Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File:                     1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier:          9njXigT/i0vLOHZISLFvA9w778vYsPD9xOfncyMrnmM=
Subject key identifier:   72:F5:0D:B7:E8:24:89:48:AF:75:88:51:38:4D:EF:9F:4F:62:4B:FF
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer:       /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial:       01935688BB33D5DD4668A3B53FF63486EF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:21 +0000
Files and hashes:         1: 0hfb5qISGkjolenYvj6y3EQ1RyE.roa (hash: 70E+th+tD/HDI+6XMAOvU4S452HAeVKkPKRv4Eg8bhg=)
                          2: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: 2Q/pXFwyBCxV2GndY9wSBJIM1CScz09Uz8JwP9+aOMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:bb:33:d5:dd:46:68:a3:b5:3f:f6:34:86:ef:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
        Validity
            Not Before: Nov 23 01:00:21 2024 GMT
            Not After : Nov 24 01:00:21 2024 GMT
        Subject: CN=72f50db7e8248948af758851384def9f4f624bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:b1:ef:63:c1:5c:13:b6:70:7a:77:e3:46:
                    f6:ce:c3:1a:0e:d6:65:49:3b:43:f1:82:11:45:71:
                    28:a1:2d:dd:27:2f:a6:1e:74:a2:a8:94:ee:9f:a1:
                    02:4e:56:64:3a:32:b8:56:bf:81:85:38:a4:98:92:
                    51:e1:7f:e3:7a:bf:b7:11:95:c1:b1:32:38:4b:c6:
                    6c:e9:c3:9a:18:e6:9f:d3:52:f6:06:f9:4a:0f:09:
                    e1:6d:69:86:60:b5:d8:3f:7f:43:bc:73:9a:a2:fb:
                    55:52:30:28:a2:cb:98:0f:5d:ad:08:f8:c0:49:d2:
                    31:38:5d:3a:38:6d:65:c2:17:d9:c1:a4:1f:46:9e:
                    5f:80:da:d7:92:ca:17:99:e4:dd:ff:6f:c6:02:72:
                    18:0c:bf:c7:75:99:f0:9e:e7:ac:89:b0:ec:38:f6:
                    bb:c3:d6:3a:17:ff:b8:b3:3e:a1:74:49:18:bb:78:
                    95:b7:f1:ff:49:d2:ad:ab:90:b3:77:11:27:fa:50:
                    93:c5:54:4b:37:a4:01:cf:34:b0:e4:80:59:ab:e0:
                    82:c3:f0:f5:80:89:ee:f7:80:cb:d7:76:9c:81:62:
                    3f:d1:fd:92:06:23:d2:0d:00:e0:95:f1:ad:d7:41:
                    cf:8c:13:b9:98:ef:fe:70:fc:51:49:d5:30:8c:fa:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F5:0D:B7:E8:24:89:48:AF:75:88:51:38:4D:EF:9F:4F:62:4B:FF
            X509v3 Authority Key Identifier:
                keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ac:7c:3b:bf:7d:dd:3d:ad:94:de:e4:37:4c:c0:19:ec:f5:
         fa:db:3e:7b:78:36:5a:3a:03:a0:0b:33:e9:80:bb:60:63:b5:
         a3:bb:0e:e8:c4:c9:da:c7:64:cd:a0:d4:33:a8:72:8e:3d:4e:
         f4:08:4d:3e:6e:c2:b5:b4:fa:d3:dc:e4:04:9d:58:82:57:58:
         bf:f4:67:30:14:53:03:b3:a5:10:2b:d0:be:f6:df:a1:c8:a9:
         3a:f1:43:ba:2a:fa:5d:a7:43:a9:6c:31:d3:22:10:27:c9:de:
         74:b3:2e:79:7d:b7:a2:a6:2b:0e:79:5e:06:65:b3:a5:e8:7e:
         f6:1f:48:0b:d6:e6:76:6d:83:4f:36:51:5f:75:b8:4d:a5:bd:
         86:15:cf:4b:dc:42:d1:62:c7:52:ab:19:ec:45:02:2d:68:f3:
         91:1d:db:05:29:b2:0d:17:c1:2c:a0:92:7f:66:30:1b:83:18:
         6f:8c:c1:50:93:eb:96:84:5d:5c:1a:c3:76:51:d3:13:cf:12:
         5d:c6:93:cf:94:ba:ab:c2:b3:9d:5a:17:b1:cf:65:e0:88:09:
         6b:85:a7:22:0d:1d:76:02:98:0c:fa:8a:ea:44:86:d9:d7:a1:
         b7:3d:0f:6a:97:e5:11:70:56:cd:ed:68:f4:04:61:e8:ac:11:
         0b:67:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:49 2024 by rpki-client on console-ams.rpki-client.org