Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          LsqsrU69i6je48xDtNaet6TKIxIPfjHmRrSqJfEfxHA=
Subject key identifier:   22:7B:8F:47:3F:69:3D:B9:62:3A:F3:8E:44:B0:A8:15:E0:38:5A:6C
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       019350BEB4796C249F6BC5D098CA75E66D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          139A
Signing time:             Thu 21 Nov 2024 22:01:35 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:35 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:35 +0000
Files and hashes:         1: 0pq3_RjVbOLR3wab2RkMTrOIjUE.roa (hash: ZHcf4Atqc0MQPSOcjaxzRosgvx9ICGC7QtNQKmI98jw=)
                          2: 8wQbxG0KRKuWI1S7YGJQCvWvB-M.roa (hash: 1gISVguOyOhC0kJinPDxVVS1MYiMVdBfoMfiOlgJNdo=)
                          3: 9-FhmxiZK5Xe9jqdKdiUhgP0shQ.roa (hash: nRZC+FxQO/beGVSiu8Mcdh7bavwgXmX2HbabrGbOXGU=)
                          4: 9DBhsYTqToRjO4bMEQie1Kjo4MQ.roa (hash: KAMD+asDZZo1P/kWQlKn7UnaeySuYEkDIpVc27ZP+GA=)
                          5: FBJQvS2d6aPtDmBC26dMXvcwKF0.roa (hash: oCRUCnSPOCTMgmLQuFKvPgwJ36wIdbWFOaouIs5Wjng=)
                          6: HZGWKsAQvD3EquTmeH_I-UqOfQQ.roa (hash: XpK/pYxmZzNFXhUH0PHl1R4ZKEyA3Ln/nXn1boZgvto=)
                          7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: kQazVHNptROsqnFilce69BVwzyrh6mFZ5+hClg5gf7E=)
                          8: Obt-TsVOHprXLZD1cL22W05ZE9k.roa (hash: NrWhDc9axZrK741ba10UBeDqkjQq1gZkBBrMqllwAa8=)
                          9: PZ9nQHSnG3UsfTdeKfPTlgzNGqQ.roa (hash: sI544LGLxkuGeOh3oV87NmA/OvHOOkqgwCDcswKeYH4=)
                          10: d12QY9rHhuSDE3GWiNW4CEaBptw.roa (hash: aeDGoILf5960kb68xSf2WB8bgtuNw04EtpGWl8P7Dyk=)
                          11: fR48VQDXb1tXA5q8olbHpzKvGTI.roa (hash: +9yD6Jy5GH9s1ivHLVmc0cmLZyNWxUp7UZw9QLfaciM=)
                          12: n0m62i3DR3LjgqHx-5XJLQKY6L4.roa (hash: 99mDwyhN6MkxvMwx+iX7RkDxhZGG9oMQxrMRXk9TV78=)
                          13: vv-PwzapaKEYBrWPq1aAilEeGwU.roa (hash: fEUMdnCtkqWyzDMcU+ZtUp3IEaZef9S3+ZcC98hSrvA=)
                          14: wtO9H6MOFY2AfefxRjPcng3KwwE.roa (hash: /tMCB8S3lEgfikhfwLZanCTAvQIHM3gc6AdLgUx/3ao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:b4:79:6c:24:9f:6b:c5:d0:98:ca:75:e6:6d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Nov 21 22:01:35 2024 GMT
            Not After : Nov 22 22:01:35 2024 GMT
        Subject: CN=227b8f473f693db9623af38e44b0a815e0385a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:29:4a:be:2b:16:dd:70:c4:3f:28:ef:13:
                    b0:65:d1:ac:7d:a7:ff:89:22:61:20:06:03:54:51:
                    d7:85:37:30:38:8c:23:86:d4:fc:e5:33:94:7b:df:
                    7e:b8:2b:ca:1a:91:5b:59:56:f1:49:b2:31:45:ad:
                    4e:6d:38:b3:3f:69:ef:7b:6f:4d:c3:a3:fc:81:a3:
                    de:f5:be:22:d0:73:2a:e2:aa:f0:5c:39:2e:17:ee:
                    fa:71:d3:86:22:55:a7:99:79:d0:53:53:95:cf:56:
                    24:31:50:50:c6:16:c0:2e:16:d4:7f:9a:7c:07:3d:
                    8a:56:5d:3c:b7:f6:45:d4:85:b2:30:f0:b6:da:d5:
                    89:89:32:b8:10:77:29:a8:7d:a2:92:00:8a:38:5e:
                    cc:ed:fe:be:30:79:5c:76:b6:bf:15:1e:f9:02:f2:
                    ac:94:f0:a1:dd:a8:dd:14:6c:ae:ab:61:54:8a:7a:
                    80:87:49:58:f2:1c:1d:25:5e:bf:ca:cd:6b:6a:fd:
                    35:28:1c:a7:a6:f2:d6:31:a6:1f:e7:e4:a4:ac:e7:
                    14:c4:a5:cf:93:69:c2:f9:d1:35:c5:6f:c5:4c:e3:
                    c5:cb:aa:f3:ee:cb:6a:1e:e7:29:1d:82:1b:83:e0:
                    35:ed:86:01:f4:b6:67:34:64:0b:48:a8:72:4b:63:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:8F:47:3F:69:3D:B9:62:3A:F3:8E:44:B0:A8:15:E0:38:5A:6C
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:9d:3d:13:c4:7e:1c:f8:6a:c3:a4:54:e4:fa:65:d6:c1:
         25:e9:ac:66:6d:9a:eb:86:32:5a:03:18:6d:05:26:8b:2c:af:
         2d:3c:56:e5:15:89:3d:6f:20:65:b8:b7:58:c7:cc:00:f4:30:
         3c:d8:81:26:ec:00:8d:d6:7e:ca:d1:dc:c1:54:d2:3d:2f:e3:
         86:a6:77:dd:3d:21:0f:89:ba:34:9b:02:30:c0:7e:db:70:c6:
         7c:2b:26:77:13:2c:a7:8a:a7:37:69:bc:83:c7:f2:e0:6d:ac:
         6e:ae:fa:b7:b8:0e:23:2f:e5:a2:ed:f9:69:27:43:3d:c9:a1:
         36:f4:e9:c3:03:19:6c:25:9f:ce:3c:3d:91:6c:17:72:2b:a4:
         b8:13:51:24:b1:87:ef:73:2d:37:5a:73:f6:26:63:53:97:47:
         f0:79:22:8c:20:37:d4:74:f7:89:16:2f:f5:17:c2:e1:4d:55:
         79:3f:93:c4:bd:e1:63:c5:2f:db:06:d8:3f:0c:24:b1:b8:dd:
         be:f1:12:c9:26:02:98:76:0c:23:76:20:f0:29:3d:52:88:33:
         7e:15:09:43:c2:4b:1d:82:22:03:f4:01:b6:9c:3e:17:da:94:
         c2:c3:f4:0e:28:3f:25:ed:09:f6:ea:28:05:a0:3c:31:5a:26:
         17:bf:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:57 2024 by rpki-client on console-ams.rpki-client.org