Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File:                     gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier:          2YP638vzT/Cxv1reZ5fvCPyCV3F2NTtBfQzO/EIjtuI=
Subject key identifier:   50:95:1D:11:52:2B:14:B3:FA:8D:5C:7A:D9:83:3B:D1:2B:56:8B:20
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer:       /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial:       0193523E293B13332E9A1696E65855C56E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 05:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:25 +0000
Files and hashes:         1: 4gbHIbsbFjWQ-7Dvo5_frXWwo0M.roa (hash: hqfnHuvbuE4K/iGHUxtD0YaUrwaso8ohwXTqTzTlddI=)
                          2: 6qGM5zz-AcgVrO6uVnTPy_APO_Q.roa (hash: jCHqf17fi+l7Ulh5HMUuF33PUkYcL0W9jTH/YEFEtU0=)
                          3: 8yGLkmK87eRhMHKtXe9vzvHjv2o.roa (hash: IgO7/eQbV7AtyHgkTa0trzo7kvUj1LliKC4r6D+m9wE=)
                          4: GzylZC_tHN63u1EQcv2JbrCIpLk.roa (hash: LJw4axbWP0zy9DqaJc7ue8kzTxOV57gcXDdVcJb0X2I=)
                          5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: WYzVLwLOGxyajlryZevgIF06m9upz7Gtp7xclAjY1WE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:29:3b:13:33:2e:9a:16:96:e6:58:55:c5:6e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
        Validity
            Not Before: Nov 22 05:00:25 2024 GMT
            Not After : Nov 23 05:00:25 2024 GMT
        Subject: CN=50951d11522b14b3fa8d5c7ad9833bd12b568b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:be:81:bc:76:37:9e:2e:90:47:a7:8e:b2:e0:
                    a5:f8:6b:5b:60:ad:3d:78:2b:bf:a7:a4:1f:19:3f:
                    ee:e1:ef:d2:df:8a:52:80:89:64:e2:3a:75:2f:92:
                    a5:86:19:fb:ac:79:fc:0d:86:00:62:60:80:42:fe:
                    d5:af:21:4b:20:c4:04:7b:28:82:02:8e:45:89:24:
                    1b:d6:dd:06:e3:e3:55:99:64:81:80:5b:54:20:4c:
                    73:db:70:62:2b:db:a0:fe:03:48:59:78:48:c3:a8:
                    a7:4d:ff:e9:12:76:d0:89:d1:67:c8:82:d5:9f:64:
                    f1:62:85:44:df:17:98:f7:5c:4e:60:8c:2d:31:91:
                    be:bd:14:96:dd:83:d8:72:73:1c:fd:e1:a0:4b:32:
                    8c:77:63:fb:ce:74:16:a1:3d:db:7e:3e:18:a7:da:
                    db:d2:89:88:2b:70:2c:49:35:20:b4:4a:76:f1:e9:
                    5e:e7:8a:be:03:4e:32:ad:44:7f:54:4a:90:3d:63:
                    a1:eb:f0:d8:4e:c3:b8:25:c0:81:e7:85:38:d3:3d:
                    1d:2c:7d:65:8e:89:aa:23:8a:6e:8a:d2:48:72:5f:
                    68:ce:76:2e:46:16:af:6b:c8:cf:b7:44:c8:53:3f:
                    82:bc:da:55:72:34:8a:5b:65:2c:61:69:d1:34:27:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:95:1D:11:52:2B:14:B3:FA:8D:5C:7A:D9:83:3B:D1:2B:56:8B:20
            X509v3 Authority Key Identifier:
                keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:50:bc:6b:b0:e6:fc:c4:36:bc:03:c8:27:41:f3:1c:32:18:
         e8:11:16:df:53:9d:2e:23:76:47:7b:48:89:f6:9d:53:64:4a:
         91:f6:c6:03:d3:31:ee:f0:fa:3b:9e:30:dc:a0:79:b1:c3:01:
         9b:77:6b:53:cd:ce:3d:47:42:6d:1c:47:6c:59:a0:ad:cd:5e:
         a5:36:f8:a7:75:5b:7c:ea:b1:6a:62:cf:4f:30:3c:2a:2b:a6:
         f7:25:39:dc:f0:e4:3d:1b:0c:4c:3b:ed:e7:7c:5f:25:e5:fe:
         80:98:38:0c:35:b5:0e:6d:26:4c:b1:62:4b:79:99:c7:10:6a:
         85:51:24:01:38:39:d6:44:34:e0:a5:08:63:29:1e:48:ce:89:
         b1:48:7a:91:4b:37:cb:22:29:35:6d:99:b3:97:7d:63:9c:bf:
         ac:49:02:3f:4c:fe:82:31:b7:d8:fb:4b:10:59:a9:b0:0c:6f:
         73:78:a2:cf:32:de:6f:0f:1f:9b:10:e1:b5:9d:fc:9c:2d:c7:
         1d:26:4b:70:ca:24:c0:3a:24:90:16:4e:fb:69:47:cb:6a:30:
         27:aa:a2:61:e9:72:bd:95:b7:54:a6:eb:3b:f3:c5:3a:fd:b9:
         95:21:8e:ef:26:ba:7a:bb:5d:51:4e:c1:16:ae:0a:38:33:cd:
         ff:0b:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:53 2024 by rpki-client on console-fra.rpki-client.org