Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File:                     mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier:          3Mt/kgIpb8yh1p/fa1sZb2KgBctjsR1JYjn2d4QKA3g=
Subject key identifier:   20:C6:F6:15:12:15:FA:3C:8B:4A:68:E4:9B:ED:B9:A1:1C:AE:83:73
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer:       /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial:       0193520777CB9514128C456D20E01F722143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 04:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:41 +0000
Files and hashes:         1: _O5bjJiVaXMFKPpYQjl8VpgK4Oo.roa (hash: WXSCPn0zkr+kKrUE/5mmjZAIM2jtdnPY7LRIL6YD/p4=)
                          2: jnCHUjTdAK30-NQlBRnrZWwdGrc.roa (hash: Nu8+T+YbF1uCyGR93X8zw/Mzxp/0xZoFpgA53vgu8Is=)
                          3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: wljYvCDJYF7Y4JppRxnmKrjLwv3upGHOXehYMhplbbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:77:cb:95:14:12:8c:45:6d:20:e0:1f:72:21:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
        Validity
            Not Before: Nov 22 04:00:41 2024 GMT
            Not After : Nov 23 04:00:41 2024 GMT
        Subject: CN=20c6f6151215fa3c8b4a68e49bedb9a11cae8373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:99:48:a2:16:ea:e5:6a:d8:c3:81:3d:9c:
                    93:26:96:9f:ae:62:fe:6d:be:de:f9:ca:f4:20:b3:
                    7f:43:f3:13:e2:fa:5f:a8:57:09:e7:33:c4:4f:f1:
                    8f:26:b3:4f:72:e8:d5:9c:a9:a9:d4:08:7d:29:44:
                    7e:6b:4d:7e:8c:8d:04:e8:1a:72:0a:8c:4f:ba:ec:
                    2f:6f:ea:03:7b:cd:db:00:2a:69:07:6e:0a:11:0e:
                    12:b0:98:f6:50:bc:85:cd:3e:b3:a2:dc:4d:6b:9d:
                    f7:a8:d3:0a:ad:79:b0:5f:b8:dc:b5:89:32:37:38:
                    32:ad:d9:2e:bf:7f:78:ad:d4:47:b8:a7:95:91:63:
                    db:0e:14:39:e5:3b:7e:77:40:a9:f8:9b:61:b5:78:
                    de:a8:cb:01:b3:56:2e:9b:e5:0f:fb:7b:e0:93:30:
                    4f:b9:b5:0f:b2:78:1b:6b:83:50:6e:d2:33:50:24:
                    17:5b:ef:69:4d:33:08:6a:6d:21:74:18:c9:c3:4a:
                    e2:60:69:f7:97:7f:f7:56:dc:f5:fe:a0:2f:b0:77:
                    a5:a4:f5:e1:5f:6d:52:57:9e:ef:f9:73:b2:ca:10:
                    23:38:22:a9:74:76:cc:9d:08:7c:fb:02:f1:fe:f7:
                    d6:4c:53:b8:19:df:98:e3:2b:0e:37:c0:69:25:74:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C6:F6:15:12:15:FA:3C:8B:4A:68:E4:9B:ED:B9:A1:1C:AE:83:73
            X509v3 Authority Key Identifier:
                keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:c2:50:38:2c:b6:eb:76:0b:6e:2d:d4:67:09:71:f9:cc:
         51:ff:d7:54:16:f6:01:10:24:bc:e5:8d:05:74:ea:6f:99:2a:
         0b:ce:62:4c:51:c7:b8:4d:70:de:cc:74:16:f8:54:27:aa:a7:
         d5:e6:d2:4a:0a:6a:15:5f:c0:8e:48:8a:54:51:f9:c4:4a:29:
         d6:50:fe:00:5c:24:9a:f5:fa:ee:8c:19:c0:ba:30:65:12:00:
         a9:26:42:cb:7b:37:17:64:54:ac:35:93:4f:a5:4a:94:cb:35:
         a2:4c:cb:b5:40:40:4d:44:ae:45:23:59:28:3d:3b:88:81:fa:
         19:da:07:b6:47:32:f2:32:7c:32:0b:3f:85:c0:c7:61:8f:35:
         6d:78:69:d8:45:62:a4:4b:d9:a4:71:68:8b:82:a2:43:34:c1:
         8e:56:46:13:64:ee:03:f6:2f:86:ad:f7:9e:5d:28:6d:01:ae:
         c7:86:80:9a:eb:2f:95:f1:d5:a1:1a:23:16:1d:08:8e:d5:e4:
         18:45:19:f9:a5:38:74:f0:52:ea:79:c1:e5:68:fc:f0:72:5f:
         7d:28:1c:43:5f:a1:07:f3:cd:9d:ed:7d:f7:6b:c6:da:84:9e:
         ae:b8:92:f7:90:e9:84:4a:78:f4:18:51:f2:2b:24:e2:82:cc:
         91:a2:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:18 2024 by rpki-client on console-ams.rpki-client.org