Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File:                     XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier:          1eoggnuouBhk1am67eq02gsVn4Gvf/AeN2szKfuuIk0=
Subject key identifier:   57:67:A3:0B:7D:29:71:9B:AB:39:D2:54:45:58:5E:11:E7:C0:BF:D3
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer:       /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial:       019369DA014CD3164ECCEA8B77BC2E3AEB45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:01:54 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:54 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:54 +0000
Files and hashes:         1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: kNXzpWlLSIwb0zwWh7mx1TaITTJkRH6Z2UNCRewYUGA=)
                          2: j_5C7ksupdJRMrStgxlJBMPqJyM.roa (hash: rN3KvBwjYKHimojOAk7FBrF6YB7DxMXczVswMoiQ/F4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:01:4c:d3:16:4e:cc:ea:8b:77:bc:2e:3a:eb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
        Validity
            Not Before: Nov 26 19:01:54 2024 GMT
            Not After : Nov 27 19:01:54 2024 GMT
        Subject: CN=5767a30b7d29719bab39d25445585e11e7c0bfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:08:8c:09:a3:8b:ad:b6:6a:52:3c:cf:91:
                    cf:f3:03:79:79:81:67:b2:5c:c5:a3:3f:d6:0e:af:
                    56:b8:d7:7b:46:7d:0d:45:84:58:7a:4b:7b:8e:d0:
                    c5:9c:10:2e:4d:ca:dc:2e:02:d1:9d:36:bc:c3:6f:
                    2c:f9:74:5f:16:c9:0f:93:ed:75:90:eb:7b:1f:e2:
                    26:b4:43:3e:aa:f7:07:b0:3a:c7:30:15:24:c0:c2:
                    11:8f:20:07:2c:7c:2f:cd:cc:b6:01:9f:4c:ac:4e:
                    19:dd:c4:cb:ef:42:cd:d2:f1:c1:82:ed:78:0d:10:
                    e1:36:29:52:7c:b7:3b:8b:89:32:ce:9a:58:01:7a:
                    c9:7b:e6:92:c9:95:b2:77:ba:29:89:09:f2:65:f7:
                    1e:68:97:e0:c1:38:1d:bf:1e:1f:39:9b:4c:08:25:
                    d0:64:02:bc:08:94:6a:6a:65:a3:4e:c3:ec:f6:a8:
                    2d:fa:82:c5:3e:ac:6e:b0:c3:23:1d:a9:ba:99:2e:
                    d3:3f:e1:4a:7e:d7:49:62:89:2e:6f:27:c4:e3:9b:
                    8f:84:22:04:13:9a:0e:4a:ef:41:c3:b9:8f:6f:37:
                    90:1a:02:d9:1f:c2:f5:e8:17:1e:b8:e4:24:e2:28:
                    d0:3a:9b:d8:a5:5b:39:e4:60:8c:73:45:f3:6a:d1:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:67:A3:0B:7D:29:71:9B:AB:39:D2:54:45:58:5E:11:E7:C0:BF:D3
            X509v3 Authority Key Identifier:
                keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:70:4b:d6:36:9c:9d:80:5e:a4:68:99:bf:2a:59:ea:19:
         06:5a:35:6b:de:1b:4d:5e:4f:2f:66:0e:80:46:3b:0b:71:1b:
         fb:da:03:03:e4:8d:2b:c7:9f:f9:a6:e1:1e:9b:a2:72:d1:83:
         96:7e:20:e6:c1:dd:1b:fc:3b:40:aa:b0:23:4a:28:25:2f:88:
         05:bd:a4:e7:d1:6d:94:d2:dc:07:5d:4e:db:ef:e8:d4:b2:7e:
         84:cd:bf:c3:8a:53:c9:b2:95:ef:c1:55:8f:77:5a:fa:59:ca:
         0a:74:af:6f:ee:2f:6b:69:7c:7d:65:da:b5:ca:42:58:87:6f:
         b1:75:7d:dd:ec:d7:30:ce:d8:7e:7d:eb:d7:ed:ce:b4:f7:37:
         3c:b3:93:a9:bc:60:be:ce:dc:b5:60:93:b9:fb:c2:e5:c0:23:
         48:9f:6c:75:7d:c1:79:d9:33:ae:2f:ee:50:65:8a:90:9f:37:
         8e:08:66:4e:80:5b:fa:1c:f1:86:48:d9:90:cc:e5:d0:75:21:
         73:e4:75:b3:2f:9e:c4:4f:9a:fa:38:d5:d2:4c:72:35:f7:a0:
         e2:d3:62:b0:71:29:8e:74:ca:6b:d1:83:f3:56:05:ff:cc:48:
         d1:ed:1b:64:e5:fc:31:4e:9a:37:8b:7b:54:c5:ef:87:44:e0:
         69:27:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:09 2024 by rpki-client on console-fra.rpki-client.org