Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File:                     gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier:          pvwLviuAjAXINkLNeyHB/J5fUtqAtfwkvIkFC5U+kVc=
Subject key identifier:   44:50:66:E2:F6:80:8F:AA:4F:3F:BF:82:BE:6B:85:57:6F:1D:AD:20
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer:       /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial:       0193655712C2343D625B5C1E97C785DC7B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number:          132F
Signing time:             Mon 25 Nov 2024 22:00:25 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:25 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:25 +0000
Files and hashes:         1: 4_uE92JJ6Wax19ykIjh69rQfyWI.roa (hash: hNyGvRJhv0SmBqrno/Q7DbItqDQeEfvSxlFj0P2QLcA=)
                          2: Hy8Sh2lI7S-ldbZ2tnCnqpnwLKk.roa (hash: p6w8QlmY2RrGh/n+37Y9M0Ufj3rlfBXdGPPg0lRWvys=)
                          3: Kk-0xeIKv9cyCQUVRiqgLWveCLg.roa (hash: GFIsyXbMM6cyuuGiXq/C/WXlpq4SZv+u/8ugC3BkunA=)
                          4: LCdhLXoYqeOTWCIL_-3w8EVXnoY.roa (hash: E0RoG8Xh/JAObPCBS7SfbTrThgOV++02lNix7dTTD90=)
                          5: RMJbck06ozASWXzXp8RVohpaoSU.roa (hash: 28NO88DEEDhVOi2hTTKtu4HfAKkRJVzcGjWUuRkCNN0=)
                          6: _gpSMLlocBcPp0IA0gCw2QRie_0.roa (hash: E3dzyDS8bzlNSGfDehmQBtiTD5jYkI0bcJTgLcmCA5Q=)
                          7: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: a06xSHJbxixKn6lSG/oX8kfwAWGbk2bxtaaCiey91j8=)
                          8: vB8vo4Ta_HEMnXAeTpzgnMl8teE.roa (hash: 3e/yiUYLidZNlnJpp/OLjqiVqaLqGlNA/+xuptm/ZJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:12:c2:34:3d:62:5b:5c:1e:97:c7:85:dc:7b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
        Validity
            Not Before: Nov 25 22:00:25 2024 GMT
            Not After : Nov 26 22:00:25 2024 GMT
        Subject: CN=445066e2f6808faa4f3fbf82be6b85576f1dad20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:d5:63:53:91:f0:d0:92:0b:8e:3a:58:f7:
                    91:50:85:f0:9d:26:c8:16:cb:31:43:a4:cb:57:50:
                    79:d1:e7:f8:9c:e7:46:28:91:a6:6a:97:ad:4d:b0:
                    94:5f:e6:7c:e7:e1:dc:78:26:47:d3:ac:0e:0a:2f:
                    1d:37:01:b8:c8:c2:06:76:a2:01:36:bb:ab:cf:e5:
                    72:12:85:92:83:3c:d0:a1:17:6e:0f:71:e6:6f:7a:
                    7b:3e:d3:a3:7c:c6:29:f2:e1:2b:70:a8:29:1b:f9:
                    bd:8a:ab:3c:a0:e8:b9:0a:86:2c:be:b3:00:95:04:
                    f7:3e:b9:0e:65:07:71:c6:f3:fc:eb:4c:c2:7b:97:
                    db:b8:30:96:fb:08:05:f6:12:ce:04:8d:c5:9b:22:
                    8d:e9:64:f6:b5:c1:51:1e:0f:4d:b9:73:53:ae:03:
                    d7:93:8b:f3:3e:92:5d:6e:fe:9e:56:21:0f:72:41:
                    d4:d0:cf:2f:51:07:12:bc:77:dd:4f:f7:0a:87:65:
                    06:cf:03:db:7e:d4:c3:15:0e:0d:77:fa:8c:00:96:
                    11:17:2d:f0:db:78:c8:96:a9:18:75:d5:e9:88:eb:
                    16:27:27:f9:40:be:6e:98:8d:d5:3d:82:14:7c:f1:
                    30:51:de:cb:88:e3:b0:20:48:a4:02:3d:d5:5f:6b:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:66:E2:F6:80:8F:AA:4F:3F:BF:82:BE:6B:85:57:6F:1D:AD:20
            X509v3 Authority Key Identifier:
                keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:9e:86:21:bf:13:58:8f:96:7a:e0:91:fe:a1:36:72:45:
         35:5e:52:77:88:18:6b:3f:16:b3:c5:68:ee:92:80:22:d8:77:
         43:08:20:6c:af:77:08:cd:0c:12:ec:07:36:d6:a5:ae:db:44:
         92:41:6b:79:f2:14:8d:19:15:52:18:37:16:2f:64:a0:64:69:
         bd:02:0c:30:37:fb:6b:1a:5e:83:e7:d1:a7:93:34:60:a9:45:
         2e:08:c9:99:b5:d1:61:c9:63:09:39:c2:a2:ab:7b:7f:ac:8c:
         76:ea:84:1c:8b:f9:f3:8a:28:51:1f:5e:0c:06:c8:6f:e9:71:
         52:12:0e:6f:6b:7f:bb:71:3e:0e:15:bc:99:1b:a0:4b:e7:68:
         a8:4c:40:a6:5e:98:53:48:63:7d:56:97:20:40:c8:c0:cc:c4:
         65:4f:7e:09:0e:fa:c3:b2:b4:a3:48:e6:7d:8d:a8:10:28:07:
         da:13:78:e0:d3:4d:8b:07:c5:b2:55:32:cf:09:59:a4:a4:67:
         97:2e:a7:be:7a:cf:b8:15:bb:db:10:40:86:80:56:23:7d:56:
         79:a5:aa:0a:39:55:48:a6:95:51:b0:55:aa:2a:9f:15:c6:c0:
         b2:77:3f:8f:f6:d6:76:af:de:a7:81:65:9d:37:e1:72:37:c9:
         10:48:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:15 2024 by rpki-client on console-ams.rpki-client.org