Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File:                     S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier:          FfHHfK0nQ9wmoVgv/0z2M1wRZ0xPdVx8rfAibnImYX8=
Subject key identifier:   A1:A0:AD:0C:2A:A6:42:70:44:D8:FE:AF:70:EC:29:1F:9D:02:58:99
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer:       /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial:       019355E449A7C462532968030A7419801B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number:          138D
Signing time:             Fri 22 Nov 2024 22:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:44 +0000
Files and hashes:         1: 0uXKSYaKyjwK3hxt17XymjnigBQ.roa (hash: mdG6wpqa+XokuV0loPSBuz8PeRqUijhula742/CunAk=)
                          2: AyI-odnbmNEnX-yIKwId7LfOqlE.roa (hash: 6Rn4BpVQN/cEakiESJXuzVKVQOifNYOrbxEwC/24km8=)
                          3: Ex7B9hiW8BnbSFZH5APXsSakMD4.roa (hash: HBgcb97DFbAViLdaI38mtf5rWpuRME1BSw2VT9ev9g0=)
                          4: OdftwAas8D7uyk5dOWI7xRXAdis.roa (hash: 4mpa9EnDa/MNOB8QVYCFRHiziN42BKj07wCkliCE6Mg=)
                          5: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: tb81LGUw6O9mPW1nhDb+T2HmImA+sTR20ui5hjq/bjs=)
                          6: cB-ZaPx-cxmxQNRS2p43GnuH_Ec.roa (hash: Ge1fRx+3rAfLLPTwqjOz3ylmcK4mzkIAIj4irqWS330=)
                          7: vSRs4oAU0yyuuK1_ZDE5xvAR-DQ.roa (hash: hEhxIJguHZQitx7ndLacEmPBknHTn9hbBp8xZcpOdj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:49:a7:c4:62:53:29:68:03:0a:74:19:80:1b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
        Validity
            Not Before: Nov 22 22:00:44 2024 GMT
            Not After : Nov 23 22:00:44 2024 GMT
        Subject: CN=a1a0ad0c2aa6427044d8feaf70ec291f9d025899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:98:bc:ab:6e:08:55:d3:5b:e0:1d:80:04:ce:
                    97:44:a4:62:c8:aa:c8:22:87:95:91:ca:94:b6:53:
                    51:84:70:30:37:53:2e:a5:ed:e8:cf:45:7d:0f:38:
                    01:7f:5b:51:7d:f2:1f:11:4a:0e:b3:e5:ad:bd:28:
                    78:8c:ca:c3:ad:8a:fb:ef:07:21:6b:81:67:56:dd:
                    9b:d7:11:bf:2f:59:3d:9e:f0:e4:9d:b3:6e:fa:9b:
                    c5:90:80:fc:bb:a0:18:56:1a:29:03:b4:c4:ef:27:
                    c1:61:21:e9:ef:c3:6d:58:d5:ae:33:7f:8a:a0:2c:
                    33:6b:8d:6d:bc:b0:a5:22:5a:6b:31:df:f5:e4:66:
                    c6:4a:97:35:4d:a9:df:a9:a2:ce:3d:a0:a9:34:bd:
                    17:aa:fe:1a:68:fe:4d:2a:6e:da:1f:4b:1c:17:db:
                    bc:93:48:c8:f8:e2:86:66:2a:ca:4b:fc:6c:bc:a5:
                    7c:b6:c5:9a:39:df:f4:17:e6:2d:38:59:dd:d6:01:
                    62:77:6d:ae:2a:4c:fd:f6:22:60:dd:72:e2:c7:6b:
                    27:d5:17:aa:55:6c:6e:50:96:93:11:70:86:48:6f:
                    a5:85:29:9b:21:bb:34:84:5c:7f:08:89:dc:8a:b6:
                    35:7b:1c:07:19:14:95:44:d0:62:41:0a:74:98:cb:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:AD:0C:2A:A6:42:70:44:D8:FE:AF:70:EC:29:1F:9D:02:58:99
            X509v3 Authority Key Identifier:
                keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:79:50:83:b9:88:28:95:f0:b4:e5:93:33:44:3f:57:d3:
         53:01:d6:76:92:f6:e2:7f:f0:a3:cd:bd:b9:81:20:82:2c:89:
         1d:9c:25:2f:c0:6e:e4:9f:54:6e:c3:75:d3:80:38:66:7a:7f:
         14:67:dc:33:49:27:e0:02:56:91:15:71:96:8e:38:a7:cd:cd:
         98:15:f9:f7:90:20:b1:5b:98:32:7f:d9:dc:38:63:25:f2:08:
         ac:8e:84:28:6f:74:e1:ef:b9:00:43:4d:a9:c1:98:54:44:b8:
         4a:70:71:a6:74:11:13:fe:56:14:86:42:a5:47:64:68:76:1a:
         1b:4f:e5:77:3d:d7:41:69:14:2e:7d:3a:a0:89:ec:17:98:d9:
         a4:f3:c8:b1:b4:6b:fe:1f:cf:03:c8:62:9a:a1:8e:10:04:0c:
         b6:d2:28:34:f9:5e:3f:90:17:da:21:33:41:6f:8b:45:05:76:
         6f:6c:d2:ef:31:36:f1:0f:ee:e9:63:60:ae:54:70:62:6a:16:
         9a:82:d7:b4:0b:54:44:37:e6:4f:1a:3d:f9:b4:fa:25:10:46:
         08:03:8a:ff:43:29:59:8c:ef:7b:7c:e0:db:df:81:20:f5:1c:
         1b:10:9b:a3:f2:29:32:59:42:7c:a2:33:ba:74:ba:d4:7d:6c:
         a0:7d:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:32 2024 by rpki-client on console-fra.rpki-client.org