Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File:                     md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier:          mb8ZuKBJPjgNVC3PnjxFHgqgisjl6QNDNZ+nIcTqJ8Y=
Subject key identifier:   EF:BF:1B:B5:E8:A8:7E:5A:5B:A0:BF:19:4C:87:EA:5D:A6:14:F8:D0
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer:       /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial:       01936AEB5483D519A385E36715D544236DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number:          137D
Signing time:             Wed 27 Nov 2024 00:00:27 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:27 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:27 +0000
Files and hashes:         1: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: t2uy7aSkGYgRY1V+UrbCPamrhsov8U1yv6XvLKa/Pf4=)
                          2: yZbsj1wmSOu-twGphUFA1M59koU.roa (hash: IqMJgJAJDGiDeqOWLD6/N2yy3HivuiKR0m+jSo8jsBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:54:83:d5:19:a3:85:e3:67:15:d5:44:23:6d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
        Validity
            Not Before: Nov 27 00:00:27 2024 GMT
            Not After : Nov 28 00:00:27 2024 GMT
        Subject: CN=efbf1bb5e8a87e5a5ba0bf194c87ea5da614f8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:84:8c:50:06:c6:b9:66:7a:6f:c4:d7:a2:
                    f0:fa:f8:03:3b:e3:36:1c:12:f8:5f:9f:9c:87:34:
                    d0:5f:e2:2b:8d:c3:4e:85:bc:97:64:21:0f:f6:5d:
                    85:4f:1c:5c:03:08:b7:18:9e:72:3f:0b:13:5b:cb:
                    22:69:b9:49:a7:f1:53:c9:30:a0:78:0a:2a:c1:2e:
                    f1:1d:ba:f3:c7:27:a6:52:e5:d9:e0:5f:04:b6:83:
                    f5:d2:25:f7:21:bb:b4:5c:d9:2b:06:25:76:f0:6a:
                    87:8f:83:c2:3b:a7:e1:b2:69:d8:52:1d:6f:d2:74:
                    34:5e:cd:92:44:0d:d5:9e:78:92:01:72:18:5a:8b:
                    e5:85:df:47:cb:2f:7d:9a:7f:71:b8:97:50:b1:55:
                    2e:96:a7:3f:3b:01:f4:c5:6c:d4:48:8d:f9:88:b1:
                    f4:65:af:2b:4a:2c:b4:40:f3:05:a9:31:37:d3:ed:
                    95:39:36:0a:e1:b4:f0:a1:92:3a:81:46:9a:82:13:
                    84:96:d2:c2:89:10:a7:f1:6c:b1:7e:5d:ed:0a:b4:
                    ef:c2:e7:b7:c8:93:8f:bc:7c:0e:8d:4f:e4:fb:ad:
                    17:16:ae:4d:f8:79:ea:69:32:6e:53:6a:26:40:2d:
                    98:5c:ce:aa:a5:1a:ed:4c:4f:99:5a:5d:4b:4d:52:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BF:1B:B5:E8:A8:7E:5A:5B:A0:BF:19:4C:87:EA:5D:A6:14:F8:D0
            X509v3 Authority Key Identifier:
                keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:59:bc:ea:5d:78:95:d1:8d:fd:a3:f7:79:a3:09:68:aa:4f:
         40:25:0e:91:8b:65:eb:55:38:f8:c0:cf:24:21:6d:3e:27:d7:
         c5:2c:af:d2:d5:09:2e:19:14:f0:bc:ca:c6:a9:ce:fc:64:1d:
         5d:f0:a0:d5:a3:ea:08:6b:a7:8e:2a:6c:cd:0f:aa:90:ca:16:
         a1:5c:0e:94:5e:e6:d0:f6:a4:6a:4b:aa:df:e1:32:f1:5f:49:
         09:92:92:38:0a:e4:c7:7d:4d:9e:dc:0b:a4:fb:81:37:4c:06:
         43:3c:d4:ae:4c:36:2f:ac:ce:60:18:a5:96:5e:d0:2e:6e:6b:
         5c:4c:c6:a1:81:06:d8:0b:0e:85:14:ac:b1:96:ba:fc:a6:99:
         b9:16:05:5a:e6:79:98:6d:dd:e7:c0:34:05:3f:9e:b0:ea:8b:
         4c:37:da:0c:c5:79:56:6b:82:60:c1:e0:39:3a:59:1a:38:ba:
         51:c8:0c:71:28:01:00:27:09:af:2c:9e:3e:d7:aa:60:fa:94:
         75:14:df:94:0a:ef:03:3e:15:1d:da:30:fa:f3:27:84:6b:60:
         19:18:93:cf:5a:4f:ed:88:ba:52:2f:f6:a6:b4:37:b8:be:65:
         50:a6:67:1c:51:2b:a6:42:a9:bd:51:82:20:8a:fb:c1:50:53:
         e4:b3:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:08 2024 by rpki-client on console-fra.rpki-client.org