Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File:                     TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier:          4dfs+Ib6pXocUiusrjnAYGMqlrjAjRsh4b5l+pZbx/M=
Subject key identifier:   92:43:40:26:39:EC:14:8B:4B:FC:5B:17:CA:5E:FE:10:2C:F8:87:CA
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer:       /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial:       01936933C09CFE348C67F13177998F4B9AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 16:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:19 +0000
Files and hashes:         1: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: c5oZsy9ODgfMqdr0IA3casp1BzWdIeCbh7TqwKXzbf4=)
                          2: VWqHuTlsdnBz7NTQWr0kMDOv7yI.roa (hash: BwTkYTFjyFFIxEkAFgL4A+xFawePlPXStq3OIcaqfbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:c0:9c:fe:34:8c:67:f1:31:77:99:8f:4b:9a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
        Validity
            Not Before: Nov 26 16:00:19 2024 GMT
            Not After : Nov 27 16:00:19 2024 GMT
        Subject: CN=9243402639ec148b4bfc5b17ca5efe102cf887ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:94:44:91:69:6c:62:60:51:98:5f:16:da:
                    14:79:ce:f8:9f:8e:1d:67:15:de:a4:21:b4:3c:48:
                    d1:e5:1b:09:48:94:47:f9:d1:c6:31:c5:9b:7d:e1:
                    34:a7:30:83:ba:e4:2f:47:27:43:86:04:f8:92:29:
                    02:9d:87:80:d2:cb:ae:9b:2f:0d:7d:cc:17:0a:b7:
                    cc:05:8c:d6:38:e8:41:3e:09:b2:55:15:5d:55:51:
                    85:af:b2:d2:6c:6c:78:08:c4:55:43:c4:d1:0a:c9:
                    81:4b:40:8e:65:2c:33:3c:94:0d:a8:7e:64:bb:17:
                    db:31:4d:14:20:89:c4:8e:89:fa:04:ac:51:b1:20:
                    bf:b0:25:af:9e:47:3f:32:25:f4:ab:1a:df:11:01:
                    5c:cb:71:db:64:6c:70:5e:f3:3e:af:ed:4a:a3:76:
                    ed:76:f1:e6:01:f9:3f:fd:e1:40:0f:0a:31:8f:c2:
                    b5:20:38:51:90:b3:83:02:65:e0:73:ea:56:de:e5:
                    ab:f5:5b:21:e7:eb:af:9e:22:5f:4b:6e:e6:83:96:
                    6d:b3:69:97:18:ae:7b:97:e6:56:66:80:b2:d1:66:
                    b9:b3:53:cb:5a:08:bf:1b:63:c3:d5:9d:bf:41:61:
                    a0:7e:ed:19:9e:42:1d:27:34:33:21:c0:5a:cb:7c:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:43:40:26:39:EC:14:8B:4B:FC:5B:17:CA:5E:FE:10:2C:F8:87:CA
            X509v3 Authority Key Identifier:
                keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:bc:0f:62:8c:e5:0f:ba:ed:4c:fd:58:0c:c4:0f:d3:55:
         af:da:15:61:ab:39:ab:49:f6:22:3c:63:63:67:0a:99:78:42:
         03:0c:2e:1c:b6:27:f0:71:e9:b5:d2:2a:c8:cb:aa:00:c6:f6:
         ce:19:77:b2:9b:38:ee:4e:d9:a7:c9:a7:40:f0:ea:9f:70:5c:
         ef:ed:d0:2b:a1:77:18:af:1b:e5:6a:79:c7:e9:1b:60:81:85:
         63:19:33:2c:ed:f6:c9:55:2e:fe:b8:75:d0:f7:4c:e8:35:31:
         d5:1f:e4:66:67:29:be:35:d1:9e:04:9f:d7:59:88:ee:9d:8a:
         e5:9e:06:6f:73:a7:2d:67:33:7c:32:2a:da:7d:1c:29:59:0e:
         a6:eb:1f:bb:30:b0:71:f7:14:f6:7d:db:3c:2b:4f:6c:3c:a2:
         6a:dc:b4:3a:07:14:a2:77:2e:a2:28:2a:e9:8d:bd:7a:eb:84:
         b1:59:0e:f3:f8:8d:64:12:46:ad:1c:fa:27:cb:47:d6:23:d8:
         f2:09:36:51:27:03:52:3f:61:de:10:6a:f3:34:f1:fb:eb:5d:
         5e:76:43:c7:2c:d9:54:45:e9:6f:f1:31:5d:e2:c5:f8:91:ff:
         13:b8:d5:c8:11:0e:8a:dc:8a:5b:06:17:84:0d:4c:11:e6:06:
         dc:76:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:57 2024 by rpki-client on console-fra.rpki-client.org