Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          +z1VuHEMgG/nKGNPx7HCh6FpUqakPRaQGp8nclhGxgE=
Subject key identifier:   9D:06:B3:5D:CE:28:61:F8:DD:2D:5B:38:E9:94:14:5A:FB:CE:96:C2
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       0193520780BE13556A79886CEB6F9ED8DCCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 04:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:43 +0000
Files and hashes:         1: A32ayZlUg7YMY2Pgin6Z7eVAW8c.roa (hash: Wr4aE/wlJ9vi0deOtw/WSqokxejTnQCXw5CG5zTGyEc=)
                          2: PvPkhTV63TTzC_daqNQlA0Nk9Xs.roa (hash: KPFV4bMMClcEQ/i4USwK9xrObTF441xxEyZ5kTLqtEk=)
                          3: RGRXbuECVNGi3poZ4N6Ob-LyJyw.roa (hash: W1b9FXMAFugdFGW9vyUSzYXGsWW/0QblDOZjGddZ5cg=)
                          4: pPbZhWtuk0Woeaed6iXQO9QjU68.roa (hash: sSHoAMmgBgyzPLPexJodzzyyTQTrcN3/KCGBGLYjrgs=)
                          5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: Zvm3J7CGIookTxpNxDEGNV/XWdHbxEjoC3RM2NVPtik=)
                          6: xGtllBH4I-7BmHugubV47oPlzPU.roa (hash: h1QrNrWLg6z6N8Kjoi9wHcio7W3ElR5AVzcA5Cr+Los=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:80:be:13:55:6a:79:88:6c:eb:6f:9e:d8:dc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Nov 22 04:00:43 2024 GMT
            Not After : Nov 23 04:00:43 2024 GMT
        Subject: CN=9d06b35dce2861f8dd2d5b38e994145afbce96c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:01:2b:f7:3d:1f:e2:7e:79:c3:40:14:fc:
                    3d:79:d4:c3:20:c8:c6:88:8c:59:f5:64:71:59:9f:
                    0f:c9:f9:03:cf:dc:b3:92:89:cd:55:81:1f:34:ff:
                    42:6d:06:e0:4e:aa:e8:3c:b4:eb:f3:b0:8d:d1:54:
                    91:d9:96:fd:fd:10:f7:10:cd:c9:1a:48:95:07:0e:
                    c8:69:ad:93:1e:a5:1b:58:c6:51:34:d5:7d:99:3e:
                    27:4c:10:a5:d5:23:98:db:82:02:0e:ed:b5:98:a7:
                    da:0d:56:2e:40:de:19:2e:0f:a1:96:65:ca:1a:29:
                    85:8d:b9:fe:a8:ac:b7:f6:31:e3:f6:04:61:3f:90:
                    6e:88:98:bd:10:d6:2c:3d:ce:60:12:62:2b:6a:5e:
                    fd:19:b2:d9:39:69:f6:7a:6c:09:bf:53:3b:c3:cd:
                    8a:99:18:3d:ff:95:da:ec:37:62:f4:5b:6a:da:f9:
                    a2:75:5e:db:1d:e2:a1:ba:17:27:73:41:7b:c5:4e:
                    2e:b8:cb:e0:11:c6:db:0f:18:af:08:86:83:32:38:
                    26:e4:3f:a0:10:16:ab:94:bf:1b:0e:b9:75:59:20:
                    ca:a5:39:c9:c5:34:6e:5e:1f:8e:7c:d8:20:19:f6:
                    25:30:96:c7:bf:a1:9d:91:81:a7:5a:dc:cf:36:01:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:B3:5D:CE:28:61:F8:DD:2D:5B:38:E9:94:14:5A:FB:CE:96:C2
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:0d:95:32:3e:1e:d2:79:a4:fb:5d:15:86:a8:bd:27:ac:85:
         be:66:6f:0a:9e:d4:82:b5:13:e1:d4:bd:47:9c:a8:09:2e:43:
         14:4f:e7:4a:2c:9f:44:39:95:eb:64:3c:3f:4e:da:61:24:e4:
         71:27:51:6f:5f:55:41:2a:b7:67:c9:8c:36:be:cc:96:39:b1:
         8c:5b:7f:8d:50:21:98:62:1c:09:72:bf:80:1b:d3:f1:31:1f:
         0b:33:dd:b4:6e:f3:b7:08:f9:5d:ce:c3:31:a6:f1:6c:41:cf:
         47:63:8f:28:6f:6f:55:25:24:e2:58:b7:4f:02:87:d0:b4:5b:
         2d:5d:e6:a4:21:27:1b:e7:c2:6e:f1:e4:e1:2a:28:87:ad:ed:
         17:5c:0c:85:35:7c:9e:84:74:70:3a:bc:8b:d6:ba:c0:e0:88:
         0b:7b:4e:16:72:47:d5:cb:e1:c1:7c:32:74:76:01:9b:d2:12:
         20:ea:6e:0b:d2:80:dc:ec:94:b3:90:7f:8c:f0:5a:06:13:c9:
         b8:93:93:b4:48:61:2b:1f:f9:2d:f6:58:a7:f2:13:7c:ef:8d:
         b1:06:a2:22:6b:00:90:24:e2:c6:72:e7:0f:b1:d6:e4:bb:b5:
         14:04:1a:fe:a0:08:9b:19:7c:00:cd:4a:94:52:08:7e:bc:9d:
         11:84:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:33 2024 by rpki-client on console-ams.rpki-client.org