Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File:                     AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier:          y9N/Tgv/Q5sNgPl+hzxno8XHVxG50cQ1p+3fQDCXBcI=
Subject key identifier:   2E:3F:77:D5:D9:3B:9A:B1:31:BD:9B:D7:89:C8:40:33:37:8D:0C:30
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer:       /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial:       0193696AAA77D102CC7E0DFBB404263C2530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 17:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:18 +0000
Files and hashes:         1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: dhqv9dSETSMy1v4+SbWGUzeJrctzyQB9LMJjD+WjCHo=)
                          2: DM2KA5zRfnaPEr4Qr_TrW7YUr4M.roa (hash: xb00kHYFD5++nkNBOgV3mJFsQZZCX6UZj986u7+h618=)
                          3: fTQSeWpy_cUD4p9b03SBGE2LHU0.roa (hash: d0dNP0mjO3Ry/ESYOsrbJDL389MuzHyvb7EYb030W/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:aa:77:d1:02:cc:7e:0d:fb:b4:04:26:3c:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
        Validity
            Not Before: Nov 26 17:00:18 2024 GMT
            Not After : Nov 27 17:00:18 2024 GMT
        Subject: CN=2e3f77d5d93b9ab131bd9bd789c84033378d0c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:56:83:46:b2:97:28:bf:6f:7c:cc:5b:72:
                    8f:89:ad:c8:ee:0d:04:3a:bd:b6:54:04:bd:46:16:
                    96:3c:23:ac:d6:b4:ef:84:8b:33:e4:95:91:72:1d:
                    ac:54:d4:58:1d:55:d1:4a:0f:1f:8a:9d:6e:12:9c:
                    f7:4a:60:58:40:d9:82:6f:5e:f1:f4:60:39:e4:34:
                    48:77:02:4a:c7:04:2c:77:a9:ec:3f:d9:ad:b7:08:
                    e3:a0:23:36:ee:4d:0c:b2:1f:0a:6c:2b:e5:d0:fd:
                    54:33:de:c9:e9:1b:a0:22:d7:73:10:a5:fc:85:bc:
                    09:32:ba:cb:c9:14:28:a8:aa:35:82:45:e4:c9:c4:
                    dc:a0:c5:c0:b5:68:1c:81:28:21:fb:e2:7b:3b:6e:
                    ee:74:d4:b6:38:cd:61:d2:6b:1e:6f:7a:7e:cf:ad:
                    4d:cf:90:22:de:7b:b0:15:d9:55:3e:bd:90:81:f1:
                    15:98:b9:ae:b2:d2:d5:6d:09:ac:62:2f:79:32:26:
                    06:46:f4:f5:36:7b:15:c4:72:6c:8d:e6:b9:f9:5d:
                    d1:3d:f2:4b:6c:fe:67:80:10:81:a1:22:bc:39:ca:
                    31:5a:70:34:24:60:e7:27:1d:33:75:0e:21:b5:e9:
                    e6:72:22:c5:f2:94:b8:32:db:02:ef:62:2b:c4:dc:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3F:77:D5:D9:3B:9A:B1:31:BD:9B:D7:89:C8:40:33:37:8D:0C:30
            X509v3 Authority Key Identifier:
                keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:cb:75:f2:91:70:6a:f9:58:07:75:33:cf:54:63:f9:50:
         9c:75:fe:e2:e6:75:0a:3c:75:d7:44:48:04:f9:f6:7e:9b:01:
         b8:36:a2:74:fe:ef:f9:52:fa:59:b0:86:4c:1d:01:d4:02:33:
         07:0b:78:f2:6d:39:f2:30:d3:cf:2c:1a:0a:ba:3b:13:d1:51:
         d3:4a:79:0b:d8:26:30:29:b7:2b:0e:82:73:de:28:78:7c:a6:
         59:ac:78:2e:7f:30:1c:28:c4:6a:8e:67:d1:19:c6:c7:36:e1:
         e0:47:00:a9:9a:d2:ed:b7:29:78:ec:53:05:ae:58:8d:7b:2a:
         59:0a:8e:5e:c7:5c:09:a3:7d:4e:8b:66:41:33:07:89:2a:d3:
         a4:02:f3:69:f0:ff:90:0e:3d:93:fb:bb:1e:ad:4c:28:2b:31:
         05:ab:ba:93:e2:6e:82:91:b4:fd:c2:52:bb:c1:04:0d:12:03:
         15:69:0b:ff:c9:ce:52:89:dc:f4:39:c4:ee:c6:e9:5d:c8:bf:
         f6:a8:33:5e:70:01:37:aa:13:16:e2:f9:5e:96:40:51:16:30:
         95:44:84:91:eb:32:61:ca:a5:e7:9c:7f:f4:92:57:54:ad:23:
         ce:fb:57:a5:c5:64:73:8c:88:b4:b5:c3:e3:b0:18:f1:1b:0c:
         e7:a0:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:55 2024 by rpki-client on console-fra.rpki-client.org