Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File:                     V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier:          rUYQHmKqvJDgQHbYJceEzyf+xkHHIdTBRj+saRwHGSk=
Subject key identifier:   1B:16:4E:C3:5A:35:EA:23:09:58:A7:9F:23:7D:C0:B5:F6:4D:62:EC
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer:       /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial:       01936BC6FC3B57950EAC2C3A5467BFD9A69D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number:          137D
Signing time:             Wed 27 Nov 2024 04:00:22 +0000
Manifest this update:     Wed 27 Nov 2024 04:00:22 +0000
Manifest next update:     Thu 28 Nov 2024 04:00:22 +0000
Files and hashes:         1: 77SIMHB99qKAs8LEMUZ5ELxcko4.roa (hash: h6Q8W6M92wbTbBJDevLkocEUhHI3J3hfA+u5MGIv0Ok=)
                          2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: 3+doEe+fx8+FW8Q1AoI4+r6b5VTPfiCsK9Wz1OYgxiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c6:fc:3b:57:95:0e:ac:2c:3a:54:67:bf:d9:a6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
        Validity
            Not Before: Nov 27 04:00:22 2024 GMT
            Not After : Nov 28 04:00:22 2024 GMT
        Subject: CN=1b164ec35a35ea230958a79f237dc0b5f64d62ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:22:22:d8:e2:ee:67:8c:8b:b3:8d:e7:3c:
                    b7:42:40:dc:19:2c:1b:51:a4:3f:1e:8f:1f:6f:7f:
                    e8:66:18:eb:8b:5f:fe:8a:1f:e2:a1:a9:56:39:dc:
                    3c:df:90:4f:9b:b5:6a:6a:b3:25:86:a7:2c:58:fc:
                    a7:48:2e:4a:c4:25:38:1b:50:a1:51:fe:6b:dc:6a:
                    dc:b7:31:73:62:3a:c4:fe:c9:45:cd:77:cc:7c:a6:
                    33:dd:04:3f:b6:80:1e:cc:50:34:ff:7a:8a:c8:db:
                    dc:69:d6:b3:fc:76:af:f2:2a:d3:1e:e3:07:21:cd:
                    77:de:42:29:19:f8:0b:eb:40:1d:01:ba:94:26:3e:
                    4a:cf:40:d9:a4:4d:39:1a:ed:79:25:bf:bc:be:65:
                    e8:95:e0:73:7b:23:ef:74:5a:fa:8e:e3:71:41:c9:
                    26:dd:9a:a3:05:b9:c9:a4:36:ab:1b:a2:fb:94:03:
                    8c:3e:05:4e:41:61:d2:01:46:82:d1:59:e4:1f:7a:
                    6d:aa:62:ff:5d:9d:8f:9d:1c:36:e6:54:a8:82:33:
                    b0:65:4b:2e:35:15:60:53:d4:a4:24:75:80:2f:47:
                    b8:09:58:14:18:ea:21:9d:7f:53:95:f2:79:4d:33:
                    d2:9b:55:cc:fe:a3:b5:fe:e6:59:94:4f:8e:25:2e:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:16:4E:C3:5A:35:EA:23:09:58:A7:9F:23:7D:C0:B5:F6:4D:62:EC
            X509v3 Authority Key Identifier:
                keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:9a:8d:cd:59:03:5b:c0:61:89:11:bb:39:22:45:6e:7f:
         78:17:bc:62:b9:35:a7:ba:fb:49:db:d0:87:d8:9d:4b:00:f0:
         a0:ab:24:1a:ff:ac:f7:51:64:2c:1c:ea:74:ac:3d:37:33:e7:
         8c:68:70:1b:b7:a4:0c:71:b1:1f:7e:bd:0c:46:b9:ea:fd:03:
         67:af:02:9a:b0:8d:2a:f9:bb:19:fc:87:bc:11:c0:5a:5b:fa:
         b4:a1:2b:d3:00:ec:16:fa:1e:f7:b1:75:1c:08:eb:e3:0b:47:
         59:2f:72:6a:32:18:bb:11:63:5c:08:f9:df:52:71:c1:11:4e:
         75:89:7e:4c:1e:62:6e:f0:fe:d8:05:13:48:a9:9f:26:a8:20:
         aa:19:19:bd:0c:5a:20:6b:da:2f:0f:70:af:df:22:a1:0c:f4:
         0a:2f:b0:46:da:da:d1:8b:21:ea:c0:64:14:32:e2:54:f7:95:
         94:2b:32:cb:b8:36:fd:2f:08:49:43:ea:cd:74:57:51:02:83:
         e7:79:00:3f:cc:41:40:3c:f8:ab:16:c1:53:5c:9f:67:a9:ee:
         a6:0b:98:33:42:eb:de:aa:88:ff:8d:7c:ca:f9:a4:19:10:23:
         d7:3d:b0:ca:95:84:2a:ed:61:70:63:ea:44:90:b5:6a:7f:69:
         34:8f:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:06:05 2024 by rpki-client on console-ams.rpki-client.org