Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          WIGnTMivTZE8Kv7igSpgAxzCI71zV2O772f7l2Ol/Lc=
Subject key identifier:   4F:C9:B0:C9:9C:C4:C5:94:99:33:56:74:6A:D3:D5:0E:11:CE:06:02
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       01936AB4390FBF6C05B624F9F2BDA7CB3946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 23:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:16 +0000
Files and hashes:         1: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: 7QUdXVWZ5l1odM95zqCAFqKBT9ZCQ2jQHmmbO4sOW+s=)
                          2: nfNNIREj-Z96OSZNk3-V3otkOh0.roa (hash: mrGZpIJsQzPOcR85e9Cto4thcUrRC1E7sA5RfG1E4Xg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:39:0f:bf:6c:05:b6:24:f9:f2:bd:a7:cb:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Nov 26 23:00:16 2024 GMT
            Not After : Nov 27 23:00:16 2024 GMT
        Subject: CN=4fc9b0c99cc4c594993356746ad3d50e11ce0602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:91:74:20:ee:e2:ad:09:f4:66:2b:6d:39:
                    0d:a8:5c:c2:d8:e5:0c:02:aa:01:18:28:e5:fd:57:
                    f5:77:42:a6:a7:0c:be:ba:35:d8:96:88:52:5e:f7:
                    ce:bb:1a:5d:03:da:43:bc:aa:f5:d9:1f:ac:2d:ec:
                    c3:48:f8:84:3e:eb:fa:01:2c:8d:3f:d2:c9:a8:b2:
                    8c:9a:3c:24:74:33:ad:1d:7b:0b:ab:a8:9f:c3:fe:
                    b5:5d:36:af:b6:ac:69:a7:b6:5a:4f:04:e8:82:75:
                    c8:45:2d:b6:b8:89:83:12:fc:e2:a4:7b:68:60:6d:
                    6c:a2:b3:53:56:aa:39:74:8e:3f:5f:33:b7:b5:3f:
                    b5:93:17:76:bc:f2:8e:b6:48:fb:67:4f:0f:d5:a2:
                    66:0b:be:31:a6:d8:02:96:88:bd:eb:d2:91:10:cd:
                    fc:74:ae:28:f8:99:98:1a:37:0d:5f:6a:3f:44:bd:
                    3b:0e:a1:21:91:09:da:c3:7d:00:4c:16:e3:74:2b:
                    a1:05:26:a6:82:a0:b6:88:cf:45:e0:44:95:ea:97:
                    21:58:43:09:bc:58:22:d5:81:79:34:95:2e:62:ad:
                    d6:67:0e:9f:75:53:f1:bc:04:4c:af:a6:00:09:79:
                    a1:c1:e4:7c:df:34:21:ea:2f:4a:99:30:3b:0e:05:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C9:B0:C9:9C:C4:C5:94:99:33:56:74:6A:D3:D5:0E:11:CE:06:02
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:43:dd:26:3f:57:f8:03:51:aa:2a:b9:5b:76:03:a9:5e:
         bb:45:8f:95:7a:3a:8f:37:68:49:f0:33:e9:b8:75:1d:0d:22:
         03:f3:bd:b3:e5:06:ca:d7:8e:bd:b5:ed:08:d3:8f:ff:2e:d3:
         92:6b:ae:10:b4:f3:f1:00:33:d5:53:d3:52:9c:41:34:02:88:
         81:b2:e1:a7:1f:4a:eb:d8:ab:e5:0b:62:47:91:1e:e7:60:9c:
         f7:73:b3:35:65:55:1d:42:0c:3f:76:31:d4:7f:75:e4:25:a0:
         d5:fa:3c:7d:c9:64:10:69:d9:90:ab:d4:b8:c3:44:21:ac:e4:
         31:a0:4a:fd:98:30:70:0d:f7:ae:33:e9:eb:e3:a3:d4:1b:43:
         f1:80:6d:d1:26:25:99:7a:52:9f:8d:19:59:b4:d2:63:f9:20:
         62:62:84:7b:fe:91:77:85:a5:7d:52:6e:05:f8:23:9b:39:7d:
         32:7d:4e:3a:98:0d:7f:17:32:9e:c5:a8:f8:aa:4e:c3:1c:4a:
         97:14:fe:9a:23:36:0d:30:42:57:f9:47:aa:0d:d8:56:1c:5c:
         dc:67:1f:20:84:97:66:4b:4d:0a:a3:fb:7e:4d:09:a2:4d:fb:
         c2:ab:27:55:f6:26:7e:74:04:c1:00:dc:31:81:e4:56:8e:f9:
         6b:67:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:37 2024 by rpki-client on console-ams.rpki-client.org