Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File:                     AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier:          +ksdU7C3sm0LE6yNRio96VkSH+FCm4WMYhrwy1227uc=
Subject key identifier:   E7:67:8D:B1:72:86:98:B5:0F:4D:AE:AF:0D:AE:67:4C:F6:98:25:41
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer:       /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial:       01936669B94CB386EDB89F834D9A3D765707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number:          139B
Signing time:             Tue 26 Nov 2024 03:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:24 +0000
Files and hashes:         1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: AHZq8GXDF8vvju/45ttIh7nEIALQoRNwiuQgDIitJhs=)
                          2: E9eQPC34i4lzji-Ssl0IT3uinXY.roa (hash: tejjr/XN3ecPN/WjBnVxZOmLGts6v51BCp1ng8sVxq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:b9:4c:b3:86:ed:b8:9f:83:4d:9a:3d:76:57:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
        Validity
            Not Before: Nov 26 03:00:24 2024 GMT
            Not After : Nov 27 03:00:24 2024 GMT
        Subject: CN=e7678db1728698b50f4daeaf0dae674cf6982541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:89:c3:fa:d9:6e:cd:18:ae:bc:75:93:84:
                    4a:a2:67:b9:d2:16:1a:65:73:7f:72:3c:f1:71:89:
                    fb:e6:69:bc:c9:6f:ac:64:8c:a5:62:6c:c2:ba:49:
                    89:f9:8a:00:d7:0b:b0:ce:ae:79:d2:1b:4f:8d:ee:
                    07:b1:6f:52:d0:9d:08:8c:f7:8d:97:0d:14:be:38:
                    e5:f9:57:0c:2e:74:29:04:dd:75:f7:ef:fd:07:e6:
                    c3:9e:67:62:7f:e5:c9:ce:f8:fe:b7:10:35:06:f1:
                    05:06:09:4c:9c:b3:37:ec:da:87:26:c3:58:64:19:
                    48:49:2b:47:8c:55:1c:6e:cc:34:21:d3:79:54:eb:
                    20:1d:75:0a:0a:60:0f:1e:e9:ac:4e:f5:2b:29:5c:
                    67:48:53:10:7e:f5:68:c6:b1:60:5e:44:1c:5b:78:
                    77:b1:e5:fb:21:3c:04:01:3e:2b:62:07:f4:63:03:
                    6d:80:3e:16:be:a0:a3:41:fc:01:11:f2:6e:7b:78:
                    33:66:81:db:4b:c9:a7:27:a3:e9:99:ef:9b:76:95:
                    66:b6:ef:e1:65:a8:78:22:b3:1f:3e:ee:56:c6:be:
                    34:e9:33:e6:7e:05:99:d0:86:fc:79:07:75:13:3d:
                    b5:48:bb:ed:10:57:23:c6:91:f2:17:a6:a0:3f:a3:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:67:8D:B1:72:86:98:B5:0F:4D:AE:AF:0D:AE:67:4C:F6:98:25:41
            X509v3 Authority Key Identifier:
                keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:e1:5c:93:3a:1e:ef:89:18:d7:90:35:ce:4c:f2:53:32:
         08:8d:f5:c5:16:5a:42:79:6a:77:1b:fa:78:09:d0:59:c6:c9:
         72:74:d4:e1:a3:0b:de:e1:aa:42:37:7c:ba:de:51:2a:eb:2a:
         10:17:6b:2f:49:25:12:ee:30:55:df:4c:94:ec:c4:72:b8:bd:
         11:72:d8:d0:2c:8e:cb:09:95:4a:28:41:29:ab:23:0b:f2:98:
         11:9a:58:92:ec:51:66:7b:d4:db:63:5d:b1:58:84:36:3b:45:
         89:bb:6c:e9:d1:b2:95:74:e6:ef:de:80:67:d7:57:5d:75:11:
         6e:da:e8:79:4b:81:6c:e5:a6:ab:9a:bf:61:68:6c:ca:58:29:
         1e:14:62:c1:c5:57:8d:f5:93:33:96:11:45:01:2e:46:13:b0:
         bf:4d:52:c3:68:d4:61:41:98:34:28:fa:46:ff:bf:2e:f7:b2:
         dd:7e:be:8f:ed:e6:d8:e1:cb:67:1e:79:c8:2d:6c:96:72:a7:
         65:fc:bc:f6:40:67:27:31:a0:19:93:c3:35:1e:c2:7f:16:75:
         90:51:33:67:0f:70:b4:a1:36:a9:d8:28:f9:39:c0:80:26:52:
         54:79:2e:26:be:cf:85:c0:0b:52:9d:f4:15:28:fc:e2:39:8b:
         30:45:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:16:00 2024 by rpki-client on console-fra.rpki-client.org