Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          Txf2V6D7mzyf7CSHoYyz6Vl5u5dd6tKnawRyPtg4XII=
Subject key identifier:   A3:E0:F3:22:49:5C:5D:02:56:D0:AD:62:19:EB:A7:02:F6:CF:38:06
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       01935162B36E06CE4D7D5418B1FA3170DCE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 01:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:43 +0000
Files and hashes:         1: 49Xa_PnTt_sZ7RJDHGtdkk6rAPg.roa (hash: JwZjgtCDlyD0QU0lYkwga7fGTSQL5Dk1x3CM6yNhTp4=)
                          2: 5f1-IBNOjW779NamWREt2b2xTzw.roa (hash: VYSWmaFm9fDp8Dx7LNqL6s1EHFITBAQ0+6fmQoQii14=)
                          3: KkPaC_J66mVGT4TrVg2pD6Tx-xY.roa (hash: 0OM3zFtROjkvPjZzoY2rhWqE6fZq8m7LX3apFFmBlOI=)
                          4: LmrBk9SjWqqCDsb9OpHwMjXVCss.roa (hash: eItw05lqy67m7Mg0MMUWltLmTadt+TBW8rC7djylfC8=)
                          5: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: VHuuR0MD2+2aHVFXgKKIvbBXJAamNtCgl/qADtw3ruY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:b3:6e:06:ce:4d:7d:54:18:b1:fa:31:70:dc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Nov 22 01:00:43 2024 GMT
            Not After : Nov 23 01:00:43 2024 GMT
        Subject: CN=a3e0f322495c5d0256d0ad6219eba702f6cf3806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:b2:1d:74:e3:5d:9e:f8:d6:a8:2b:a1:77:
                    98:9c:0a:e8:c7:22:a2:11:ad:f7:7b:79:1a:e2:23:
                    1d:5e:fe:a4:c6:98:de:6e:5a:37:cf:b1:3c:2f:c1:
                    70:96:df:1a:34:2f:98:ba:68:94:9e:fb:12:7c:9c:
                    d3:ff:cc:b4:58:e4:87:36:0d:be:cd:11:65:dc:aa:
                    03:0f:f5:e5:35:ba:84:7e:9f:31:fd:c9:67:18:0e:
                    57:bd:f9:3e:49:2a:9f:fe:9d:fd:83:f8:0b:79:bf:
                    e6:d0:1a:c8:f8:0c:3b:2c:e0:c2:e0:89:2b:66:22:
                    d8:aa:3d:08:8a:09:45:cd:d0:4f:bc:75:97:82:64:
                    4c:c1:0b:d6:d9:09:69:4c:e6:bf:6c:5b:bc:28:6a:
                    8c:1f:de:d9:2e:b7:31:d9:db:bf:6b:60:39:76:61:
                    3c:a0:bf:e7:9f:2d:43:4b:43:a8:2a:e5:38:27:fa:
                    c2:70:b2:5b:fc:8e:b7:a0:68:69:1e:06:c2:00:e4:
                    9f:13:06:d5:8c:e6:b3:50:12:5d:dd:3e:04:92:f5:
                    ec:6d:c4:9d:5d:3b:8f:8c:e7:71:4e:18:57:17:db:
                    9c:c0:b2:4e:c4:67:c3:8e:d3:d3:bf:0f:77:8b:03:
                    ef:bd:77:2e:75:c0:76:fc:0a:b1:8a:ee:e9:d1:7a:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:F3:22:49:5C:5D:02:56:D0:AD:62:19:EB:A7:02:F6:CF:38:06
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:91:08:1d:fe:5a:28:b9:9c:8c:a3:3e:5d:e4:53:8f:00:
         bb:81:0b:9b:0a:08:80:e3:f6:43:0b:f2:47:00:82:75:1b:d5:
         2a:7b:fb:97:e7:a9:dc:df:de:91:0b:7e:69:3b:78:9a:0d:1d:
         42:aa:52:44:c3:ab:8b:42:d8:03:90:2d:75:1d:9c:39:e4:be:
         5a:29:cd:40:1d:20:3f:4c:01:2a:12:2a:34:01:f3:fa:c0:f6:
         c2:86:e1:88:2f:0f:0b:96:c6:e7:ac:07:7f:82:43:9c:ca:ff:
         72:86:5a:0b:53:55:05:e7:5c:d7:17:b4:04:f8:19:dd:82:dc:
         d7:af:c2:16:bc:8d:a2:09:1e:7b:94:e6:3f:57:50:af:73:ee:
         9d:5a:29:f2:b2:05:18:a2:25:f8:1e:0e:09:de:ab:19:b0:fb:
         ee:f0:3f:0a:b2:05:51:4f:38:72:b5:59:5d:f2:c1:19:c9:6a:
         31:d5:ac:99:0c:9f:bb:7c:83:61:c5:e8:a7:69:37:47:ec:68:
         42:e5:10:7f:21:fd:ed:6e:be:63:f5:9a:a9:a2:60:b9:91:28:
         f0:65:88:54:4c:3c:6f:2f:1f:58:de:05:32:cf:a9:a3:e9:d3:
         42:04:9c:ed:77:50:34:66:cf:f6:f0:16:ac:90:4f:22:7e:e5:
         76:c9:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:27 2024 by rpki-client on console-ams.rpki-client.org