Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File:                     mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier:          VqZfXEvykt055g2bIKJ0yDe05QM/SRtglN4kTt9sUFA=
Subject key identifier:   9B:D8:62:F7:12:64:71:91:CF:42:8B:22:E4:07:33:C8:2C:A3:CA:70
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       019354D15092745CA9BF2237000031EF49ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number:          137A
Signing time:             Fri 22 Nov 2024 17:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:23 +0000
Files and hashes:         1: 9hRDtFQ8Y3OE1bz6_lRKhx2uFDQ.roa (hash: 6UZE8i2hz7REkmTSDb52zPlZFIU1H8LzOd+Elu20OII=)
                          2: EuA8YHfQmSLPvlGbs9ETNNlPkkE.roa (hash: jK9fV/O8wX2xhZWDq99+cgwzWc0Rjj+NF9J/UzgoFc8=)
                          3: G1A8N-0HKKmMZnoYyi4P_GC_3pU.roa (hash: SUhE9GZdJ/avKQDLG2jUgyqh1PX74hGZPbh6g6CznJE=)
                          4: OMUvn5GdSFKGmQp0K9vzRtmZdTQ.roa (hash: xMj9S4YXHqZNF4B8p5Nly77blgJ5YcmivD0wcLjpjD8=)
                          5: UUc1AutBlxk8dh9sS2eelcLbjIc.roa (hash: c+XSk3ECk3ikkRp425/2pJaA25HVwdY1HRCmH9z58Rc=)
                          6: Yb9ZPey_VZJtzcKKiL6JDM882gg.roa (hash: DL/rclwYSpQjEfvlW7rDalZKw4n8GD87d1DWeV+VnQQ=)
                          7: avbzcayqvLmoXAVd8DPBJAcneAQ.roa (hash: tL1nFP6ubOO6hkYZC42xW/KoCdyKEFKrHjV4/hq4J0k=)
                          8: bxd_4QhlQprfak-mVPmLXJcmi14.roa (hash: t/Z2y4+FlSMMYj5h1Tca7K5ZNmsANEIfbFvKFPzGXq8=)
                          9: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: NziRAJWOaE2VhTIJKV8mb4aMBEjb2dScQL7WOaqHYz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:50:92:74:5c:a9:bf:22:37:00:00:31:ef:49:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: Nov 22 17:00:23 2024 GMT
            Not After : Nov 23 17:00:23 2024 GMT
        Subject: CN=9bd862f712647191cf428b22e40733c82ca3ca70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:71:a7:ab:45:eb:7d:77:66:ec:56:9d:9a:
                    7c:38:21:a9:16:00:48:f3:7a:34:0d:9a:64:e2:b0:
                    fd:c0:57:ed:ce:90:32:89:f9:32:a6:b4:1c:e1:b5:
                    4f:16:1a:f5:e9:e7:99:22:26:4f:d0:65:ec:64:fb:
                    1b:a7:df:96:23:e0:ed:03:b1:28:d0:ff:f1:6e:9d:
                    82:54:0e:86:c5:b6:07:aa:7b:0c:bb:3c:a3:31:d3:
                    6f:0e:f8:66:25:5d:98:35:e4:79:03:bb:c5:39:9d:
                    47:8b:2d:42:f6:df:d2:47:be:4b:58:ab:8a:79:69:
                    80:8a:9d:77:40:44:16:e3:b7:06:9f:9a:b8:46:f8:
                    d0:c1:95:98:a9:3c:c9:56:e1:f0:19:d3:0f:57:fe:
                    80:c2:4d:71:67:74:9c:1f:2e:73:e9:5a:0d:b8:4e:
                    a4:3c:81:1e:81:db:01:8d:91:bf:be:3c:f4:13:0f:
                    c9:d9:02:e9:e6:58:86:8c:75:5e:14:a8:9e:a7:d1:
                    6d:33:0d:bc:ea:98:32:75:31:3a:5d:0d:3a:a6:c9:
                    f7:5e:77:38:9d:79:08:0f:e9:00:24:f4:46:e0:68:
                    20:67:0b:21:3e:10:7b:12:f4:32:e3:29:89:17:ff:
                    73:ba:67:28:4a:07:5a:b3:23:5e:fa:b8:b5:a9:14:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D8:62:F7:12:64:71:91:CF:42:8B:22:E4:07:33:C8:2C:A3:CA:70
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:78:a1:e4:ed:77:ac:cc:a9:cd:03:4b:77:44:a0:47:74:
         54:5d:a5:e3:42:8f:ab:9f:0d:03:ee:36:11:ac:85:be:61:44:
         81:b5:83:b0:36:06:d2:7a:0c:e1:50:68:a0:92:40:e4:69:93:
         1c:5d:38:10:bc:1c:cf:0f:7d:58:ee:ea:58:e5:79:bd:f1:16:
         ee:31:69:64:22:e4:ac:94:8b:40:11:6e:35:7c:b3:72:93:15:
         4c:ce:d9:d0:e7:87:73:4e:3e:0b:46:ed:5e:39:b5:27:58:4a:
         63:b1:e4:f6:97:6d:f6:83:ea:85:35:02:29:2c:f4:aa:9d:7a:
         47:58:21:28:68:d7:97:f4:d1:07:47:9b:7f:d8:b5:eb:6d:a3:
         d4:db:85:45:91:29:62:e1:1e:c3:c0:cb:40:66:69:ca:b2:10:
         25:94:a3:f6:01:ee:36:73:9d:64:ed:22:9d:cf:8b:2d:76:3d:
         70:9a:50:7c:9f:fc:d8:61:b1:da:68:ab:0a:1f:b4:57:6b:05:
         3c:de:a0:43:bf:fc:56:e8:67:77:4f:3d:40:48:35:d2:34:8b:
         bf:4f:6b:a1:64:ff:9e:c3:e7:81:2a:5b:5e:be:51:76:b6:4e:
         af:21:4f:d2:bf:d6:41:b0:e0:3f:f5:c7:06:82:d6:56:ea:81:
         d2:5a:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:51 2024 by rpki-client on console-ams.rpki-client.org