Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File:                     Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier:          hBeqzQxZa1yQqxaDtz6jhlZNZW90j3CaXafPcRuUaJ8=
Subject key identifier:   1C:B1:40:6F:83:70:3A:41:FE:16:01:79:02:15:6C:53:7A:29:AD:BB
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer:       /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial:       019369D8C230D3B6841471429A7686770E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:33 +0000
Files and hashes:         1: E7NKZU_X34KGNy2YrQGLDOWkFyU.roa (hash: XWzwIVf4XVlPv8zyMmOeJgikwRt09MCRsyj2mH3JOpg=)
                          2: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: yaK3/Uv9WUkZt1W49H/2zQJ1Oz1oQ8psjgmrtwrgAhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:c2:30:d3:b6:84:14:71:42:9a:76:86:77:0e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
        Validity
            Not Before: Nov 26 19:00:33 2024 GMT
            Not After : Nov 27 19:00:33 2024 GMT
        Subject: CN=1cb1406f83703a41fe16017902156c537a29adbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:55:f1:11:8c:11:39:16:29:81:3a:1b:35:
                    70:27:29:47:c9:e8:f5:70:b7:0f:c1:85:97:a9:f1:
                    8c:51:c8:cd:63:a8:06:50:80:56:7b:d3:a9:12:2f:
                    10:08:4c:9f:e1:9d:e3:c9:5a:d7:1f:1c:cc:ac:c0:
                    f3:13:7c:99:d9:bc:18:9f:1a:44:58:38:c1:f5:70:
                    9c:4e:68:40:20:a2:4c:07:1a:32:25:4e:7c:1a:b6:
                    77:29:3a:d6:ad:c0:12:9a:98:a1:f1:c0:05:2e:63:
                    61:1a:4b:e1:4b:1a:d1:38:cb:87:b2:f1:c6:5b:11:
                    98:40:7d:d3:c6:4d:99:b0:bd:fc:e6:6d:25:16:da:
                    e6:b9:e3:9a:9d:37:84:4a:3f:4d:f3:c8:f2:2c:09:
                    19:e1:7d:54:89:45:5e:6f:ce:49:3f:80:f9:6b:c0:
                    d5:fa:e1:8d:66:b2:78:4a:17:e5:29:26:0e:9a:6b:
                    ff:6d:6e:34:eb:f2:7d:4a:ef:53:d6:cc:b3:b0:90:
                    2b:23:3b:7b:19:7a:35:a6:0b:70:52:09:fb:e5:ae:
                    e8:0a:13:e7:64:d4:00:98:b1:c0:af:d7:1b:7f:64:
                    33:92:28:4a:7e:9e:8a:5b:14:77:3c:d3:2b:d0:cf:
                    82:24:04:c4:ed:30:da:82:20:09:e0:f6:b7:83:d3:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:40:6F:83:70:3A:41:FE:16:01:79:02:15:6C:53:7A:29:AD:BB
            X509v3 Authority Key Identifier:
                keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:e2:7a:8f:79:15:a0:14:2d:a7:9a:84:f2:8a:c9:82:1f:
         87:7c:f6:c0:b7:82:ea:d8:99:3d:d9:c5:0a:55:db:f8:2b:be:
         0a:0f:4a:3e:a5:cb:4d:d0:38:bd:a0:0d:3a:30:5a:5e:81:a3:
         cb:6d:e1:b5:65:94:7e:8b:a4:4e:39:46:3f:1b:a6:a1:7a:18:
         b2:26:8d:ee:6a:3b:bb:c5:76:fd:3d:68:63:11:5f:06:8f:b8:
         f2:15:08:b9:9e:a6:ef:a1:9a:2c:59:d6:7a:c0:1b:47:da:51:
         e2:3e:cc:f9:cb:ad:e7:ce:60:a0:85:02:6d:ce:1f:ce:9d:3c:
         36:8d:23:cf:f4:9d:d3:44:71:74:d7:10:46:0a:b6:38:f9:33:
         0e:37:81:08:d8:f8:cb:2f:9e:f8:37:c3:b7:d8:97:08:fe:b0:
         8d:29:70:be:58:6f:91:36:73:ee:5e:9c:d9:ea:aa:b5:93:96:
         5a:d2:c8:74:19:f6:7b:15:4e:30:8b:fb:fc:eb:0c:5e:eb:e5:
         2a:87:09:32:90:b3:10:68:f4:a2:5c:9f:a2:bf:a6:18:17:cd:
         4a:92:09:5a:95:2a:fd:f6:58:14:8e:8f:db:7b:35:c0:b9:fb:
         5b:72:38:13:5b:c4:98:7f:77:bf:97:e0:b6:68:f5:7f:07:06:
         48:c8:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:08 2024 by rpki-client on console-fra.rpki-client.org