70:ab:72:3a:74:2a:c7:31:40:
         fd:72:63:9f:93:d7:08:a4:47:89:ad:1b:f5:26:84:ca:1b:58:
         50:98:0f:3f:93:f0:cd:70:de:b7:54:03:36:8d:99:09:0c:26:
         50:d2:8b:c9:ce:b3:3c:7c:9c:14:ce:9a:a4:33:f1:64:7a:d1:
         57:4b:69:09:09:c7:66:8e:d5:2e:69:4e:e1:c9:5a:a4:b7:fe:
         e8:1a:2f:2b:14:dd:f0:ac:bd:a0:17:39:b1:4b:a2:be:96:36:
         f8:21:17:a1:0e:7a:13:06:33:73:66:df:ec:f9:47:98:99:38:
         a0:98:7b:bb:4d:8c:54:73:d2:3d:5d:bb:e3:71:b4:38:15:da:
         4a:7b:95:0e:2d:84:0f:ad:20:d1:5b:d9:78:8b:6c:ba:81:00:
         52:92:90:31:1a:f5:0a:43:b2:36:31:2d:34:0c:e2:cc:ed:4e:
         82:09:1b:87:af:dd:fd:e8:d2:d9:12:c2:01:2a:fe:3c:fc:94:
         30:31:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org