Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          T0q0BTKJ4V0jrQjA1u/DZ+JYWS2UysdNkK/FN/CbPSI=
Subject key identifier:   B3:66:89:F3:75:F3:4A:B6:39:2A:76:3B:39:9D:46:09:28:BA:54:5D
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019352072FED6E8C22F9BCE2C52D190A9A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 04:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:22 +0000
Files and hashes:         1: BN-Dtj76qIJAS1ZndYB2d-IitKU.roa (hash: 5kVqpxuVE2gKeow7G3QRPkhWTNe5jQNiFieJc6b3XBo=)
                          2: WDvBq0OEBcBJxq4LPUOhUYvTwKE.roa (hash: mT1561gUeku7u3tc8XWQhtv+WRasEn/srxVlKiVvmHI=)
                          3: dzc9c1bV1t3yIgLLDd6XwMk8U3o.roa (hash: Rg0ozvWn+eY1mk3HFE3dkPjFkdRdKk+WeULNQ9x2dRQ=)
                          4: j9F7RRqTjYDVQPTKG82GXn72icg.roa (hash: FbdSDJ6J/69s0UEyel2LYxTNW5svZXenyF/miI5dNjw=)
                          5: u-lG6h5_lKcNfKXFpfH1ARaMLsQ.roa (hash: nPzizsUGmIU3P5qZBIzytDSJ2JCgk6b9O3c38IyqGDM=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: /dT8exGFOljDB1HEoZjNWV8o8439EfNggjNXkNGugpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:2f:ed:6e:8c:22:f9:bc:e2:c5:2d:19:0a:9a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Nov 22 04:00:22 2024 GMT
            Not After : Nov 23 04:00:22 2024 GMT
        Subject: CN=b36689f375f34ab6392a763b399d460928ba545d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:fa:b8:2d:7c:f6:23:63:1c:1c:d7:5c:89:
                    21:00:c7:4f:20:c5:f5:99:6e:b9:8f:c8:b8:fb:f7:
                    6f:d7:d3:09:c7:f7:31:65:38:c1:b4:6b:ad:49:d2:
                    b8:57:45:08:57:dd:09:44:3c:94:87:9c:9f:a4:9d:
                    5e:ca:a8:c8:03:20:86:71:98:2f:99:c1:bf:fd:42:
                    8a:0a:76:d4:bd:15:f4:a1:05:ae:e9:a2:a5:28:56:
                    3f:1a:53:11:c6:b1:7b:13:09:35:d5:c0:3c:01:75:
                    a1:a2:c6:35:b0:6b:00:c0:88:1e:ef:72:66:a4:ba:
                    d1:2f:ff:0a:60:9c:44:82:3b:66:93:1d:e4:a1:a3:
                    77:9c:6e:02:d8:37:5c:78:3a:28:09:24:60:b5:d7:
                    61:9a:0f:b4:47:af:62:ae:66:38:29:ef:50:b6:7e:
                    59:7f:49:2a:66:9f:66:a6:0b:c9:f4:82:eb:1d:6d:
                    76:a7:65:56:90:ab:75:16:e9:3d:b7:9a:e2:a2:f8:
                    dd:f7:c7:7d:b1:fd:02:eb:22:07:8e:14:98:9d:ac:
                    9d:40:e6:cc:a9:bb:41:77:8c:60:40:f6:f2:af:d2:
                    75:1d:a8:6d:81:17:5c:7f:5d:70:26:0f:b8:7b:3f:
                    c0:87:ab:a9:0c:79:08:75:f5:28:08:16:ce:04:9e:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:89:F3:75:F3:4A:B6:39:2A:76:3B:39:9D:46:09:28:BA:54:5D
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:48:6b:1d:d4:23:b4:26:d5:1f:18:d0:e4:5a:7f:97:90:b8:
         32:a0:40:aa:3f:c9:ef:e1:bf:a2:54:6f:86:be:42:e5:b1:fa:
         b8:57:1e:2e:71:96:15:97:c9:c5:92:6e:a3:72:65:a1:13:da:
         b3:a6:77:5a:47:62:22:24:1f:c2:bf:8f:d5:6d:09:34:22:6c:
         6a:e4:af:55:de:94:70:60:74:97:6d:93:00:c3:23:db:14:b3:
         75:ae:3b:d8:26:9e:8b:be:d3:e0:dc:69:c3:eb:c7:96:93:8e:
         27:16:85:4b:0a:0a:cc:89:8e:99:40:b8:3a:ec:5d:29:e2:52:
         5f:b2:78:1d:99:05:3a:c4:2d:02:7e:c0:0e:b4:20:70:f0:24:
         64:07:dd:f0:a1:9e:5e:01:5b:ac:c0:c4:93:8c:07:b1:3b:53:
         da:f0:38:80:87:ed:eb:7c:be:9a:52:4b:4f:e7:a9:0d:8d:aa:
         08:e7:d0:1a:4f:f3:14:df:83:6c:89:99:80:a7:ba:90:94:a7:
         da:70:56:82:16:b7:77:c1:bc:2d:b0:27:ed:db:23:7d:38:a1:
         ac:08:e6:da:13:5c:11:19:dd:36:8d:d0:39:46:4b:a6:22:ac:
         9c:78:5f:c9:a1:ea:05:b0:dc:dc:14:45:1a:33:a6:d1:a0:14:
         f5:62:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:53 2024 by rpki-client on console-fra.rpki-client.org