Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File:                     iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier:          Yf3av0kULAzax9AX2eogCL47cOh/l3iOu27tQRb0hhY=
Subject key identifier:   9E:26:DF:E2:AE:4C:0E:FB:19:C2:98:AF:5C:B5:03:07:E5:0A:01:66
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer:       /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial:       01936A466940797DEF1A5D413D1580F85FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 21:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:19 +0000
Files and hashes:         1: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: yuyDTohW+rO9EczxlYWZxE2ctqRABeSrhRgYum1QV54=)
                          2: yNhG0WmvC5yZi7-ovkjnbWUQxts.roa (hash: j6pIdl5Q9VXqZ7knDFJ1l/kvsr0uOXtJxhfR3DjzmC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:69:40:79:7d:ef:1a:5d:41:3d:15:80:f8:5f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
        Validity
            Not Before: Nov 26 21:00:19 2024 GMT
            Not After : Nov 27 21:00:19 2024 GMT
        Subject: CN=9e26dfe2ae4c0efb19c298af5cb50307e50a0166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:b0:cb:f8:f0:68:15:9d:2c:65:f1:4a:31:
                    cf:43:9d:3d:02:0e:c3:16:9c:ac:7f:a7:85:75:f9:
                    86:d9:56:b2:f1:d9:c2:c3:1d:94:99:8f:85:56:86:
                    90:2b:fc:41:d8:d3:44:42:1d:00:7c:fb:6b:87:31:
                    b3:97:f7:ab:04:e6:92:55:f3:64:4b:36:66:65:78:
                    06:05:1b:3a:cb:82:85:fc:a1:95:7c:01:4e:ab:43:
                    91:6d:a4:d4:36:60:3f:9f:b2:53:61:80:af:ea:b3:
                    99:e6:4a:25:4e:9e:c1:b0:96:0e:6d:31:0c:f1:ae:
                    8e:96:20:e6:af:ea:18:13:11:81:cb:14:3c:4f:9f:
                    e8:e5:c6:0a:3e:c4:c4:7b:14:a8:88:f5:be:94:f5:
                    cd:85:91:06:02:c7:ba:00:98:14:30:dc:50:68:9a:
                    ad:3a:c0:27:58:1c:d8:b5:e5:08:67:c5:6a:ce:3b:
                    47:5b:ce:dd:08:c4:b2:41:a9:ba:34:cb:60:f6:16:
                    d2:9e:90:cd:cc:5c:74:90:a6:e5:f9:9a:63:b4:c6:
                    4e:84:d6:72:1b:31:d8:45:f6:72:bc:7e:fb:46:f0:
                    97:da:44:c9:6e:0f:22:0d:b4:ba:3f:c4:ce:1d:3b:
                    de:05:6e:89:66:53:4a:5d:4f:7a:bc:77:bf:29:ec:
                    6e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:26:DF:E2:AE:4C:0E:FB:19:C2:98:AF:5C:B5:03:07:E5:0A:01:66
            X509v3 Authority Key Identifier:
                keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:c4:a4:3f:c5:89:52:bb:aa:ee:1b:02:fd:86:d9:c9:d3:
         08:50:14:71:40:51:c0:2f:77:d1:97:3e:ab:f2:81:2e:f8:c0:
         32:87:9b:0c:65:bf:73:fe:84:9d:78:c5:51:6a:c0:eb:ea:75:
         81:01:57:15:15:72:db:4a:fa:c6:fe:44:37:f9:dc:d4:8b:18:
         e5:68:e8:2d:db:30:04:c2:1c:16:04:fa:8d:ce:b3:11:16:25:
         fc:f3:e9:fe:80:3a:50:03:af:31:95:d1:e0:67:87:bc:c3:f9:
         58:0d:a9:70:ea:ad:71:50:37:62:68:82:2c:e8:b5:f5:3f:d7:
         e7:7b:34:3c:af:3e:3a:f3:7a:35:63:58:cb:b9:bb:04:f8:67:
         39:d3:a6:8b:c2:2e:6e:d1:e5:e1:6c:a8:a4:de:07:20:5a:6a:
         e3:2c:1b:88:a8:4a:41:a3:45:c7:e3:a9:09:e7:8f:09:2a:1e:
         60:8a:a6:c6:05:42:93:60:90:32:2c:e5:42:4a:ea:1c:9f:be:
         13:2a:4b:a1:e4:d6:bb:91:b1:47:3e:fe:4e:83:1c:06:e6:b8:
         a1:94:08:c3:09:ab:35:58:96:c0:58:dc:2e:cc:d4:09:70:41:
         73:df:d5:7c:4c:76:cf:3e:a4:88:f6:df:d5:c1:8f:69:1b:52:
         d0:ad:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:51 2024 by rpki-client on console-fra.rpki-client.org