Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier:          Yh+oz34gTYAvN33n+7XqDQEedIHftrl6M3/oDF8ugMY=
Subject key identifier:   89:35:92:BC:49:32:EC:89:0A:D4:B4:A5:4B:84:BA:6B:7D:6F:FF:F2
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer:       /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial:       01936B226B6E5B8DD79A7D8A4DABC2D19D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 01:00:37 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:37 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:37 +0000
Files and hashes:         1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: 3whRObqCFeJ5gHJg5syA49k8m9Tf1ngVj6OSLay6pEg=)
                          2: k2uklugIMPOmXzyFVLiMH9Cn7E8.roa (hash: EAmmDWVoCeGPDZab3cFjaMI91xTKoUal5Qsmh/X/Tek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:6b:6e:5b:8d:d7:9a:7d:8a:4d:ab:c2:d1:9d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Validity
            Not Before: Nov 27 01:00:37 2024 GMT
            Not After : Nov 28 01:00:37 2024 GMT
        Subject: CN=893592bc4932ec890ad4b4a54b84ba6b7d6ffff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:8b:4a:b5:42:e1:51:bd:ba:27:af:19:3a:
                    17:f0:57:ab:10:77:78:c5:70:d7:1e:e5:15:29:1b:
                    53:54:2b:0f:c3:d6:b0:d3:38:31:dc:8c:0c:63:0f:
                    f8:88:a1:4a:7f:26:45:49:f0:99:83:d1:5c:26:a6:
                    21:28:19:61:06:8a:0e:03:1c:32:a8:f8:a0:e2:17:
                    38:99:b9:ab:da:68:93:f9:b0:92:07:fd:aa:04:d9:
                    53:52:c5:4e:bc:56:99:1d:29:22:55:a8:a5:93:a3:
                    5b:08:00:4c:d6:aa:43:9a:ea:f0:a1:c5:83:6e:8b:
                    b3:73:8b:33:d6:06:7e:d4:57:fa:9a:a6:ae:8f:97:
                    fd:6f:10:44:93:b7:9f:aa:63:89:72:98:e6:69:22:
                    9e:85:2b:ae:df:98:4e:12:ac:35:fd:b4:f1:9e:38:
                    93:12:77:f6:4f:44:94:54:81:e8:4b:b6:3e:8f:94:
                    6b:3d:e9:2a:05:6a:cc:24:e3:09:c7:a8:86:f6:58:
                    d2:0d:80:c8:b6:dd:2a:87:0e:98:a3:d6:6f:b1:e0:
                    aa:0a:b3:8f:ae:8c:85:7b:51:35:9b:55:5a:75:6b:
                    ad:61:6c:38:19:cb:16:34:cf:6d:91:54:6c:dd:ac:
                    0b:ce:5d:73:36:f3:37:30:34:cc:d3:fa:99:bc:5a:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:92:BC:49:32:EC:89:0A:D4:B4:A5:4B:84:BA:6B:7D:6F:FF:F2
            X509v3 Authority Key Identifier:
                keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:4d:f1:64:87:a2:a5:22:67:ff:0e:3b:3c:d5:cd:e6:b6:
         b4:90:46:2d:04:32:8d:21:de:75:30:2f:ce:f9:f1:88:cd:4a:
         c7:25:df:05:7c:12:9d:19:c3:52:4e:1c:ad:34:bf:a8:80:d5:
         5f:59:6b:12:52:3d:4b:7a:43:59:73:57:d3:18:25:ce:ca:60:
         10:e9:be:17:60:b1:d2:41:d6:a9:22:50:78:84:1e:b8:cf:ef:
         ec:70:1a:91:69:64:a6:67:e0:4e:ec:a1:f2:0e:9b:07:8e:d9:
         85:4e:1c:80:22:cb:a3:c0:8d:99:c8:dc:aa:81:e5:5b:4a:d6:
         75:92:b1:f2:c3:40:93:0e:45:40:41:87:63:b5:64:34:d9:cf:
         f6:bc:6e:af:a2:61:a8:1b:e2:40:7a:22:12:e2:d7:cd:ce:3d:
         59:73:b2:8e:88:1b:3f:09:09:31:01:12:28:01:f1:f9:1e:29:
         07:ad:0f:05:37:00:c9:2d:d5:8b:9f:ba:28:c1:57:fd:09:7c:
         51:ef:47:fc:df:9f:7b:dd:d1:e2:23:cd:e7:d5:1c:7d:4a:b3:
         10:6c:f3:84:86:04:87:9a:0e:61:32:25:04:77:2b:8a:a0:ba:
         15:35:62:e9:af:ab:ea:58:0c:29:f0:a8:ff:a0:d3:42:ed:41:
         55:f7:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:31:49 2024 by rpki-client on console-ams.rpki-client.org