Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft
File:                     6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft (raw, json)
Hash identifier:          2/7pJELLWHFqN6eKx7j8ttBM9SylLBkYUY8AMttYtQs=
Subject key identifier:   F2:EF:76:BE:97:E2:52:2B:4C:3A:E2:A5:42:BE:01:8A:3F:2B:21:01
Authority key identifier: E9:91:25:E9:EA:82:2E:03:46:67:C8:21:A8:5C:A5:AB:14:EC:0A:D8
Certificate issuer:       /CN=e99125e9ea822e034667c821a85ca5ab14ec0ad8
Certificate serial:       019369342D90F9491D36214A68F2BD5D9DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 16:00:47 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:47 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:47 +0000
Files and hashes:         1: 6ZEl6eqCLgNGZ8ghqFylqxTsCtg.crl (hash: YDpCHWrCgit44eYG1+nD/Ap1GAVPHNcn+x9SzAkRY6U=)
                          2: LqaxSLPsuVzJ-AOUZvX9VjuHLAc.roa (hash: 9AeXW10v8C91oj9hyO04nlEZIWQsNLUZJreVbpUQJMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:2d:90:f9:49:1d:36:21:4a:68:f2:bd:5d:9d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99125e9ea822e034667c821a85ca5ab14ec0ad8
        Validity
            Not Before: Nov 26 16:00:47 2024 GMT
            Not After : Nov 27 16:00:47 2024 GMT
        Subject: CN=f2ef76be97e2522b4c3ae2a542be018a3f2b2101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:53:52:ea:1b:51:cb:49:54:bf:67:29:31:
                    0d:47:e7:ce:af:92:04:6e:4b:7a:b1:0a:e2:39:22:
                    d8:38:7b:a7:1b:30:52:2a:7b:eb:8c:82:7a:9a:8e:
                    49:56:58:f5:d5:b8:52:69:e3:3b:60:5d:db:73:9c:
                    2d:c7:42:26:49:4c:1f:f1:99:7f:ce:13:2c:a7:c4:
                    5b:ec:22:bc:d1:16:57:c4:32:83:63:ff:84:33:a0:
                    36:c4:60:e0:2a:a1:cc:fa:50:23:4a:0b:69:0b:5c:
                    d8:fe:a8:10:b0:71:b8:d0:9a:c6:f4:ef:b5:eb:aa:
                    b7:67:a3:22:76:80:6a:c2:74:96:d0:b5:15:de:ea:
                    31:da:c8:41:47:d0:27:aa:fd:94:54:68:3c:b8:ce:
                    70:0d:0a:f4:0e:90:37:3f:c2:db:b2:0b:43:cd:2e:
                    91:4b:ec:12:fe:7d:46:25:fb:fc:f1:e0:e7:c1:b8:
                    2a:47:73:48:de:76:9d:c2:68:dc:41:0a:c0:83:78:
                    bb:22:44:94:a8:6e:1d:a0:16:a1:79:db:8c:2b:46:
                    59:f3:fd:a7:2d:06:2e:45:48:0e:cf:b1:4e:65:46:
                    a2:f4:b8:76:38:7d:3b:3a:1a:42:4f:c8:e5:03:6e:
                    b2:40:71:97:ee:de:cc:0a:a0:31:07:db:07:20:24:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EF:76:BE:97:E2:52:2B:4C:3A:E2:A5:42:BE:01:8A:3F:2B:21:01
            X509v3 Authority Key Identifier:
                keyid:E9:91:25:E9:EA:82:2E:03:46:67:C8:21:A8:5C:A5:AB:14:EC:0A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:57:98:8f:29:64:8b:5b:6f:a2:4a:91:2a:14:99:d6:d3:
         37:94:2b:38:c5:7f:a9:65:34:0f:23:cd:3e:24:e2:e7:19:a6:
         fd:79:c1:e0:08:93:78:43:a7:16:76:13:e2:98:3b:52:f8:34:
         8c:bf:c5:7c:1b:08:bc:22:fb:bc:6e:3d:60:4d:18:07:8b:85:
         c2:62:e8:40:c9:b9:89:1e:b1:f8:aa:30:bd:19:b9:f3:01:9b:
         2c:cc:b6:fc:cf:8f:0a:a3:ff:83:4f:3a:eb:b9:c0:b0:15:d5:
         f5:31:6b:ba:3e:2c:fa:c0:2e:e9:c6:53:88:60:2c:d3:99:d2:
         d9:2d:47:0a:31:78:2e:d6:10:18:a4:1e:e8:86:b8:e4:e9:e5:
         52:b0:d1:61:a4:2e:09:96:b4:cf:4d:ac:5e:e6:15:9b:9d:b9:
         a8:4d:9c:d3:23:a2:af:be:36:5f:bc:16:9e:52:ba:e4:b0:6c:
         a9:0c:92:0b:e0:2f:b0:97:48:fb:53:ba:a8:14:34:cd:6d:62:
         06:72:ee:26:1d:9a:0f:7d:f7:7e:f9:c5:42:48:72:f6:05:f3:
         ed:5c:39:c9:59:39:c3:0c:db:62:d5:b0:2d:54:16:a1:9e:1b:
         11:4b:cf:f9:41:9a:8e:e8:17:71:35:5f:58:fc:ce:14:e3:0d:
         c3:59:0f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:48 2024 by rpki-client on console-fra.rpki-client.org