Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier:          /YkICFJTb192I5yWZ+nqk12FaOEKNjbsCpAG6+TKsFk=
Subject key identifier:   99:D9:10:EF:4C:06:6D:35:98:73:62:0E:20:86:29:8F:9B:DC:51:05
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer:       /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial:       019366A0D36712CC77B888DCFCEDBD29008C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 04:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 04:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 04:00:35 +0000
Files and hashes:         1: eghDJvGTaI0OSTACCqQ_8W0lgVE.roa (hash: CJxRJv2uIKvGtZUOqazly6VS7g79QuH7fIjbUWPjWXo=)
                          2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: cUsfFJ/FV3zIzFEAHbVHDRUznt9/sqbusve6ywadWJU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:a0:d3:67:12:cc:77:b8:88:dc:fc:ed:bd:29:00:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Validity
            Not Before: Nov 26 04:00:35 2024 GMT
            Not After : Nov 27 04:00:35 2024 GMT
        Subject: CN=99d910ef4c066d359873620e2086298f9bdc5105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:c0:77:4c:39:2a:36:2d:9c:7d:ca:b9:4c:
                    bc:9e:97:76:e3:a8:53:65:6b:81:ad:61:30:e9:ef:
                    42:b4:9c:7f:96:cc:c5:ee:87:5d:a6:95:0e:c2:5b:
                    84:d9:bd:dd:fb:28:05:1e:0d:95:be:10:db:a4:8d:
                    33:1a:3f:4a:b6:52:09:55:d8:b6:4b:51:c6:af:fb:
                    8f:5b:56:a9:94:fe:b1:65:44:35:03:89:ae:08:bb:
                    af:b6:c6:19:4f:62:d7:6c:1d:81:9c:06:8d:e6:ed:
                    c5:30:0d:37:81:be:1c:fc:37:07:83:c8:48:eb:23:
                    2f:a1:7c:e2:e5:dc:23:fa:65:d2:4c:25:07:78:65:
                    18:a7:4c:86:05:2b:24:ae:9e:ec:22:eb:df:46:3f:
                    aa:1d:c1:2b:30:36:13:62:6b:ea:23:9b:0e:9d:47:
                    09:de:d8:d4:c7:f0:dd:cd:af:5b:54:cc:2b:8f:8d:
                    98:fb:ea:46:ce:78:23:f4:a9:5f:7a:d2:d0:c9:2d:
                    c1:c3:71:67:a4:c0:87:28:5f:b1:2d:85:95:d2:ae:
                    4f:89:65:de:cb:b8:f8:6b:98:73:f0:de:41:d3:60:
                    7a:5a:c1:b2:d3:fd:43:35:48:5b:27:79:83:4c:2f:
                    a3:94:e6:20:4d:69:90:ca:25:dd:1f:5e:61:c0:56:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:10:EF:4C:06:6D:35:98:73:62:0E:20:86:29:8F:9B:DC:51:05
            X509v3 Authority Key Identifier:
                keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e7:5d:96:62:1b:91:1c:b4:31:22:57:c8:30:dd:34:bf:73:
         36:ea:13:2b:79:02:50:a0:8f:fc:e6:bf:5b:1b:03:19:d2:14:
         f1:47:39:a3:63:cf:19:05:57:19:d9:28:c0:21:a8:14:1b:e3:
         a0:64:f6:ce:0d:af:d5:25:67:2f:18:af:d8:69:d7:eb:fc:eb:
         8d:63:2c:65:ef:4c:21:bb:be:18:0a:9b:ca:dc:6e:5a:2e:e6:
         1a:5e:64:10:fd:c2:cf:e4:be:b0:ba:a6:d3:0b:3c:30:cf:17:
         ba:4d:03:a3:69:37:71:d1:25:df:2e:c1:3a:f9:b8:69:c6:98:
         68:d5:49:b8:af:cd:e5:76:5a:ce:77:3f:2d:af:22:4a:4f:37:
         6b:a5:46:79:32:6b:5b:36:c5:ea:da:18:5e:5e:7e:4a:3e:c6:
         43:37:c1:9a:5a:e7:07:fa:5a:d4:77:c1:9c:2f:a3:a1:45:95:
         fd:db:be:42:c1:ce:d3:ff:8a:54:bc:1d:8b:68:dc:71:a4:4a:
         0c:3b:3b:2b:51:bb:79:7d:b2:5b:48:63:6c:1f:c7:a4:3d:16:
         3a:4c:5f:6c:1f:55:97:5b:c8:7b:ca:ef:d8:2e:64:80:73:39:
         75:a9:76:15:89:bf:6f:5a:3d:66:2b:dc:dc:51:04:ce:53:a1:
         2a:f4:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:33:40 2024 by rpki-client on console-ams.rpki-client.org