Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File:                     Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier:          IP7rQNXCXXJEDq9Dd4ay65RfibPJ1OgUFmTW+La4SHA=
Subject key identifier:   97:62:BD:04:22:2D:9F:E8:AE:00:47:7C:F1:0B:2F:F3:6C:E1:E1:76
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer:       /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial:       019352AD4F2C7AFC1F416C7A620AB0FD1E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number:          136C
Signing time:             Fri 22 Nov 2024 07:01:49 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:49 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:49 +0000
Files and hashes:         1: 1-OHDPVGE0zeGaWyuyK7O9G38PCA.roa (hash: 2hwDE+GWMy8idbtUiaNvkfAuYTZr5wAwyvwPr+TCerI=)
                          2: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: KhgJpn/SQd5HqdiONhTQKwPI8Uc/JGFBEdv9yshD/Sw=)
                          3: TuSl4HozoKDBnIz7Al3zhGYqfIo.roa (hash: U3Pigz+OrK2DetZT46M8rTT7xbb6hAskm5Xf4y5bLh0=)
                          4: a7wewogDife4s8wdlyE-gbDpMR8.roa (hash: 5SHjXIDrft9jNcmB/7RPGX3K/r1cfdVk6Iufe99rvQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:4f:2c:7a:fc:1f:41:6c:7a:62:0a:b0:fd:1e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
        Validity
            Not Before: Nov 22 07:01:49 2024 GMT
            Not After : Nov 23 07:01:49 2024 GMT
        Subject: CN=9762bd04222d9fe8ae00477cf10b2ff36ce1e176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:87:dc:90:e6:e1:86:2d:b0:11:b4:9b:ad:
                    f6:5f:1d:f4:f1:ab:61:1e:76:e9:f5:f7:22:fb:86:
                    1d:9f:a4:33:78:40:0c:2b:23:50:b3:14:57:c1:27:
                    d3:81:cf:d1:6b:bb:b0:3c:e7:12:b4:a3:9a:ab:3b:
                    04:8b:6b:e3:25:33:d6:35:83:6e:43:db:fd:28:21:
                    4a:42:cb:56:3b:07:16:db:49:b4:53:94:51:2a:70:
                    6a:ea:70:95:95:4c:a7:fe:34:81:70:5e:50:f5:43:
                    06:9a:85:1b:a0:cf:b8:b0:b5:76:06:c7:6f:e0:ed:
                    be:01:1f:c7:dd:49:ae:81:b5:e9:8d:0d:d8:bf:fc:
                    da:44:e4:62:f7:f0:f3:29:85:b7:22:a1:a3:b4:99:
                    dc:3c:05:51:aa:cb:67:02:2f:56:5b:db:d2:b5:59:
                    37:19:13:a8:38:f5:de:f6:f4:0a:cb:7f:ee:80:a5:
                    e5:a1:35:dd:4a:d5:8e:35:7d:39:bf:a4:17:d9:28:
                    85:f9:08:51:a9:51:5c:bf:17:b8:f2:1a:d4:b3:b1:
                    af:4f:54:51:d3:89:aa:32:7c:6c:15:49:91:37:50:
                    87:53:28:57:ff:66:a6:07:ce:fc:6e:f7:78:0e:ea:
                    60:87:15:92:0d:d4:ff:fa:5f:c2:66:17:fb:d7:e3:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:62:BD:04:22:2D:9F:E8:AE:00:47:7C:F1:0B:2F:F3:6C:E1:E1:76
            X509v3 Authority Key Identifier:
                keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:80:72:18:4c:9b:bf:74:0d:e5:84:78:78:67:d7:09:82:78:
         07:43:fa:b0:8b:90:9c:f0:c4:dc:56:24:7f:c2:fd:44:8f:21:
         92:20:ce:47:59:b9:3c:f1:b0:91:f4:e3:a4:ec:8e:d9:41:a0:
         c3:e5:25:cd:19:82:0d:8f:e9:18:fd:b2:6e:11:eb:b7:bd:f1:
         6f:b1:df:da:59:a8:38:6a:7e:c8:70:53:b8:69:63:f2:53:97:
         60:6a:38:4c:eb:43:bf:8a:94:8b:e7:fe:a9:b5:66:8c:52:0a:
         12:98:3b:25:a7:0e:30:e3:b6:a0:0b:4c:a2:3b:5a:c7:a0:63:
         d0:f1:fc:b6:01:f2:d8:40:3c:55:0f:73:f1:ff:79:6c:90:71:
         73:2d:ed:f6:29:ea:c3:d6:61:e8:6c:65:d5:29:f9:86:13:21:
         1c:05:53:e4:b2:44:8e:26:13:d1:5a:2e:00:67:21:80:d0:7f:
         f1:0e:02:32:ec:c8:5d:49:6a:4b:9a:47:a9:2c:8e:f1:37:42:
         da:9b:10:18:6c:0a:b0:3c:80:b0:8b:00:3e:6d:e4:23:07:9a:
         9d:2a:65:33:9c:b1:3e:44:69:4b:da:e5:22:10:d7:3b:c2:1c:
         bf:b4:98:54:85:c4:4b:f3:8d:06:ca:0f:f4:94:85:19:87:40:
         dc:8d:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:46 2024 by rpki-client on console-ams.rpki-client.org