Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File:                     diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier:          Pt7RfHhk3+URZOer03YV4REWqV6TDG2iLpO5aEA+6cg=
Subject key identifier:   82:30:92:25:51:44:33:E4:10:F4:03:15:4D:B2:AD:17:9D:F9:89:A5
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer:       /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial:       019352AE33E213461D0D225F48748CC8AF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 07:02:48 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:48 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:48 +0000
Files and hashes:         1: 3SqeyhbLlyrdxkywMNau9EszbLc.roa (hash: q4tLbTqFnx7GPymLqFNKHbXx1nw5Ij5o1QAKQC0yLvQ=)
                          2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: yPGEeGRHL6DcuhuHy4wxhNjJ6ZvphJmpuzfNh5YcTVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:33:e2:13:46:1d:0d:22:5f:48:74:8c:c8:af:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
        Validity
            Not Before: Nov 22 07:02:48 2024 GMT
            Not After : Nov 23 07:02:48 2024 GMT
        Subject: CN=82309225514433e410f403154db2ad179df989a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:f3:2c:d2:7c:c9:d1:9e:23:60:c7:16:ab:
                    9e:97:2b:58:f6:12:22:84:b1:1e:00:22:9e:2d:0e:
                    ef:a0:d2:c6:fd:e2:13:00:ff:55:9a:c1:63:42:b5:
                    c6:84:ea:d2:c5:28:42:83:15:c1:fc:4b:ca:51:0d:
                    49:1e:04:4e:90:6a:fd:96:a4:3e:de:8e:1a:43:49:
                    b2:b6:13:ac:c4:0a:40:d8:2e:4d:0e:51:6a:94:50:
                    82:85:0a:dc:c8:0d:8d:8e:af:e6:56:87:2e:bb:c6:
                    f8:7d:11:b0:8c:d6:a8:d6:94:c8:e6:5d:1a:c2:d0:
                    24:48:44:7c:e3:fb:6e:7f:ee:99:94:52:f7:2f:c2:
                    62:13:88:ff:1c:20:16:8c:08:bd:60:9f:fc:ae:7f:
                    2f:5c:40:0f:a2:15:45:65:a0:55:6d:18:cb:b5:4f:
                    52:68:ff:ac:39:c9:31:02:ee:d7:3c:af:cf:c2:65:
                    03:f2:d9:94:71:ab:b5:0d:6a:51:3d:92:7c:29:25:
                    f8:a4:5f:61:8c:b2:18:f0:66:0a:87:bf:62:25:83:
                    c1:fc:25:bb:f3:f1:56:3b:df:94:77:cb:52:cd:c6:
                    d6:1c:22:ba:64:53:10:0c:8a:29:57:0a:24:51:5c:
                    6f:14:77:56:83:38:da:b3:92:33:e2:de:4d:7e:0a:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:30:92:25:51:44:33:E4:10:F4:03:15:4D:B2:AD:17:9D:F9:89:A5
            X509v3 Authority Key Identifier:
                keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:bc:2b:9e:5a:b0:b2:e4:5b:53:8f:35:72:b5:17:46:9e:
         cd:3a:12:d9:1c:ed:a1:ed:51:6a:1d:33:02:eb:7e:b1:2d:0a:
         52:00:2e:08:a6:50:20:ee:48:f6:57:f0:43:70:71:d0:db:07:
         2b:62:92:2a:da:6e:c0:7a:a2:b1:04:87:82:8f:25:28:ac:b7:
         38:ba:25:78:db:02:ee:51:9f:54:33:1c:a8:85:ca:bc:ba:c6:
         64:2e:5f:9e:10:e2:e2:73:8f:70:46:a3:c9:5f:e4:90:5e:d1:
         c0:df:a1:d4:cb:92:be:69:2b:d5:b8:84:e2:8e:6f:03:48:18:
         06:1d:bc:6f:9d:c8:e6:ca:f9:ce:a0:ab:9c:b5:16:17:52:4c:
         ad:b2:af:29:1d:7d:40:da:fa:5a:36:66:4a:cc:e1:83:d2:d4:
         b0:79:98:90:1f:86:00:16:79:eb:98:18:63:b6:9b:c1:49:a4:
         7b:7d:59:2c:39:84:23:1c:82:7a:a9:f7:94:5e:c0:6e:e9:38:
         2c:17:0d:86:69:30:c4:0b:33:48:aa:df:1f:9f:1d:a6:19:72:
         22:2a:75:f9:b2:0c:2c:f6:40:cc:1c:20:9c:a0:11:2a:d3:bb:
         8e:6c:02:f5:ea:36:82:1f:f6:54:3a:a9:7c:92:5f:d3:a4:44:
         18:f6:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:44 2024 by rpki-client on console-ams.rpki-client.org