Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier:          sS4YpFnE724N8fiC63aRwG5fJf6Enz/2Xx1yWw0oeyM=
Subject key identifier:   0A:92:34:71:E7:3D:2E:00:EA:15:94:74:E0:6B:F3:9F:44:2B:8A:3C
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       019356F74093BD7F660D341B71CFF1C0361F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 03:01:04 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:04 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:04 +0000
Files and hashes:         1: 4t-DJXjmTbG8rzWBzlVgl3ev2mI.roa (hash: VjZvWiFc3ruxZJcb3q6M4N1w8Xk/kQMIaO+XQnSjF1Y=)
                          2: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: GyDXPvtsoSmbb5tZel49B2ure0AcfinjZ6aZRQDr32Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:40:93:bd:7f:66:0d:34:1b:71:cf:f1:c0:36:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: Nov 23 03:01:04 2024 GMT
            Not After : Nov 24 03:01:04 2024 GMT
        Subject: CN=0a923471e73d2e00ea159474e06bf39f442b8a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:d2:fd:b8:80:36:4c:44:ed:79:b4:19:97:
                    21:19:1f:87:49:c3:30:3d:29:22:7b:31:ee:5d:5a:
                    13:62:90:e6:44:d8:98:86:87:13:f4:1a:42:12:12:
                    8a:99:b7:09:09:11:ef:83:bf:00:9f:4b:74:fe:d9:
                    01:9f:98:71:1f:6b:8c:16:59:66:19:66:5d:59:e3:
                    73:92:0a:df:5a:1e:d6:ec:7f:14:d1:95:39:ab:94:
                    ab:e2:f0:d4:34:06:31:db:b3:83:ab:f4:31:cf:e6:
                    76:3a:07:12:78:df:c7:78:a1:e0:d3:61:51:ca:ce:
                    6b:6f:d6:e2:64:a2:4e:e8:2f:b3:79:90:28:ae:4f:
                    b3:7c:42:b4:04:20:da:4e:ad:88:d9:bc:5f:f1:cd:
                    92:ff:4b:c8:63:55:27:bf:39:97:31:c0:dd:db:6a:
                    c7:d6:82:5a:9a:e2:35:71:ff:bf:e7:04:90:e9:28:
                    8f:47:4c:5c:f0:50:7b:58:09:bf:19:ec:d5:4f:64:
                    37:c9:a8:f0:99:2b:e1:e3:63:ca:08:fb:fb:1a:fd:
                    08:04:6a:00:91:9a:b0:4e:1f:57:c5:72:25:f2:c4:
                    2f:80:8b:fd:fb:41:36:50:8e:5c:d3:6b:b7:e4:59:
                    b2:09:12:f7:69:88:7d:a7:d9:ce:38:b2:16:9c:b7:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:92:34:71:E7:3D:2E:00:EA:15:94:74:E0:6B:F3:9F:44:2B:8A:3C
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:db:08:61:7a:2c:2d:a1:92:1d:67:14:df:66:33:d3:88:5c:
         3a:1f:e2:02:6b:c2:38:e6:62:be:a0:c2:6e:3d:20:f5:cd:f0:
         76:e6:de:4a:95:0e:a2:66:66:df:91:1f:bb:4a:99:09:6f:71:
         5f:0d:d5:b3:7a:4e:b0:0e:04:fa:e3:d0:85:92:66:56:aa:0c:
         60:f0:a0:8e:b3:c6:41:1d:b9:39:93:7d:d0:3e:42:b1:d1:f2:
         f6:b2:f6:c9:3f:65:79:c5:1d:37:07:ea:c7:84:c3:f7:7b:aa:
         8e:b0:d7:e8:97:dc:4d:46:de:bc:86:8a:4b:76:39:4f:52:67:
         87:27:26:00:5d:58:d6:54:d1:96:2b:e0:d1:48:97:29:ce:e3:
         40:25:21:fd:b1:d7:47:0e:08:1b:79:c7:6a:72:91:1b:f1:7d:
         f9:7f:ab:e3:ba:0b:52:68:31:93:41:99:a6:a0:ec:8f:52:51:
         cf:b2:ec:1f:09:91:f9:f8:49:e2:f8:45:b7:13:ce:67:a7:ac:
         98:d7:71:3c:41:d1:fe:35:40:eb:8f:39:09:ed:cb:67:da:8e:
         17:88:b5:d6:01:74:fe:20:4a:67:bc:54:52:fb:6f:3f:f9:59:
         fb:b5:d8:99:1e:21:7d:9d:92:7f:02:38:a4:a5:35:a8:6d:fd:
         fc:ac:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:55 2024 by rpki-client on console-fra.rpki-client.org