Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File:                     0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier:          1ePBTumW5cLUGFLmToD3qrj34QO9nxKURw4c4ewow8U=
Subject key identifier:   1B:8C:E2:CF:B4:76:16:FD:B7:97:0B:74:18:67:CD:7B:37:1A:5F:28
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer:       /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial:       0193553F5E38FC4727352EADECBF5CF17823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 19:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:36 +0000
Files and hashes:         1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: 9QUe4ciSdi/Y5ZsNGQNhepAUDKFW9XHrQOxcnb+7w3w=)
                          2: Ly64dheAKvHm6ytW_A_ytKSUCHw.roa (hash: ZVZiXmpQMityYcCyeUzDNejMdR9ffSGeIJWzk0nz7DA=)
                          3: SL3tnMcbWHllCvaUCXkQPG5tIGI.roa (hash: 0joFu3n9RoJ/8XiPXiFB2FAX8Q/QGlpSJ5CpKyryaf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:5e:38:fc:47:27:35:2e:ad:ec:bf:5c:f1:78:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
        Validity
            Not Before: Nov 22 19:00:36 2024 GMT
            Not After : Nov 23 19:00:36 2024 GMT
        Subject: CN=1b8ce2cfb47616fdb7970b741867cd7b371a5f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:1e:83:b5:ad:0e:58:1d:74:01:30:e8:62:
                    81:af:ce:d1:48:81:15:ab:26:f3:26:f2:1b:18:02:
                    09:ea:7d:70:38:a7:6d:fd:0f:0f:f1:f1:99:b6:48:
                    9c:a5:c5:4f:21:54:29:e1:23:85:55:51:d9:2b:52:
                    fa:3a:79:f1:5d:7f:85:f9:5b:9f:03:88:39:dc:80:
                    71:16:78:32:53:f6:05:ff:9b:a8:46:00:4e:80:b8:
                    cc:18:83:1d:94:dd:99:9e:9e:3c:08:2e:83:d2:98:
                    82:08:62:d3:4e:da:02:df:77:c8:b1:b4:b0:ae:6e:
                    fb:92:ab:d1:f5:d1:3e:55:53:89:88:f3:ce:70:84:
                    90:59:da:de:c7:db:ba:6d:4d:e3:aa:13:03:ec:11:
                    b6:bd:d4:bd:c5:d4:10:19:94:d3:4a:e6:0e:ce:1d:
                    8b:2f:20:45:fe:5c:1a:ce:3d:1c:e9:bb:bf:38:23:
                    df:90:c4:b7:6a:05:68:6c:fd:6c:27:ea:45:4c:7f:
                    4d:7e:71:9e:0a:ef:fe:6f:f5:8f:2c:3f:73:cc:18:
                    1c:7f:9a:29:70:74:8b:39:3c:0d:95:5a:0e:29:3c:
                    a2:2c:c5:a1:cd:00:58:cf:5f:01:2f:5c:71:19:80:
                    03:43:8a:53:d6:55:bc:81:00:23:84:c0:ab:30:bd:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8C:E2:CF:B4:76:16:FD:B7:97:0B:74:18:67:CD:7B:37:1A:5F:28
            X509v3 Authority Key Identifier:
                keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ed:90:63:ad:0f:bc:57:5c:1e:c2:ff:bc:d2:d5:12:97:e0:
         6c:41:55:ed:7a:c1:6a:e6:c0:b3:46:53:ee:d1:ed:10:af:52:
         cf:ac:38:65:04:1e:27:7d:3f:bc:83:68:c8:cc:d2:58:66:54:
         01:65:1c:13:35:c6:00:ad:a7:0c:b2:1b:f4:5d:9a:ce:b7:89:
         3b:82:ca:d7:dc:e9:98:31:4e:03:1d:4a:3e:9e:f9:04:b4:b4:
         68:99:95:87:eb:c6:1d:e1:a8:78:fd:ae:c0:fb:3a:30:ca:21:
         22:61:90:f5:9c:8f:28:27:22:b9:31:5a:a1:f9:6d:a9:cd:7e:
         54:07:52:a2:9e:7a:a0:36:c9:07:1a:bc:a3:c0:86:a8:1c:90:
         69:7b:85:f7:a0:b6:3a:3d:65:0d:75:7c:b8:c3:14:f1:9a:ec:
         3d:b9:39:db:ff:3e:4e:08:3c:25:ec:ce:f2:7f:f2:e1:df:1f:
         9b:36:e0:52:e5:8d:8f:9a:27:c9:58:d0:18:ec:17:94:63:ce:
         be:9d:d3:74:85:87:f0:61:19:24:46:97:a5:30:c6:3c:5e:cc:
         d0:16:3e:b1:34:1b:6c:e0:b8:b1:d1:b6:79:b1:cc:dd:f3:4b:
         91:8d:76:12:46:0e:bf:96:82:de:1c:11:7d:21:d7:85:77:81:
         eb:dc:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:17 2024 by rpki-client on console-fra.rpki-client.org