Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          gGQy4nVyKhKe+6o67lZl43R6u/7ghh+OK11N9h3ij28=
Subject key identifier:   31:E5:2E:36:75:5C:93:D2:83:0E:D7:B6:72:7C:44:E4:1B:82:86:C5
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       019352ACBA0B354085B1801093FE464BB194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 07:01:11 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:11 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:11 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: t1x//MLFcojo0L0D5B83KytdZqVU4v6F52wodQuUvrA=)
                          2: xUHrYAg3-CFrcmiAnwT4QdLaBi8.roa (hash: 3nuCd28+cUFwO1Cpv8+SpL3T8tKW1Zh/0PG6YL+JJgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:ba:0b:35:40:85:b1:80:10:93:fe:46:4b:b1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Nov 22 07:01:11 2024 GMT
            Not After : Nov 23 07:01:11 2024 GMT
        Subject: CN=31e52e36755c93d2830ed7b6727c44e41b8286c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:60:e6:9f:2b:13:c6:97:47:73:a8:ca:b7:
                    84:35:f1:9e:34:56:66:92:e2:c8:93:8e:b5:74:83:
                    a5:7c:46:f2:d4:33:a2:3e:7f:96:f8:c7:ec:60:ae:
                    70:43:68:25:64:b4:51:c7:c2:37:01:c1:bd:ed:c3:
                    65:ed:c7:f1:3b:ad:f2:db:0d:01:25:3d:43:cd:55:
                    ed:a9:a8:e7:67:1e:3d:2f:e9:41:2a:64:15:71:89:
                    b2:76:42:08:49:f2:3a:9b:93:a0:42:a2:ca:c3:6d:
                    49:6c:e0:29:82:38:06:56:6c:5c:f1:75:96:b8:b7:
                    6b:a9:08:8a:04:bf:1c:69:ec:58:65:1f:7e:f4:94:
                    88:55:a2:13:c1:35:08:26:cb:74:66:38:08:d7:f9:
                    47:e7:20:59:6e:5f:dd:91:6e:03:8f:d1:3c:ca:5a:
                    2e:b8:a6:4b:df:56:40:58:49:90:1a:f8:c8:f0:d7:
                    1c:11:70:ed:78:60:e9:5d:9a:56:d4:fe:3b:76:ac:
                    b1:4b:4c:f7:14:a7:7e:99:4e:db:c1:8d:e4:40:35:
                    4a:d7:56:67:70:a7:70:7b:c6:e5:db:2f:e6:d1:e3:
                    bb:10:79:58:de:82:9e:dc:da:8e:47:e1:6d:22:aa:
                    bc:15:84:49:88:f8:76:a7:79:c9:96:07:09:e8:d8:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E5:2E:36:75:5C:93:D2:83:0E:D7:B6:72:7C:44:E4:1B:82:86:C5
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:77:4b:aa:6c:74:0b:f0:e9:3a:72:e6:db:ce:fb:2e:ef:
         77:3d:53:84:83:04:9c:60:8f:93:69:fd:d9:bb:f9:a1:c2:da:
         e2:50:73:9c:6c:f9:8a:74:8b:19:64:1d:90:08:5a:41:05:11:
         5f:6e:f9:e6:51:cd:58:30:68:37:ad:11:c7:25:6f:da:59:94:
         a0:05:c0:87:14:32:21:c0:95:90:c4:cd:86:ac:1a:86:26:b7:
         9b:b7:41:8d:ba:78:4e:4a:a5:1e:8d:66:62:b4:22:25:2f:a8:
         01:1f:9b:91:8d:65:5b:55:ff:82:15:dc:c7:af:1e:ec:6f:7e:
         ad:98:ea:0b:0f:d8:ad:b6:3c:a9:f0:69:b6:b9:76:ad:8d:57:
         7d:24:38:97:38:11:f1:1e:82:d0:a4:34:a7:95:dd:b2:05:3a:
         76:04:df:75:b2:61:80:3e:af:46:41:8d:54:54:75:3a:99:35:
         a4:32:f6:0f:5a:66:17:96:c7:48:3b:bf:d6:08:52:e8:a8:b3:
         71:d7:4e:ec:49:fb:47:bd:3e:b2:03:93:a1:3b:69:d7:20:be:
         26:0b:74:c9:27:05:01:b4:7e:51:56:a2:92:43:a8:d4:98:7e:
         50:bd:f3:85:6e:ae:cf:ec:a6:77:f2:61:00:1f:96:63:09:21:
         13:48:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:56 2024 by rpki-client on console-ams.rpki-client.org