Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          j9ntWxPq41fvC9ixuK5SyOorMu5nGtsDxKzDseVU2Ag=
Subject key identifier:   B0:71:71:FE:62:DB:24:2F:EA:5A:C5:E0:06:7B:E2:91:DB:85:80:BA
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       0193617A5A76B58EB37E982D26D908FC6F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          137B
Signing time:             Mon 25 Nov 2024 04:00:28 +0000
Manifest this update:     Mon 25 Nov 2024 04:00:28 +0000
Manifest next update:     Tue 26 Nov 2024 04:00:28 +0000
Files and hashes:         1: OcBWVVCBko1z9btCF6D7WARYzY0.roa (hash: M1+gWPU29WI/jqr/r1CDxz8jj6f75jYfDiBzmur6QHQ=)
                          2: U7uH5vJctFYUJQH0FpMX2JKApQY.roa (hash: o8Mg6VzatmEBJlHm8UqYd+4kfVY/H3cbHJTkH5bmk94=)
                          3: VF8bfQg6w0asv6lm0nVK7YBkF9s.roa (hash: 0YfXvsqhVjiurgfIAuNgN4UNC1R/IUFaKXNk5fWRfDE=)
                          4: YH4CVZlgUXfDTiUaj3YI0Zqe6yM.roa (hash: sj/zHGCQNZH2mdamdrqI/nt8mBBtNbVugiI1ZJB+2UQ=)
                          5: j3m9jmfEqzgEeYlfMWX06c-mIXo.roa (hash: gjJoSPmh2gspKLQUaVo4NCLBilqCIxX58RkzypDTs8c=)
                          6: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: zKKenTzZgzbvRLyv9Tr0LG5O5bDD0DVyUFgKm3CjAsM=)
                          7: xrHb9RLfLgGyrp6vySbN9qL4WXI.roa (hash: JI/HQb/xh9nsLtZwI1KZbFosNinwBYXfmn/O3PFNXKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:7a:5a:76:b5:8e:b3:7e:98:2d:26:d9:08:fc:6f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Nov 25 04:00:28 2024 GMT
            Not After : Nov 26 04:00:28 2024 GMT
        Subject: CN=b07171fe62db242fea5ac5e0067be291db8580ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:ac:f8:22:eb:3e:11:a7:0a:1d:11:db:f3:
                    39:14:62:7b:db:4a:ff:38:e6:c3:71:42:a9:a5:d6:
                    02:ef:39:ea:1a:ff:50:0b:6a:58:66:e9:71:21:31:
                    a7:0c:97:dc:06:bc:99:cc:b1:49:b0:01:aa:a8:ac:
                    f7:0b:c6:15:de:ec:ce:34:ae:90:73:b3:5d:25:2a:
                    72:51:2b:5a:9e:a8:95:e1:ec:bc:71:44:2a:d7:6b:
                    75:cb:a4:f1:da:c1:14:a3:f4:5b:6e:02:45:11:88:
                    05:61:c5:09:98:f8:31:c1:10:cd:23:ce:0c:1d:d1:
                    7e:73:5c:2f:ec:c6:4f:65:43:06:df:1f:80:65:cf:
                    dc:af:f0:8d:9b:fb:ca:98:7b:dd:36:5c:2a:3a:04:
                    31:3a:cb:ff:6c:4d:83:6a:51:ed:86:77:7c:09:e8:
                    20:83:e6:dd:a0:d3:ab:23:da:5d:8e:92:91:81:32:
                    5a:54:85:b3:ee:02:5a:86:6d:14:bc:ee:8d:61:0b:
                    67:eb:db:a1:a8:a7:ec:2f:8c:dc:b9:10:67:24:c2:
                    2f:54:21:4e:79:4d:90:df:21:87:11:23:ac:a5:7f:
                    d5:02:ec:60:30:73:2a:b8:42:3c:a2:f5:5d:2c:8a:
                    49:39:ab:f8:3c:0e:d0:cc:9e:5f:30:f9:5e:3a:ea:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:71:71:FE:62:DB:24:2F:EA:5A:C5:E0:06:7B:E2:91:DB:85:80:BA
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:73:10:fd:51:ba:fc:01:a2:ff:ee:ba:02:b9:75:09:e3:ce:
         47:bf:cd:81:65:8e:cb:e4:27:07:75:8e:98:83:ce:17:1d:e0:
         78:f1:e9:16:c2:a5:18:3d:d2:82:19:da:fb:58:aa:6b:0a:76:
         fd:06:2c:1b:4d:24:4a:d4:fb:6b:90:f6:e9:1d:43:87:88:ef:
         ac:37:8f:05:d1:61:6c:24:b2:c7:67:05:03:e4:bc:ac:4b:2f:
         e4:c7:fc:d6:02:c8:51:cc:ba:15:f8:96:4e:5d:51:d6:02:74:
         7d:74:15:14:ba:3e:ca:72:23:11:f8:1a:81:00:e7:24:ba:25:
         52:4a:9c:d4:84:4c:4c:c6:a9:e7:91:83:f7:f4:3c:b2:cf:72:
         26:66:30:d3:3d:4b:35:e7:28:2c:c2:2f:11:17:3c:fe:c4:ef:
         26:53:20:ce:12:12:8d:0a:cd:f7:30:dd:cf:f6:83:24:e1:17:
         e0:72:2c:44:8b:50:44:20:b1:5a:32:10:8e:a6:55:dd:41:95:
         45:ec:dd:66:96:ea:e7:b9:7d:e7:d8:af:0b:5c:a7:59:6d:7d:
         71:f2:c8:03:e1:75:b2:02:67:07:bf:d1:fe:99:bb:e6:d7:66:
         24:5e:1c:cf:b6:5e:41:d5:ae:94:c8:2f:da:94:12:45:fc:f2:
         f1:f7:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:47:53 2024 by rpki-client on console-ams.rpki-client.org