Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          /IABmaKeL65kZ/c0guefona94xiVNLCTo4xJhP4wEWY=
Subject key identifier:   7E:0C:7F:45:A0:8B:09:F1:54:6D:E4:D5:40:28:B1:39:1E:BD:22:DD
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       01935350DAD82946365037E7C312308B7069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          136C
Signing time:             Fri 22 Nov 2024 10:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:28 +0000
Files and hashes:         1: NJv3TtbPOoZJJrrp1-HtUPqYMeY.roa (hash: dbkQG2jcLl7X8UMbYVshPJl4RMNQQHI0XfbCE0UQssQ=)
                          2: bUzEkbSYCZZ0CcxiBpmVRO46Zm0.roa (hash: sFapdXSKk1MkUgy4OYYEw+qg0gKzJanPpV18lTzuA8Y=)
                          3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: I97GAirzUKflYV/xjyCHMzL8ZKjfTFCySXDAVkjVlSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:50:da:d8:29:46:36:50:37:e7:c3:12:30:8b:70:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Nov 22 10:00:28 2024 GMT
            Not After : Nov 23 10:00:28 2024 GMT
        Subject: CN=7e0c7f45a08b09f1546de4d54028b1391ebd22dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:32:48:c2:ff:32:a9:26:dc:5b:1e:e4:b7:
                    a0:83:7e:e6:95:60:6a:33:cf:08:e3:d9:57:3c:c4:
                    e9:2d:cd:2c:34:a1:c2:d6:a4:e9:d5:5d:37:29:c7:
                    b2:d4:6d:bc:f5:b6:59:3b:b7:53:1c:25:e9:50:93:
                    00:89:ce:0e:64:07:0e:32:53:1c:f6:e7:1b:a2:1d:
                    f8:f7:27:4b:e4:f4:8d:36:e4:00:55:2e:94:22:6b:
                    b8:97:32:41:9a:e5:e9:23:01:60:35:18:9f:c2:b2:
                    55:10:28:1c:f6:91:5b:14:b0:d2:ce:cd:6f:1b:f1:
                    a0:04:ae:90:8a:14:67:4a:fb:88:23:6f:06:48:97:
                    0b:fa:cf:1d:82:23:2a:e1:48:49:00:01:48:a1:ba:
                    bd:11:43:16:d7:e6:3a:a9:02:c1:b3:a0:d6:16:6f:
                    a0:b4:ee:9d:4d:78:c1:31:92:39:2a:28:c7:7e:82:
                    e1:27:f9:50:16:1c:bb:c5:9a:83:dc:40:ae:0b:d2:
                    ed:7d:1b:a5:3b:5e:87:93:0f:5d:f5:bf:78:cc:ce:
                    33:d8:c9:f6:3d:11:68:2b:8d:75:3d:0b:40:a7:0e:
                    be:70:c6:bc:11:d0:db:87:96:a1:38:4f:8f:4b:16:
                    8d:51:a6:e0:84:81:09:2b:5c:b5:72:4b:02:5e:d7:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:7F:45:A0:8B:09:F1:54:6D:E4:D5:40:28:B1:39:1E:BD:22:DD
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:6d:aa:a5:1f:ba:6b:81:a4:52:d6:e4:bb:cc:12:d4:48:
         c4:1b:c3:c5:8b:c6:ed:49:e7:86:f0:62:23:93:1b:bb:8d:4f:
         60:27:c9:72:0a:55:d0:c7:e4:a8:53:f4:aa:d0:10:12:89:88:
         e4:79:43:4f:14:26:b0:d6:59:dd:30:0c:ca:db:31:53:e9:68:
         10:db:b5:07:43:64:00:ef:cc:a3:b3:1d:b4:87:9a:ac:d5:52:
         35:b5:55:f1:43:9b:b6:0c:f8:60:ff:89:11:eb:7a:25:68:f8:
         4b:a6:26:03:89:a7:9d:fa:e3:e9:73:e2:a7:50:f7:db:b7:cc:
         07:04:d8:b6:50:42:8f:90:ff:c1:15:2e:41:36:58:7f:32:43:
         37:74:72:22:7a:05:ba:b2:da:4f:1e:c2:63:70:ae:8b:8a:08:
         82:29:2a:17:a4:22:87:2e:47:29:c2:50:15:ad:dc:0b:60:04:
         7b:41:7d:0c:35:ed:27:e7:5c:63:c8:92:bc:d5:b1:49:73:32:
         db:d6:19:c0:c7:f1:e2:23:d8:66:27:d7:30:e2:fa:5f:5d:68:
         15:02:0a:19:85:a0:ea:54:b9:b2:20:22:54:fd:8e:e6:d1:84:
         e6:b1:34:4b:6b:3e:aa:53:4d:4a:b4:2d:35:b0:d5:7e:5b:04:
         7d:90:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:09:57 2024 by rpki-client on console-fra.rpki-client.org