Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File:                     9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier:          AdsT8aRUDkhGYTW4Fm/4KfmCMi92I6al7oWr3rlozMU=
Subject key identifier:   53:28:DD:11:7E:D3:D0:09:CF:22:D9:F6:57:6B:73:93:4C:A3:78:63
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer:       /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial:       019369D94F1CA22F90673B8E91EA4952F1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:01:09 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:09 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:09 +0000
Files and hashes:         1: 1SdxEVGy6IBXt3y6d2ij2sl2ENk.roa (hash: HXRxvMrLJzW7AF1JKVzvtmU29/hvgRScroQgx/WQ0rg=)
                          2: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: 8pe91hfQaRnXeW9a8qePMjblHR14DoIGUmtqgvA414o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:4f:1c:a2:2f:90:67:3b:8e:91:ea:49:52:f1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
        Validity
            Not Before: Nov 26 19:01:09 2024 GMT
            Not After : Nov 27 19:01:09 2024 GMT
        Subject: CN=5328dd117ed3d009cf22d9f6576b73934ca37863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:84:7c:a3:27:4b:8e:8c:77:41:60:12:6b:
                    9b:5d:15:a5:1e:5c:9c:54:ee:cf:08:22:2a:76:ac:
                    1f:34:a7:3b:a4:ca:8a:33:2a:a7:fe:24:37:ee:d0:
                    4a:6d:d3:fd:0b:73:a0:49:61:7a:75:65:a0:0b:9d:
                    eb:1d:0f:3b:10:38:da:b6:67:fa:07:3c:37:3f:ba:
                    57:69:8b:33:49:00:3b:81:f0:2a:f8:e7:f4:b4:e9:
                    47:9b:2f:ff:4a:f0:a9:66:56:da:4e:67:d3:94:10:
                    00:1e:f8:2b:e2:eb:0b:2e:be:b6:dc:71:d4:da:92:
                    96:4b:42:e6:bd:a1:f5:be:6d:70:6d:77:65:14:0b:
                    f7:07:de:db:67:b8:ac:a9:b0:f6:ea:51:88:fe:05:
                    8b:05:ed:8a:e7:d5:db:59:cd:cd:c6:d2:f7:39:96:
                    bd:ba:0c:2a:cc:50:5f:99:5e:1f:ac:e1:2d:41:d5:
                    90:11:de:41:26:4e:01:8f:9d:80:91:d9:1b:9f:00:
                    a9:75:3f:f2:23:08:7d:5a:2e:5b:eb:42:b4:d1:d5:
                    3c:54:1b:55:dd:60:5f:7a:5c:a1:55:35:e1:97:66:
                    0a:04:a2:8c:6d:5a:0c:2e:58:ea:83:d7:6a:2f:c8:
                    a6:f8:09:cb:fb:ca:b3:5e:38:b8:0b:06:ee:25:05:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:DD:11:7E:D3:D0:09:CF:22:D9:F6:57:6B:73:93:4C:A3:78:63
            X509v3 Authority Key Identifier:
                keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:5b:4d:5e:04:c2:e6:6f:1b:67:68:d1:c0:38:c9:f7:a7:
         73:a1:c3:5a:0f:4d:55:9d:2b:ee:79:73:f5:25:72:a3:9d:59:
         a1:94:f1:f6:04:88:45:65:dc:83:e9:b6:88:b6:1d:7d:7a:c6:
         c0:1f:ea:d7:0b:3c:44:b8:a9:63:ae:26:6f:76:c8:85:1c:ff:
         be:45:97:8c:ee:ba:88:f1:d4:2d:56:4c:9f:42:c1:e6:57:05:
         13:a8:f7:ab:d6:25:87:71:5b:4a:7b:46:17:9d:e2:11:b0:62:
         2e:18:63:0f:87:6b:67:01:37:47:ce:ba:41:49:3d:1d:9c:65:
         73:68:d4:6f:77:b3:2f:fb:19:3a:13:19:d3:9b:23:22:6d:8f:
         2b:2d:16:60:61:d2:18:9d:92:9c:bc:13:82:3a:9d:b9:81:c4:
         7a:5e:ee:0c:31:1d:50:77:51:12:25:08:1c:ca:c5:c4:d7:1a:
         53:9d:42:e7:d2:71:6d:4a:ff:ac:4e:69:54:c6:61:b4:e4:3f:
         bc:c1:c7:8b:30:e5:91:d3:8a:d5:d6:b9:33:52:f9:45:37:1b:
         62:d9:d2:29:9c:51:92:92:ab:c5:51:21:6d:d9:ca:9d:3c:24:
         1a:36:1e:3a:ec:83:2b:4b:35:7b:9c:38:6d:b9:08:d9:e4:14:
         16:d8:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:14 2024 by rpki-client on console-ams.rpki-client.org