Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File:                     ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier:          oWWgpIB8Ksv1PWvdhLpRHbbeX7o8ILoqQxLn+Tj8hJs=
Subject key identifier:   8E:D4:EF:C5:68:0E:14:C6:26:DE:19:6B:66:FD:57:74:AD:98:EA:25
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer:       /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial:       019369D9DC77D197B5184D6A188E26148666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number:          137F
Signing time:             Tue 26 Nov 2024 19:01:45 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:45 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:45 +0000
Files and hashes:         1: 3C90JZW4dC9x7edWQ9gUQTYK6VA.roa (hash: hRfVILU4vQIZ5BlnhoL2jjMEZQkueYexoBctOsdSfFA=)
                          2: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: aLEirAyanKhcAninpgNW7TfiBM+ArY72EPYc6kZFTXU=)
                          3: vPdNYp-mchdmtcaWUZ1RJpFG-nE.roa (hash: 9iHICWNipP2JdsvY6VuIirxL7nAFhCI0weQv7/w5Oys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:dc:77:d1:97:b5:18:4d:6a:18:8e:26:14:86:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
        Validity
            Not Before: Nov 26 19:01:45 2024 GMT
            Not After : Nov 27 19:01:45 2024 GMT
        Subject: CN=8ed4efc5680e14c626de196b66fd5774ad98ea25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:f7:e5:32:e5:d8:01:8f:df:87:20:1b:8a:
                    aa:11:07:2d:97:4e:88:49:29:7d:73:92:05:9b:03:
                    2c:ad:1a:ae:9d:79:b1:84:eb:17:0c:88:3b:81:2a:
                    c1:c8:c3:dc:eb:d1:9b:77:f6:bc:86:62:e3:42:1b:
                    1e:bd:5a:45:a2:8d:90:e8:0c:8f:4e:5a:a2:6a:d4:
                    d9:71:90:78:09:23:f5:ca:9f:c9:40:42:5e:45:85:
                    b5:31:89:46:03:fa:21:11:d1:ed:42:11:ef:2c:af:
                    d3:09:ab:ad:e5:da:38:a5:da:8a:0e:b1:d3:9d:b5:
                    35:7c:84:0d:84:0a:70:ec:2a:9a:3d:42:65:5a:47:
                    c9:6a:68:cc:d6:e2:22:ba:59:e6:83:e7:8e:97:fe:
                    4a:19:89:4d:c9:bf:31:f1:64:b7:e2:4b:0b:16:a8:
                    ea:3f:5a:ff:76:20:e5:dc:fa:ac:73:73:a4:88:39:
                    7f:4b:a3:ae:60:db:b4:4b:9d:ba:86:43:16:7f:c6:
                    8f:73:53:c0:f6:cf:58:9c:bd:bd:28:52:23:d7:cb:
                    27:24:14:0d:b3:7c:3c:b9:3a:c8:b5:bf:7e:c2:02:
                    cd:f4:22:7d:92:29:5a:5e:2e:62:d2:54:c5:f0:3d:
                    73:fa:48:3a:15:99:25:23:a5:53:99:38:01:3b:4f:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:EF:C5:68:0E:14:C6:26:DE:19:6B:66:FD:57:74:AD:98:EA:25
            X509v3 Authority Key Identifier:
                keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:06:1e:de:7e:7a:b8:ad:5d:0a:79:28:c8:d2:07:7b:e7:00:
         15:7f:31:ab:82:8b:5e:ac:b0:ed:d5:77:f2:20:ad:b9:c6:03:
         b9:c9:a0:f4:8d:d7:cd:e2:72:f3:9e:6b:15:e9:8c:aa:59:03:
         f8:8b:d2:69:0b:82:6f:43:ff:f6:a6:0d:bc:de:15:1e:c4:da:
         4b:ff:45:63:ba:6c:82:9e:ad:3a:47:2a:1c:3a:88:ce:ea:af:
         c1:36:24:9a:52:a7:a5:bf:79:e8:79:e0:12:e2:cb:c5:8f:a3:
         f0:ff:65:b6:02:9c:04:de:bf:d2:c4:eb:55:28:90:1d:7f:51:
         9a:ad:14:3a:a5:2f:0e:c3:b7:73:77:89:ff:7b:dc:c2:d9:61:
         bc:66:ad:84:b5:a5:66:cb:b4:88:ba:67:5f:34:41:cd:7c:29:
         af:dc:75:c5:95:34:ba:41:a5:61:5c:95:45:b8:fa:60:8d:55:
         ae:0f:be:45:d6:82:82:a6:0f:10:1f:c6:6a:75:3a:2b:9b:e8:
         5b:90:30:88:78:cb:90:de:fb:62:2a:57:06:bd:64:da:f0:ec:
         8c:b9:a5:9d:0b:9e:a7:6d:5d:b6:5e:b5:a8:d6:79:30:f7:1d:
         5b:3c:f2:9e:74:67:67:2b:a6:4a:cc:bf:41:f6:54:b2:6f:48:
         6c:86:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:21 2024 by rpki-client on console-fra.rpki-client.org