Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File:                     k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier:          sElRph/0vp8UR2JvhFIQKn/2XmWxznO0wVDfKjZHrJs=
Subject key identifier:   B5:5E:D2:B4:D3:3F:AC:35:7F:A6:80:63:3C:3A:A7:65:67:08:95:D2
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer:       /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial:       019367EB514C59CA2A1D64F29B1AFBA273B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number:          130A
Signing time:             Tue 26 Nov 2024 10:01:35 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:35 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:35 +0000
Files and hashes:         1: D_XMm6KH2cBFaJNIWr-c0ofl2Wg.roa (hash: SsxZZOiNSBo0oYcebMhAfAnW83h0334qbG0xOO+JVIQ=)
                          2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: q4Zhwn/QIISQtX2ExF2gQ559cQmsMzRmHmiWEEj1qKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:51:4c:59:ca:2a:1d:64:f2:9b:1a:fb:a2:73:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
        Validity
            Not Before: Nov 26 10:01:35 2024 GMT
            Not After : Nov 27 10:01:35 2024 GMT
        Subject: CN=b55ed2b4d33fac357fa680633c3aa765670895d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:f7:71:0b:2e:5f:52:2e:1c:2d:aa:c0:19:
                    54:c2:af:66:d1:b1:83:51:d5:44:14:1a:8d:9c:92:
                    b0:4e:03:81:b6:44:03:c9:c6:b4:e4:79:e0:69:67:
                    94:64:de:28:d7:a9:2a:88:20:87:7c:47:29:9a:25:
                    ac:c1:9a:b2:9f:50:05:e1:05:4c:09:64:37:bc:64:
                    bd:fb:50:88:f4:a2:1a:da:eb:0e:c3:33:4d:0a:37:
                    d2:9a:5e:53:98:62:69:3c:b6:b4:2d:c4:b7:42:75:
                    de:02:bc:da:c3:fe:48:c1:d9:3a:bb:ad:34:71:04:
                    eb:a9:62:fc:a6:3f:d3:61:25:d8:13:69:48:55:2e:
                    0f:ac:40:40:55:86:1d:b3:cd:64:5a:e6:02:a6:46:
                    60:17:29:fc:47:0f:c6:c3:38:73:a0:4b:d4:79:11:
                    5e:10:af:bd:05:2d:aa:fc:b3:0c:a3:35:6e:70:f8:
                    37:60:d3:3f:35:b0:9f:47:ec:f0:62:ca:7d:d9:0a:
                    2a:e7:bb:9b:5e:02:e8:2d:60:6a:72:7a:e2:80:da:
                    fd:d7:29:70:d3:77:34:4f:66:4f:69:6a:27:1b:e2:
                    5a:32:b5:d0:b2:0d:f9:21:d9:fa:83:3e:79:f6:bf:
                    26:6e:59:76:7c:ef:a0:f5:19:5f:77:0e:9f:dc:6e:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5E:D2:B4:D3:3F:AC:35:7F:A6:80:63:3C:3A:A7:65:67:08:95:D2
            X509v3 Authority Key Identifier:
                keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:cc:b6:18:28:91:b4:54:63:6f:5e:e2:68:5b:a5:8f:ca:
         9b:25:b3:1a:4c:4f:7c:6b:1e:a9:a5:bf:0c:03:36:b9:9c:a4:
         14:77:d7:2b:ee:0e:8f:b7:54:b8:2d:12:1b:dd:7a:9c:5b:fd:
         0b:27:76:17:ee:c0:a2:3f:7e:ad:69:e5:3c:8e:1d:ba:2c:8c:
         e6:19:06:67:66:bf:95:29:a8:1d:a9:e0:72:e5:00:2c:fd:89:
         20:03:ca:1c:9f:e2:74:36:4e:06:46:1c:49:40:62:26:fd:45:
         71:65:16:99:64:48:9a:ae:ba:f0:84:28:57:5c:b3:d2:b9:2c:
         ce:b7:c2:63:24:58:05:24:5c:07:52:c2:f8:eb:86:63:d1:bf:
         a9:24:cd:13:51:6d:b7:2e:3b:04:49:00:8d:ff:93:07:21:b7:
         a9:cb:7f:f7:f9:af:11:54:07:6b:77:a2:fc:17:73:c0:b6:42:
         dc:39:0c:42:42:8c:5e:10:84:a4:f4:06:c6:98:40:1f:8c:2d:
         5b:8e:82:b5:1e:d3:2c:c1:de:4d:c0:cf:4f:be:96:a2:5f:6c:
         a6:dc:85:6b:e0:ed:45:25:c4:f5:2f:97:63:b3:7e:79:75:6c:
         be:89:06:fb:cc:35:4a:a0:08:15:bd:fa:ab:cc:30:82:52:76:
         16:3b:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:41 2024 by rpki-client on console-ams.rpki-client.org