Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File:                     ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier:          VeMZl27U5eKDdIj77k84jh/KyXMyohtkhICPN5ojARI=
Subject key identifier:   36:01:63:15:F3:0C:C1:64:70:0B:03:BC:BF:CF:FA:3F:70:D1:AA:30
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer:       /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial:       0193557697C47E24621581BEEF10FC16D5CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number:          137F
Signing time:             Fri 22 Nov 2024 20:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:55 +0000
Files and hashes:         1: daiToo6XZVExNezwGVnwoKri1Nc.roa (hash: Rb5Qfsh8ghcsBMhIUKiZKfhsWi8jaLQhwtg9QyxoJGw=)
                          2: ee7-33TD0U0Goo9Pz5p3Y0m_hd0.roa (hash: GTXqSuQtaKKRiQRienQBl5oW1Z76WFwg1wP8y5ah+bE=)
                          3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: mOixq1O+uIFebDTfsqN+BVqjw/yaBSoazBXp9sYt2q0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:97:c4:7e:24:62:15:81:be:ef:10:fc:16:d5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
        Validity
            Not Before: Nov 22 20:00:55 2024 GMT
            Not After : Nov 23 20:00:55 2024 GMT
        Subject: CN=36016315f30cc164700b03bcbfcffa3f70d1aa30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:6f:86:f3:9e:55:8c:63:1c:d3:62:10:55:
                    be:f2:59:f0:94:91:06:b1:9f:4d:7f:41:5b:23:e4:
                    96:3b:d3:50:91:17:6f:2e:44:25:d9:21:11:77:83:
                    e3:a1:c5:fc:2f:e5:d5:f2:3e:90:9b:65:76:b3:f6:
                    8b:58:e6:42:f2:d4:4d:92:f2:c6:81:4d:ab:3f:33:
                    33:27:96:ef:f2:0c:a7:4e:01:a6:68:98:b0:bf:55:
                    08:83:fd:25:46:de:c0:82:72:cb:70:c7:d6:04:cf:
                    00:b4:6d:38:1c:73:c7:f7:da:f2:9a:3a:b7:23:a0:
                    83:48:ff:e5:d0:30:24:08:9e:20:04:d8:98:06:9f:
                    1d:d6:87:7b:cc:5c:ec:4d:90:81:ff:ac:62:6e:69:
                    bc:d4:ae:61:11:72:0b:a1:c9:5c:98:fd:61:68:f5:
                    f0:bc:cc:0d:84:d4:08:33:5c:1c:e6:f1:61:ae:e9:
                    ed:59:7a:06:3d:35:9e:f0:32:93:9f:90:4e:9f:7d:
                    22:14:71:b4:98:59:24:f5:ff:d7:c3:bd:79:56:c8:
                    40:be:78:0c:8d:b2:34:91:48:c1:22:ed:46:94:e1:
                    5a:5d:5a:ba:3f:96:56:69:a7:57:cf:d4:18:f8:18:
                    d9:eb:38:4e:8f:c8:86:ba:ef:8c:c0:c7:8c:8d:3d:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:63:15:F3:0C:C1:64:70:0B:03:BC:BF:CF:FA:3F:70:D1:AA:30
            X509v3 Authority Key Identifier:
                keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:77:70:b1:75:5a:ea:6c:01:97:7d:ff:5b:1a:0b:b9:0b:2d:
         29:b5:90:11:de:db:c3:b8:c9:f5:08:43:c5:71:1f:9f:cd:ec:
         8c:c1:0a:8f:7b:99:41:e9:a7:7c:28:5b:6e:18:25:2c:49:a5:
         93:2a:60:57:d1:fb:a4:e1:ba:ae:0d:f7:eb:a0:8d:71:b7:de:
         a1:6d:ff:de:95:39:2f:75:53:28:08:0a:7d:55:ae:a6:92:81:
         a0:18:ab:fe:98:e5:16:d9:9b:f1:65:46:c1:63:cb:4a:91:5e:
         b8:9b:51:29:7d:19:5a:02:b2:39:61:5d:5d:6e:a5:22:5a:f9:
         86:be:e6:96:55:3a:9d:ea:7b:32:62:68:65:77:2a:22:3a:52:
         75:ae:be:75:15:84:6f:85:d7:7e:03:5c:28:92:da:13:13:ed:
         ec:f7:41:77:40:65:37:88:63:91:23:87:cc:40:88:40:91:52:
         02:01:a3:c9:ac:d3:df:f2:62:d1:e1:9c:db:ae:52:56:4c:73:
         20:5c:27:01:04:47:bd:4f:34:67:6e:84:3f:ef:7d:44:46:1a:
         74:34:6b:19:2f:81:88:5f:59:6d:70:18:3d:0b:bc:14:1a:bf:
         3d:ca:8d:c3:d2:02:3f:ca:1f:2b:d3:f1:39:60:6b:e2:41:bc:
         60:0b:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:35:40 2024 by rpki-client on console-fra.rpki-client.org