Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier:          wM+qTZLbh2l7fPuZFjZuBOSYq/LOJvim62UVa1eWssg=
Subject key identifier:   15:48:27:E4:A1:1C:14:E9:35:8B:C8:79:39:C9:8A:E9:B2:13:C9:D5
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       01935199CC94C9DA33F62B523DA5F11C9A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 02:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:54 +0000
Files and hashes:         1: FZ2o382aTAJIgRhz-szPiBDzmXY.roa (hash: /p1QlfeblGbPX3QC3g/Rm+vMNFHTFuCaLUNrYPRLaXo=)
                          2: Ha8OPqVA5PoOrwHfKe36rAqtuXs.roa (hash: HxnN6Ddq02DLvCxxnCwyX1yONvuI0DsZFaISawAA+Q0=)
                          3: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: slDHOAy9Elwj8XjDkxmSiNsHBrglLDfwPkj7dtl4FCQ=)
                          4: uSIQt9KXd075SCg8c12ZzLqXops.roa (hash: z+Hzn7QPqhaHeYgZRbu/8y7jiAY+lRtM2aTK4tLSJ1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:cc:94:c9:da:33:f6:2b:52:3d:a5:f1:1c:9a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Nov 22 02:00:54 2024 GMT
            Not After : Nov 23 02:00:54 2024 GMT
        Subject: CN=154827e4a11c14e9358bc87939c98ae9b213c9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dd:6e:2f:04:27:79:4c:af:fa:88:71:f5:18:
                    30:29:25:08:dd:5f:1e:53:bb:6a:65:9b:ae:22:44:
                    c1:56:d4:d7:70:13:58:b7:c4:5f:78:df:7c:7f:e9:
                    88:98:8c:f4:fc:66:4e:d0:b4:fd:2c:29:19:2b:5d:
                    35:f3:dd:b0:f1:f8:7b:76:24:60:3b:6b:af:8e:bc:
                    4f:88:ed:9f:c8:3a:05:dc:2c:b3:ea:48:7b:32:48:
                    a6:7c:90:09:a2:ae:07:fc:09:48:12:1a:07:33:6d:
                    a5:8a:47:41:c9:cb:a0:a3:36:40:e5:7c:6c:04:c0:
                    af:9f:ac:4d:04:0c:06:d7:a5:00:f6:db:1f:50:b0:
                    35:08:77:c0:d7:07:55:4a:48:87:dc:13:16:a1:10:
                    75:0b:4a:f0:03:4c:5c:db:80:ce:87:5d:7f:e3:ec:
                    a0:83:e5:c3:83:00:fe:4c:d4:95:d2:63:40:2f:2c:
                    d8:53:49:f7:fc:2e:1e:e5:33:c6:eb:b1:a7:68:ad:
                    82:e1:da:71:02:75:50:50:4d:a7:c3:e6:86:06:a0:
                    ef:26:a0:6a:d5:94:2e:29:9b:3b:89:b0:88:2e:17:
                    3c:b9:0f:f0:62:c6:9d:db:12:d5:33:4d:df:6c:3d:
                    aa:e5:20:13:44:02:29:75:8e:28:d1:5e:f2:7c:54:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:27:E4:A1:1C:14:E9:35:8B:C8:79:39:C9:8A:E9:B2:13:C9:D5
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:54:78:21:4d:b1:71:7e:54:42:3c:09:ee:ee:a7:b6:32:54:
         80:a8:1c:8e:4b:69:cf:43:0b:4d:38:97:09:d4:90:37:96:f0:
         97:a5:e5:ba:ff:88:79:05:68:b3:d8:85:ae:ca:4c:47:ab:4d:
         ce:d2:89:30:4d:39:40:6e:08:30:f6:e4:d1:20:af:85:15:0b:
         85:09:99:d8:2f:f5:3a:67:2a:df:3a:86:b0:e0:d0:ea:3b:d1:
         14:58:4d:d9:67:ea:4c:98:a2:f8:a7:65:a1:88:f6:dc:d7:d0:
         87:aa:b7:b5:da:ac:d7:38:19:5f:03:22:82:d8:c5:0a:76:31:
         4f:42:0f:f3:c6:ee:e3:ab:d6:8f:22:81:80:d1:56:ce:a1:da:
         d4:95:3e:89:ec:5e:a8:09:06:7a:ba:3d:b1:99:c6:fb:97:21:
         39:3e:41:d0:c1:ac:55:3b:38:25:0f:1a:e9:9d:3b:53:8a:d8:
         41:ec:25:71:db:f5:fd:05:44:40:e9:a5:c8:9a:c3:43:d0:69:
         27:51:f8:ec:12:b9:43:e1:4b:1c:8f:50:99:8c:bf:1b:c4:7e:
         78:6d:7e:59:45:f9:8b:c0:d9:a6:fb:db:74:47:79:66:f4:aa:
         ea:30:bf:96:c2:90:63:e0:1e:bf:db:ce:33:4d:cc:78:f1:ca:
         12:3f:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:21 2024 by rpki-client on console-ams.rpki-client.org