Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          1efTg9H8HXsis5HwlygPnOcIjkIYD2Dwd2nwZOWJJi4=
Subject key identifier:   4D:B8:51:54:9D:1A:D9:72:9A:D9:D5:81:EF:33:44:54:19:60:82:B7
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       019351D095EC528DEBD5AB8303D6A3945CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 03:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:44 +0000
Files and hashes:         1: QiCSonh74sr4ACViymh-mKyv_Ks.roa (hash: lY+fN1rhMRkTXEHksM74KEPmEkwI83o3iIoVBi9Pe1Q=)
                          2: Wn9BzW1rRoxcggvpXQjthajhz8U.roa (hash: +RDJWWjKD3e+EnVyN1/7s2gSA8MmupbCWJ8I8qR+VFg=)
                          3: XiDpk0CbAmTYXQSxE8ULZhQLORs.roa (hash: 02Z00Cyfu0jFMrfS9y2om7ORFMWSQGLOwVA9B9eFBBM=)
                          4: dz6319_oh7a8EOnulUasXBM6IKc.roa (hash: 6YjjtasBk/Hsdf5RhQk2vR7ANyqy5i5x6liE9ePnA10=)
                          5: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: zbpKPlUjj4yo7PUv8gAx+33YlIlpZZE6HRE0dMmRag4=)
                          6: hZERIeEx05bz1vj-XMRwC3m5lQ4.roa (hash: qQCRMSP5o75B6cqNJmTIg+rnVMhrxKdKDk3UGMZ2RnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:95:ec:52:8d:eb:d5:ab:83:03:d6:a3:94:5c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Nov 22 03:00:44 2024 GMT
            Not After : Nov 23 03:00:44 2024 GMT
        Subject: CN=4db851549d1ad9729ad9d581ef334454196082b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:1a:91:0b:6f:85:96:47:37:ba:ad:3f:ef:
                    a5:99:70:79:81:cc:06:2f:b1:a7:ba:9f:44:65:b7:
                    70:a9:8b:4f:49:73:c1:f4:b3:65:50:e9:b0:2d:9d:
                    0a:1e:21:93:1f:dd:aa:11:59:54:53:c7:16:0a:20:
                    a6:82:2a:75:3d:9b:ca:da:0c:73:19:a9:f7:c2:6e:
                    a8:d7:ec:73:73:65:f8:54:a3:e0:76:cd:6e:15:ea:
                    57:2b:d8:e2:f7:82:11:b6:51:22:3e:6d:b4:b0:39:
                    97:a9:43:54:45:04:c8:3d:5f:57:21:52:4c:ea:76:
                    f3:dd:86:cf:a4:c7:d6:79:2c:79:b6:38:0c:73:20:
                    5b:c7:ab:36:6c:d5:94:a9:7d:e3:79:60:2d:27:1b:
                    70:cb:fd:32:89:e4:61:95:b7:0e:0f:e0:f8:37:55:
                    e0:3a:bd:ed:89:b6:6c:37:f0:6b:87:e7:75:80:fd:
                    c7:63:b5:c8:73:b4:2f:5c:14:d9:53:30:4c:2d:e0:
                    42:7b:3e:ae:0b:4f:5c:b1:ad:43:42:37:b5:0c:6b:
                    ec:da:af:86:45:ca:ea:75:36:cb:6c:6f:0d:48:e9:
                    5e:de:f3:92:a0:81:69:4f:d6:2f:11:ac:18:1a:e4:
                    85:0f:70:32:88:e8:5d:63:b0:2d:72:7b:eb:51:a4:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B8:51:54:9D:1A:D9:72:9A:D9:D5:81:EF:33:44:54:19:60:82:B7
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5a:23:d5:40:30:27:ad:a2:5b:16:e3:b7:ae:82:01:08:9a:
         fc:dc:b5:a3:3d:29:0c:e7:d5:3b:9e:da:8f:76:fd:77:fe:ba:
         37:3b:7f:de:b3:bd:27:7a:e8:78:0f:ab:33:d3:81:18:37:87:
         b7:ad:86:f4:d5:4d:13:b1:b0:a4:ab:13:c3:88:85:45:27:4b:
         00:77:d2:db:4d:03:2d:53:fa:ae:a2:d9:38:c6:9f:d3:2e:c7:
         90:97:b7:1f:d0:12:36:fc:cd:b6:bc:e3:bb:50:dc:77:d8:33:
         cf:7d:c0:c4:ee:e7:4a:d3:34:d5:80:91:f3:a7:0f:8e:b0:e5:
         48:80:6b:7a:7b:a9:51:2e:b1:91:48:49:b6:bc:df:ea:7c:a8:
         3c:35:a8:c2:ea:f8:f0:ba:f2:0c:ac:32:d6:3b:95:4d:01:99:
         a5:c4:4f:31:5a:9f:55:50:03:51:84:f7:48:30:5a:b0:96:69:
         34:76:7b:74:f9:15:c5:7d:dc:51:92:3b:80:5e:7b:41:6e:d8:
         88:ee:68:17:ad:4b:16:e5:b6:d5:3d:4e:a9:28:d5:a2:6a:f4:
         37:52:c1:0c:ab:46:1a:f0:b9:44:38:88:63:ac:95:09:34:0d:
         9e:be:98:74:ef:f3:9e:37:03:69:bf:06:d6:22:2f:d2:d5:6d:
         8b:bf:04:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:26 2024 by rpki-client on console-ams.rpki-client.org