Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File:                     q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier:          qFbq9YJhjMluBEZLGTw+8fvGWcOya1Rt8bmlILgUwR0=
Subject key identifier:   4A:58:59:B4:48:A7:64:A8:1B:A9:0C:B1:42:B2:CE:A1:C3:EE:16:A2
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer:       /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial:       019356F69FC2F5539BA4433084DD94C8B90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number:          134C
Signing time:             Sat 23 Nov 2024 03:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:23 +0000
Files and hashes:         1: A55m4-uMGZkrco8bEZaTTGo64WQ.roa (hash: LHNBMQfs2mG731Hns+VsCqAJy9IOWZRqbMhJTSf6dps=)
                          2: e_j55-yoitdKq6E3FVM_X-gJCPY.roa (hash: FCd5P+Bl0yvDD7DxqT7RA/Oo6U4QvaNGCrceKIroHaQ=)
                          3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: pC8vKIg434arEHKryuLko1D67FpjFdM/AW4x2Env9F8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:9f:c2:f5:53:9b:a4:43:30:84:dd:94:c8:b9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
        Validity
            Not Before: Nov 23 03:00:23 2024 GMT
            Not After : Nov 24 03:00:23 2024 GMT
        Subject: CN=4a5859b448a764a81ba90cb142b2cea1c3ee16a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e9:cf:00:ef:f3:41:f2:6e:5b:e4:7a:96:a3:
                    69:a5:7f:33:8e:8b:18:d2:eb:26:99:02:59:c6:17:
                    d9:a6:0e:5e:ae:8e:c6:2a:5d:8a:f3:3b:20:2a:07:
                    e6:9a:cb:e7:f3:6d:50:8f:e9:7e:f7:ab:e2:17:5e:
                    59:9c:52:66:f5:a5:0f:da:e3:e1:ea:37:9a:61:be:
                    82:7d:b1:fc:53:52:fd:ed:6b:84:d5:c3:2c:f8:f1:
                    fc:51:dc:91:6d:72:05:6b:b4:6a:dc:97:19:b1:c6:
                    ab:5f:03:d0:45:b2:84:64:48:0d:c7:e5:e1:05:76:
                    8b:fb:91:28:06:5c:66:63:9b:28:1f:91:14:61:ad:
                    79:9d:5f:b3:4a:1e:a0:67:57:df:f3:b1:62:91:75:
                    11:ec:42:fc:4b:38:24:ee:81:d4:db:79:cb:83:4e:
                    b0:fd:d1:89:2c:f1:72:ea:35:88:38:76:29:7c:06:
                    0c:03:a6:f4:37:44:d1:6e:5e:a0:d2:57:66:cb:ed:
                    f7:cc:c2:08:a9:12:9e:70:e4:ec:19:9a:a2:33:6e:
                    75:76:72:15:a3:6a:49:f6:e8:7d:dc:ae:72:be:4b:
                    8a:2e:bc:cf:4d:51:25:0f:7b:c3:3a:6a:c1:d4:6f:
                    60:e2:10:22:d3:6f:c0:3a:65:d1:ae:d3:bf:d5:64:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:58:59:B4:48:A7:64:A8:1B:A9:0C:B1:42:B2:CE:A1:C3:EE:16:A2
            X509v3 Authority Key Identifier:
                keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:57:46:f5:81:18:a0:a4:6c:6c:89:d8:77:c9:22:5b:51:a5:
         65:e1:c6:ce:34:0f:58:7c:25:47:f4:ef:75:64:7f:16:d4:c3:
         63:df:cf:5c:1d:98:fd:d4:7c:06:c9:50:60:fd:06:ac:32:0c:
         f9:2f:f7:04:03:f4:69:ef:ca:cb:c3:2a:b0:9d:e3:a1:c0:91:
         0d:d4:4a:3b:9c:b2:ee:ed:cb:5e:17:74:42:82:61:60:39:64:
         9b:78:cd:43:92:85:fd:08:e3:60:89:ee:93:c6:d6:35:c8:cf:
         1d:59:82:a9:6f:05:30:a6:0c:b6:60:51:5a:73:b8:44:40:b7:
         a0:5f:39:be:de:f8:98:a9:bb:22:a2:35:51:e7:b2:07:ec:bb:
         31:96:6f:d3:97:6c:3e:eb:43:b0:56:37:52:46:86:d5:a8:dc:
         d8:52:ca:29:42:d8:08:45:85:66:35:e7:ee:d7:42:a6:d0:a6:
         3e:20:92:91:5b:2e:a9:41:aa:c1:e3:2a:d6:41:fd:ce:91:3e:
         6a:f3:00:24:56:74:f6:69:16:2c:7b:92:ad:40:75:7e:0e:0b:
         fa:e6:48:a2:90:c4:b9:82:d8:f7:eb:ea:b1:40:4f:b5:2d:d9:
         cf:07:2a:99:92:c1:36:d4:e3:9b:61:a2:3d:f9:21:03:cf:93:
         0a:85:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:02 2024 by rpki-client on console-ams.rpki-client.org