Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File:                     gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier:          1D7mz79BmctjT96LZXD0KrldjeR/GOJjHpvpTTkGrYE=
Subject key identifier:   E8:E2:BD:59:D1:91:8E:74:AF:E1:CB:F8:8C:16:E8:6D:A3:5A:CD:D7
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       019351629A8183474984CC97886FE66BB776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number:          137C
Signing time:             Fri 22 Nov 2024 01:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:36 +0000
Files and hashes:         1: I4xUJiLUXglxL7G_HliBs781B-o.roa (hash: 3+KDdfCxOc6PkMNHSQ6+ZguqlZg0XzA9cDjnmO8j1BI=)
                          2: O5gGvkSFGMTbIGScfDdPWMEc98k.roa (hash: QO9QxHXIJrNQJmGPYGPPyjg8BIKrdsrtj4OVg0Bmbh0=)
                          3: R-b1BIcZJ1wleV0YCJWjUxJOIfo.roa (hash: eU+eoUM+RKW+N5wrp9bBTaVjd2vrBr0jMEanD6msuyw=)
                          4: T9ZFP2qvxCJ8blGLrLAIEMFkHFQ.roa (hash: GYldccoTdiQ9Ggk5QTGFBetL3dpsLoNGWlA6nWraEJ4=)
                          5: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: 2crVmg27Mse1LRwMxeiB4RncRtLJ7hJ7QtguMDsDBM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:9a:81:83:47:49:84:cc:97:88:6f:e6:6b:b7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Nov 22 01:00:36 2024 GMT
            Not After : Nov 23 01:00:36 2024 GMT
        Subject: CN=e8e2bd59d1918e74afe1cbf88c16e86da35acdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:cc:e0:03:68:e0:0c:f4:ec:d9:b5:4f:c2:
                    95:14:b0:ee:4c:52:eb:8b:89:a2:5e:66:94:cf:75:
                    0d:f2:c0:57:7b:8a:94:4b:65:48:35:6b:3d:11:9f:
                    78:fb:a9:aa:22:56:40:17:ef:48:eb:25:2e:80:d5:
                    6c:44:36:98:9f:43:a0:d4:c3:da:88:53:d9:bf:99:
                    46:6b:01:3f:aa:13:9f:10:45:2f:e6:a3:19:f4:61:
                    7e:fe:aa:7f:e4:8e:76:4a:79:8c:6f:8a:1d:96:73:
                    a4:96:73:c9:7a:67:68:58:3c:de:f5:20:4e:6c:1d:
                    de:c6:51:10:b8:58:c9:78:ef:80:e6:b7:b6:46:1e:
                    2f:27:19:7e:0c:96:c6:b1:3d:82:85:25:9a:23:ae:
                    ff:e8:02:c8:16:9f:0d:f0:0d:4f:d6:c3:1a:e3:e0:
                    b9:69:b1:04:4f:21:90:1b:98:ac:bd:75:44:02:29:
                    ec:58:bd:39:b4:af:81:e0:3b:e4:47:bf:a3:ae:62:
                    13:a3:5b:18:d1:3d:79:43:f4:1e:7d:ac:d5:1c:9e:
                    4d:6c:02:02:73:70:aa:f5:d9:4a:2c:4c:c7:83:d5:
                    3e:2e:e1:60:cf:f3:91:cf:a0:4b:65:58:55:fe:1d:
                    a6:d6:32:e6:28:ee:6d:d2:95:21:82:34:5e:77:ed:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:BD:59:D1:91:8E:74:AF:E1:CB:F8:8C:16:E8:6D:A3:5A:CD:D7
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:ab:b7:d5:21:4b:93:97:72:3d:a4:97:c1:19:17:ef:57:
         83:6e:9f:c3:4d:de:6d:3c:bc:c4:be:f4:97:c7:96:42:2d:53:
         b2:ed:2a:ab:a3:5a:5b:e9:5c:93:5c:67:01:fc:b3:d8:47:f6:
         f6:14:b7:e0:7e:48:b8:f6:43:af:98:34:a4:81:60:e7:45:0d:
         b7:64:2d:0d:78:ff:d4:db:51:ff:88:f8:22:e2:9b:9c:6c:a5:
         c4:06:05:9c:ac:39:74:10:1d:a2:fb:f6:bd:39:6a:b2:f1:90:
         25:2b:b1:91:85:a6:a2:15:31:13:36:88:4e:aa:b9:5b:07:82:
         b4:80:ad:5c:6f:28:15:d9:0e:95:93:dc:a8:bf:e5:88:e8:f8:
         99:8c:c0:e9:ce:11:56:13:58:d7:37:ff:9a:d8:c0:a3:f6:b1:
         96:d5:87:94:7c:71:bb:0a:c3:1d:5d:d0:09:3e:8f:fb:9e:95:
         3b:36:40:c5:d7:02:e3:21:3b:3b:75:cb:e5:e1:d3:af:72:d0:
         57:18:c9:3a:36:ef:f9:c7:c9:d6:2e:07:08:08:93:0c:b6:4a:
         cb:ef:9e:df:5a:e1:17:ff:90:e1:28:d0:58:03:ad:08:ae:b3:
         8a:a1:e3:e3:0c:23:e6:41:3e:79:36:35:6a:d8:0f:b6:07:ac:
         9b:2c:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:37 2024 by rpki-client on console-fra.rpki-client.org