Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File:                     ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier:          CQZbH+9K4cNVgWDIer1D9oDnuOCdMQsn9TALRkTeNGg=
Subject key identifier:   CF:CD:3A:6E:4A:AB:29:71:72:71:7C:D1:47:40:D7:97:14:02:8B:94
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       0193531A1FC3B689F831E4B44EF68DF2A26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number:          137F
Signing time:             Fri 22 Nov 2024 09:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:41 +0000
Files and hashes:         1: MIINK5D5NiUt_CvcI8CVLf3_BGE.roa (hash: HQMStv5PKChgciUOSMfD2nVjqmwGwCe13WA4fbf7P5w=)
                          2: TRjKNCruN6VTLjRpdNGmGpiAgGI.roa (hash: DxFdb+FkvU9z8EiLhr4acr6h2NqW34bQUnmGiPTuyfQ=)
                          3: WWl7CH4AyFmZQGUrA2oj-fwUINA.roa (hash: QctETKj8ZXEMwF9kx44yZXM8uKMhl7vfEa62OrwBmC4=)
                          4: X1GecnNHHD2bzjeb9o2hoF9EhBE.roa (hash: 2gmQvD1zkvd5b5fYgtH7/84QJQNEBegSlGbeUNES6y8=)
                          5: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: N9SBUON9y8kcy66bBUhZ3J6IGbj87FTi5KRze5caboU=)
                          6: hNZpQNA8tef4PGUBN4ZLulcMmP4.roa (hash: pEesR0vwHLV84vavCj0J000hitOrTIXw5FwbjSMdO/M=)
                          7: jCb5K4rKXY7gZRaYsufwa8zDVOI.roa (hash: 0NVrHc21i3EYUaHWiz4tDcqWwiCCe+fXAg4h8dOem78=)
                          8: kOukvIYqFIgB7q0RgJGUC1Q3P9w.roa (hash: s6L6moudXWQHRwxJMdqSMpZXP3TaLXKNPp2DXdm15z8=)
                          9: vzNzMSJYF1aB7qNEyvluvBLQ9CM.roa (hash: my1+opEEgerVxghIYv97t5S9RM6CN3JHmVxctED7TvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:1a:1f:c3:b6:89:f8:31:e4:b4:4e:f6:8d:f2:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Nov 22 09:00:41 2024 GMT
            Not After : Nov 23 09:00:41 2024 GMT
        Subject: CN=cfcd3a6e4aab297172717cd14740d79714028b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:9c:43:80:cf:ad:88:3d:f4:89:ef:8a:61:
                    17:68:df:7b:d4:0e:62:7f:12:42:a3:81:f5:03:9e:
                    be:24:d9:9b:d0:45:3f:6f:83:13:aa:b1:36:3e:d9:
                    f1:88:53:aa:ce:9c:44:c0:06:ab:12:36:08:81:b2:
                    60:a9:a4:e9:72:71:19:aa:a1:de:fc:23:ba:8a:60:
                    bd:8f:bc:09:8f:9e:a8:2a:45:7f:9d:fb:03:09:92:
                    35:22:03:c7:a6:61:b9:c0:32:48:bd:5e:08:df:6b:
                    59:1e:7f:21:02:2c:bc:8e:1d:d6:e3:9e:6c:4f:a4:
                    29:77:75:b3:27:4e:a7:ea:8d:4b:03:ae:0a:f8:0b:
                    d1:dd:37:9e:07:4a:27:b0:9a:a2:ba:06:88:61:05:
                    32:2b:36:72:68:18:d1:5f:24:c4:8e:0f:37:1e:01:
                    d6:ef:b5:d0:c3:32:73:01:58:15:fb:af:83:70:fa:
                    24:17:51:4f:42:0b:4f:d5:de:ba:78:93:b0:b6:69:
                    4a:a8:04:1b:f3:de:66:5c:09:f9:ad:b3:d3:a3:aa:
                    22:e2:79:50:9e:d6:7a:11:5a:45:89:a8:64:ac:a5:
                    6c:e4:7a:08:db:bb:8a:36:75:21:00:d3:6f:bb:ea:
                    ef:75:1c:29:f9:b3:fe:c9:b4:99:f8:df:4b:ba:78:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CD:3A:6E:4A:AB:29:71:72:71:7C:D1:47:40:D7:97:14:02:8B:94
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:89:50:ba:90:c0:fc:2b:97:e9:2d:3d:62:37:7f:41:68:66:
         74:70:6f:f4:0a:33:0d:a4:43:b9:56:d2:22:23:2e:b0:8f:6c:
         ce:c1:9b:3d:df:23:10:e7:63:da:29:ab:b8:1b:28:c4:11:32:
         08:a6:6a:85:aa:05:e9:5f:a7:48:55:86:7c:5a:12:22:a6:30:
         8e:ee:17:a0:0e:c8:0c:a5:09:8f:28:27:4b:8e:2e:1b:ca:97:
         dc:03:03:c7:ac:b1:72:a1:24:16:c5:fd:d2:ca:a1:83:82:c0:
         50:fc:d0:0d:f9:1e:4b:c6:ed:f6:b3:fb:4f:9e:bc:89:cf:50:
         9c:0d:40:b1:ea:f7:fc:94:d7:99:3e:39:c0:f7:c6:36:12:9a:
         c4:ac:67:9a:bf:bf:cd:4e:13:e9:34:88:db:c6:a9:99:c7:15:
         9e:31:eb:d8:58:40:a3:00:41:63:00:e6:93:3d:c9:41:b1:f5:
         65:3f:aa:6a:9c:62:15:df:86:48:f9:e8:b9:84:48:92:ec:b3:
         a5:12:aa:30:b3:60:a7:7c:4e:2d:b7:a8:e8:f4:be:31:e3:84:
         ea:bf:1d:5d:c8:a0:88:7c:ed:c7:ae:ed:32:c4:32:2a:94:99:
         89:ea:da:82:a5:08:4b:c4:ed:de:6e:b5:6c:03:e7:c8:27:8c:
         6e:90:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:24 2024 by rpki-client on console-ams.rpki-client.org