Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File:                     9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier:          RLkYpliitKndyGCP2PXFQQCwMoQTptn+2frljAky83g=
Subject key identifier:   57:4E:16:D7:B7:40:04:D3:22:32:AD:21:19:E4:43:15:82:FC:BE:E8
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer:       /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial:       01936A46F96DDCB6B89703B1FB2192D16448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 21:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:56 +0000
Files and hashes:         1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: TZG36heahc+k3qzmp7YFeiIMpIm9hAy9KPNro5uxMAk=)
                          2: XOKDLrkBEQpa-cDlmHYmtXnAHsY.roa (hash: 6ChnoXQLw0XNJNhH/OMKB/An4kpuJ/y2+g7uT8Bx6Nw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:f9:6d:dc:b6:b8:97:03:b1:fb:21:92:d1:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
        Validity
            Not Before: Nov 26 21:00:56 2024 GMT
            Not After : Nov 27 21:00:56 2024 GMT
        Subject: CN=574e16d7b74004d32232ad2119e4431582fcbee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:68:25:83:7d:a8:61:0d:5f:78:ee:91:98:
                    e6:6a:2e:ea:80:fa:f3:a6:b3:d5:2d:ea:13:bc:27:
                    60:ab:ce:3f:fe:fd:f8:de:ef:b8:f7:76:17:e8:d8:
                    83:de:d7:6b:cd:e9:64:5c:f1:06:1d:a0:0e:a7:2c:
                    13:5e:e2:c1:8b:ed:7e:b4:3d:b3:8f:b6:f1:cb:d5:
                    15:28:17:11:a7:b4:f1:1b:0a:93:57:90:4d:c9:30:
                    04:95:00:2f:d1:55:2e:2e:09:ce:54:04:e8:d6:73:
                    4c:31:5e:c1:ec:5c:27:ec:53:10:11:86:04:44:c4:
                    d5:22:c4:1f:06:3b:b5:5d:35:8c:2c:bd:2f:b1:d4:
                    63:f8:70:3b:da:fd:ce:74:82:12:cc:31:91:72:e3:
                    86:f3:e8:c6:c4:e4:00:9d:ee:be:76:5f:57:c8:a8:
                    7d:8a:79:81:64:60:e2:76:36:9b:47:de:26:dc:5e:
                    ed:a9:b6:f1:b8:13:e1:8e:3e:fe:17:b2:37:6a:63:
                    4f:ff:84:c7:a7:10:80:96:54:15:5a:7e:7f:da:95:
                    ef:30:4d:b6:06:a5:a6:94:f3:de:d3:99:33:de:20:
                    b2:04:9c:d0:a3:e7:0b:9a:ed:7a:9c:23:0c:79:be:
                    cc:47:0d:c0:b6:d1:41:e8:af:76:9d:79:d4:3b:f8:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:16:D7:B7:40:04:D3:22:32:AD:21:19:E4:43:15:82:FC:BE:E8
            X509v3 Authority Key Identifier:
                keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:37:5f:95:fb:42:4f:89:13:35:9d:05:ca:b9:60:fa:50:28:
         4c:58:85:47:0b:70:79:9c:65:b1:bb:f2:1f:56:4e:80:39:52:
         ae:68:a7:cc:21:80:0e:5f:38:17:32:21:91:79:0c:da:dd:5a:
         bc:26:cd:56:f3:bd:38:33:30:91:39:c4:69:ef:fd:96:5f:9d:
         b5:8a:8d:3d:6b:77:23:19:25:b3:4c:30:64:d7:97:b0:b2:70:
         eb:66:ad:88:a5:1c:8f:8f:d3:05:7c:cf:6b:68:6d:e0:8b:41:
         4c:79:cb:bf:40:b9:af:c8:1c:1d:ad:5c:5c:5b:96:df:05:c8:
         fc:72:fd:d7:89:ed:4b:04:00:ea:7f:16:c3:32:ca:9e:84:1b:
         f1:89:32:f7:fb:9a:dc:c7:94:89:f8:22:2b:fc:11:c1:70:54:
         93:6c:1f:d4:43:4b:9a:93:18:99:03:9f:a4:51:20:73:31:bd:
         ec:5b:c4:d2:2e:73:14:ad:3e:21:f5:30:d3:d9:84:47:0d:b8:
         2c:75:85:40:20:bd:f5:37:8d:92:f1:1f:15:f9:da:27:9b:e3:
         6b:27:7e:16:71:db:f1:f6:1e:a4:a6:93:26:6b:fa:b5:22:7e:
         12:ed:67:34:79:e2:06:0b:ec:df:a0:87:0f:1c:6d:7f:67:37:
         5c:38:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:48 2024 by rpki-client on console-ams.rpki-client.org