Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File:                     sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier:          H0IynD4yNz/+5WvQJJY9uuTYOcGgQxOepDpZPRdl2fk=
Subject key identifier:   C5:56:43:05:41:6A:9A:58:B0:9A:D1:9C:FE:60:F1:F2:82:F5:1D:77
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer:       /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial:       0193572DA8596EFA6DF0BD11BD164D76CA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 04:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:30 +0000
Files and hashes:         1: mCCA04gUcqahes9gv_eKFJntiBI.roa (hash: CpV+lev41mENs+/F4KKr6SPMkSNwhSvBgMCwL/WAyN0=)
                          2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: XQCqRgVK5kRAPaDcvl03jFpHpAfKu80ztIHEgY4pveI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a8:59:6e:fa:6d:f0:bd:11:bd:16:4d:76:ca:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
        Validity
            Not Before: Nov 23 04:00:30 2024 GMT
            Not After : Nov 24 04:00:30 2024 GMT
        Subject: CN=c5564305416a9a58b09ad19cfe60f1f282f51d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:9e:df:96:62:e2:c0:cc:31:cd:83:b2:67:
                    4d:b5:06:38:4c:be:9b:27:92:59:8f:f8:26:84:42:
                    d8:ca:f2:cc:1e:c7:3a:0f:3a:06:3e:81:d9:13:dd:
                    2e:5e:b9:98:c1:66:f8:1a:86:7f:e8:4a:1c:62:b6:
                    93:c4:da:de:44:e9:e9:c1:d4:c9:3a:58:d6:1e:d9:
                    50:d1:8e:3f:5a:69:c3:bc:ab:ef:f3:5a:9a:e6:bb:
                    e5:a8:d2:ca:73:95:cf:50:3c:f4:2d:23:1c:62:e5:
                    75:ac:0f:cc:2d:91:68:62:34:ac:42:cc:59:d4:36:
                    2d:eb:d8:80:ab:ec:59:c1:8d:06:a4:ba:a2:c9:0f:
                    ff:2f:33:af:95:fd:cc:0d:8a:92:90:f1:00:96:8d:
                    80:e9:28:4a:a6:df:0a:18:15:25:19:fc:c7:3b:3a:
                    3b:71:f0:94:df:4a:6a:11:f9:66:9f:6d:6a:79:d3:
                    21:d6:1c:16:a5:18:15:a2:ec:d9:36:fe:66:92:75:
                    83:dc:32:c4:44:2b:ce:e4:e5:89:0e:c3:dc:b7:f9:
                    ff:f4:f2:e2:12:7e:09:d8:43:ea:f8:be:bb:d3:de:
                    84:34:fc:32:14:ee:cc:3c:d5:bc:5d:5d:46:55:69:
                    b3:5a:22:74:09:af:74:1f:a4:4d:64:69:80:f7:0d:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:43:05:41:6A:9A:58:B0:9A:D1:9C:FE:60:F1:F2:82:F5:1D:77
            X509v3 Authority Key Identifier:
                keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:19:25:6a:c9:e1:8d:1d:07:9e:7a:4a:16:f7:f0:cc:c9:
         95:3d:0d:95:90:07:ba:5c:1b:b5:8b:71:fb:7f:7d:ba:0a:b8:
         8c:a2:b6:29:b7:7c:62:08:48:94:9e:4a:de:0a:f4:07:8d:25:
         f2:df:83:23:c0:2a:2d:ad:4b:bd:cc:83:bd:92:c0:7c:a4:ad:
         88:c7:51:06:e8:42:b5:7f:d2:99:a2:54:55:02:31:9a:ed:5a:
         c7:e5:f3:58:36:a8:65:6c:0c:08:37:61:bf:ea:6c:e9:f4:54:
         86:b0:f3:a0:81:fa:97:4c:58:e2:7e:5d:dc:46:f2:aa:f0:eb:
         3b:e4:2c:ea:dc:65:04:c2:c7:70:d7:39:51:78:ff:09:00:0c:
         7f:a0:04:01:80:5e:35:c1:91:21:0a:8c:8c:4e:47:d4:de:80:
         e6:33:60:30:4d:c9:6f:34:54:d2:73:0e:d0:13:88:41:29:1e:
         d7:a0:ba:d4:3c:16:f7:4c:e0:4d:ba:93:da:5a:f8:0f:db:44:
         5c:a5:6a:24:0b:eb:e4:2c:bf:fb:5d:bc:a3:c9:d7:b8:75:36:
         99:65:05:b7:34:98:8e:c3:05:6e:7c:48:14:eb:14:e2:7c:6a:
         17:e8:75:98:08:37:98:d2:47:9d:c3:c8:78:0e:b6:61:c9:15:
         80:a8:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:39 2024 by rpki-client on console-ams.rpki-client.org