Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          Zmts0rUISQfhcZhVtIsU3iPHDMBxhrW2bnmGS6IRvTk=
Subject key identifier:   A4:B8:02:0C:71:AD:3F:93:51:40:4B:68:66:20:B8:4A:1F:B1:6C:D8
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       019369D8AE4E2D312FD5A1786D54339EC6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:28 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: oLfmN9gTIPwqt/LxuoOwZRIQx7NL6IbfCkfoXaFKoi8=)
                          2: y-M-li5oZbPcd_v9xzkPOEw3AHE.roa (hash: ARgiNJn6Mtqmxp8PcG8Di0va0O17Y+4GUcg5BnMf/Ok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:ae:4e:2d:31:2f:d5:a1:78:6d:54:33:9e:c6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: Nov 26 19:00:28 2024 GMT
            Not After : Nov 27 19:00:28 2024 GMT
        Subject: CN=a4b8020c71ad3f9351404b686620b84a1fb16cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:85:fb:a9:aa:32:51:8b:4a:54:ee:57:88:
                    1c:95:dd:eb:fa:04:6f:39:ad:03:e6:0e:09:f5:93:
                    ee:22:ab:8e:08:32:fc:14:01:61:1b:ee:77:ed:c9:
                    87:39:74:9c:67:0f:5f:7c:33:6a:2d:59:0a:e6:ae:
                    73:b4:3e:1c:31:43:b8:4f:57:d2:50:10:d2:ac:02:
                    f6:69:1c:5e:94:ce:c1:f0:41:30:74:f3:18:aa:8a:
                    3c:8f:27:84:f9:91:c3:b1:6b:9d:37:9e:72:87:cb:
                    4c:ed:09:16:fd:58:e1:c8:bf:7c:7f:c3:ef:99:d6:
                    86:13:19:1e:2a:33:a8:17:d1:b9:12:62:1c:e4:70:
                    eb:a1:6f:0a:25:eb:da:8e:40:e3:d8:ef:17:71:f1:
                    3a:27:82:54:5f:fa:ae:7b:ca:1a:d0:26:0d:5d:60:
                    09:c8:29:ca:f3:5b:a1:1a:5c:fe:41:b5:d1:9b:16:
                    00:1d:e7:c1:db:e0:a2:01:e3:fb:1e:88:3e:c2:65:
                    ab:de:93:96:c6:54:7e:c6:88:06:5a:5f:41:95:e2:
                    3b:0e:37:15:aa:b1:5b:8b:2b:52:a7:6f:8d:a8:6a:
                    44:2c:d6:25:1e:f5:16:1a:93:6c:b4:44:c0:94:2f:
                    1d:e7:02:7c:b7:b7:cc:66:0a:13:14:5e:8e:32:c3:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B8:02:0C:71:AD:3F:93:51:40:4B:68:66:20:B8:4A:1F:B1:6C:D8
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:2b:b2:6f:43:da:cb:27:50:4f:30:82:a8:06:92:67:18:
         c4:22:1d:08:ba:e3:9c:d4:17:cb:84:6e:d0:a6:b1:21:19:05:
         f4:ee:16:ee:e8:8a:88:e0:27:6e:ad:a6:f4:bb:3d:31:85:f6:
         e5:8f:e8:fd:a9:ac:0c:ee:80:09:9c:cb:16:c4:98:ff:3a:1f:
         d2:2b:81:54:c7:41:90:23:3b:26:56:51:87:1c:f8:9d:f5:f7:
         b8:e3:3c:8a:8f:45:a6:2a:bd:24:74:7c:62:bc:34:4b:4f:8c:
         13:35:43:96:09:a1:f0:14:80:7a:cc:c1:66:27:a8:76:28:73:
         ef:b3:bf:f4:90:14:36:cc:de:e8:4e:f4:44:fa:52:17:93:17:
         90:51:63:93:43:4a:a0:b4:3d:3c:da:df:d4:10:62:72:1e:3e:
         86:42:fd:ec:72:c8:88:6c:ae:b1:b3:83:3f:fe:35:4d:40:32:
         b0:db:97:31:d0:7a:56:86:61:5f:e0:8e:cb:cc:e9:4e:08:d5:
         fe:6b:84:13:f3:8a:64:39:0c:94:09:80:47:60:01:ee:b4:05:
         7b:e0:da:0b:0d:4a:88:a7:02:aa:86:25:11:e7:aa:78:78:3c:
         e1:9a:bf:53:03:75:a6:cd:f3:0e:4a:7b:44:b0:16:0d:33:59:
         93:44:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:11:23 2024 by rpki-client on console-ams.rpki-client.org