Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          3sMYhueVqZ6J62E7bWTviWRmoo0bSANx3jNBMzb89XM=
Subject key identifier:   A3:AB:20:1D:E9:F9:39:B9:8C:64:8A:42:DC:2F:92:DD:B3:0D:E6:CA
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       01936B225F821FCDE0505C0494013A409662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          137E
Signing time:             Wed 27 Nov 2024 01:00:34 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:34 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:34 +0000
Files and hashes:         1: 4-FO2MSSgkJKoNy_9e61ryfJd6A.roa (hash: wxEPqKpyOL0pT6KtxTe9x54y7kLqkUpjgX3wOeYOy24=)
                          2: GuC40DY1xRXUcI_WAkI5u_4rMi8.roa (hash: KH2LjRF9C1ArkpW96duae/WooNbbdFLGVuMGHaRcJfg=)
                          3: J-PuOZqbF3VZgRdHv1mggKN7omk.roa (hash: CdufoR+hx5k9KKPby+gHqBryUYdLTaozxaupK50lZlk=)
                          4: X3eOCPF0yHYtHD-2AB9CVGJQWMc.roa (hash: lmBdJ5jKo/vjSOmOVGfYlTRgJU2pHG+J4zTlb31AySw=)
                          5: eR9oU2rOG_yKHQW35eOlH_oJDN4.roa (hash: R4QzhZKqMnbn0rIV1xjQBYpUNkuK7wXKZmWHhE2mIrs=)
                          6: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: hAalGYh4uyrWbg/JBI5rMK5jnzcX90JB8LNN9dayph4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:5f:82:1f:cd:e0:50:5c:04:94:01:3a:40:96:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Nov 27 01:00:34 2024 GMT
            Not After : Nov 28 01:00:34 2024 GMT
        Subject: CN=a3ab201de9f939b98c648a42dc2f92ddb30de6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:dd:e6:92:ec:25:c0:f2:c8:44:64:66:06:
                    5d:04:56:d5:e1:f6:12:5a:64:85:25:d9:03:5d:7a:
                    c4:eb:b8:14:a9:37:7b:97:fe:ea:fd:d6:08:29:19:
                    2f:2d:c7:d4:92:17:b6:17:09:ca:67:ad:53:b8:5a:
                    82:d6:62:a0:05:3b:3c:fb:0a:3f:5c:e2:b5:6d:af:
                    02:80:bd:7f:fd:84:f7:3c:ec:99:bb:38:a7:52:b4:
                    26:c0:c2:01:42:fe:a3:65:0d:85:24:6a:d3:9a:02:
                    7e:ed:ea:27:cc:52:94:34:69:bf:80:c7:e4:cd:09:
                    32:71:30:b6:51:9e:b0:30:99:7e:14:e1:03:23:8f:
                    24:b6:42:69:ed:1f:d3:c6:2a:89:e7:ff:f2:ea:7b:
                    ee:2f:ef:f0:42:df:75:68:9c:35:b9:31:46:8e:41:
                    8f:3c:ae:72:c9:98:34:b4:37:bd:43:cb:53:ee:4f:
                    dc:10:73:ca:a1:1a:da:1f:64:ea:97:27:c9:81:c9:
                    8d:9c:25:85:ac:26:60:de:bb:c8:09:c4:8b:db:77:
                    e0:ed:b5:2c:be:97:99:e0:9d:03:28:34:e4:0a:a5:
                    a6:47:90:0b:91:e5:d8:77:53:e6:28:84:c1:46:d4:
                    77:29:e9:a1:3e:ee:45:69:c9:db:ba:90:4d:23:40:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AB:20:1D:E9:F9:39:B9:8C:64:8A:42:DC:2F:92:DD:B3:0D:E6:CA
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ca:e3:06:64:4b:c7:eb:82:1a:a3:11:f5:7f:b4:05:96:d0:
         ce:e8:5f:24:06:d4:bf:24:e1:47:a0:39:97:24:f7:4a:c2:59:
         49:15:82:63:a4:6c:7d:27:0b:00:f7:27:55:70:53:25:38:31:
         0c:ea:0f:d2:45:cb:e1:60:65:d3:02:77:bb:45:78:17:6c:b9:
         f7:c5:b3:9e:b8:5b:c2:dc:9e:0d:09:db:d7:82:3b:a4:b0:d6:
         dc:0f:e9:2f:17:0c:4c:d6:76:44:06:08:8e:4d:75:6f:d2:42:
         6a:99:b5:8c:16:18:93:48:7a:44:92:c5:9d:89:19:e9:f5:35:
         4a:95:73:c9:b7:69:3d:95:67:5e:d1:a8:0e:db:eb:7e:22:bc:
         40:8f:78:e3:cc:fa:8f:a0:a1:0e:42:f9:85:3f:68:0f:70:a1:
         9f:9f:14:6c:d1:4b:72:42:2a:20:e9:6a:98:53:c4:b4:65:f2:
         47:a1:a5:7e:7e:6d:fb:d1:eb:b4:58:50:cc:0e:04:6d:6b:24:
         6f:44:c8:43:e9:fa:78:98:5d:6a:16:75:40:12:fa:43:03:ff:
         b4:9a:28:b9:fd:fe:61:6d:a8:8f:c9:8f:6c:b4:f2:4e:0e:aa:
         51:6f:a1:ea:b3:df:02:09:8f:71:62:86:9a:9e:e1:d4:cb:51:
         b0:6e:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:28 2024 by rpki-client on console-ams.rpki-client.org