Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File:                     bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier:          /JayjirRSX4mcmKozbkzo3MaDwijoS/V6/IQYhAD18A=
Subject key identifier:   0E:0A:A3:55:A0:F4:4B:8E:8C:88:0A:67:C9:4C:37:56:2F:A0:8C:B9
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer:       /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial:       019358406137236E533AD37ED91A245918E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number:          137A
Signing time:             Sat 23 Nov 2024 09:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:34 +0000
Files and hashes:         1: 4fqazuHnom2PKxM-rZUbZ-4d-Ks.roa (hash: GVqQy9AjlxNXlbPHcEyBIQrkZcueqyevQ8qOJXSj4mk=)
                          2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: 0MeycTJG96tAVlI/gQdTsuNwbNuigwmPnV37BiFa7Fk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:61:37:23:6e:53:3a:d3:7e:d9:1a:24:59:18:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
        Validity
            Not Before: Nov 23 09:00:34 2024 GMT
            Not After : Nov 24 09:00:34 2024 GMT
        Subject: CN=0e0aa355a0f44b8e8c880a67c94c37562fa08cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:2b:72:2a:72:14:20:5e:07:f9:4e:d7:d6:
                    1f:64:4d:ba:05:81:b0:91:2b:d7:02:df:bd:00:54:
                    4b:a4:1e:b4:0a:eb:83:ec:d7:ac:8f:84:86:0c:50:
                    c2:b2:37:d8:08:a8:8a:a1:d6:2a:3e:55:2e:75:a3:
                    25:54:e9:38:e5:10:c9:ba:1f:1a:e3:ab:77:b7:84:
                    c5:d6:ea:11:a8:96:36:d2:1e:89:87:aa:9e:3d:e8:
                    65:11:90:a4:c8:6b:eb:3e:12:4f:ca:c4:c2:37:de:
                    4f:49:86:db:40:8b:f9:98:01:42:79:49:5a:8e:a6:
                    2f:28:95:a5:f6:3b:8c:d5:3e:e3:42:12:f1:41:3a:
                    45:9c:34:6f:38:4f:d1:b0:b2:78:c3:3f:a6:3a:45:
                    cf:fe:2c:b6:ab:58:8d:82:ae:a9:5d:fa:e0:54:9a:
                    0c:0a:c3:c4:44:80:22:e4:17:72:fe:db:94:75:af:
                    2e:df:ee:1b:98:31:bd:07:24:d2:f9:b0:d8:b7:04:
                    1e:13:c4:72:0c:db:19:f6:5b:a7:12:53:05:92:80:
                    37:7e:b8:15:ad:d8:88:7a:0f:fc:69:be:20:37:37:
                    a5:39:ea:3b:49:59:2c:6b:8c:09:2d:4e:46:e8:3b:
                    0e:be:4b:88:68:20:c2:e1:ba:bb:03:e5:53:d3:4a:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0A:A3:55:A0:F4:4B:8E:8C:88:0A:67:C9:4C:37:56:2F:A0:8C:B9
            X509v3 Authority Key Identifier:
                keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:f9:5f:ad:cc:18:0a:43:03:0b:b1:11:c3:89:eb:95:de:
         eb:67:3a:8f:ab:d6:bd:ff:08:08:12:e8:94:df:ca:ef:9f:bb:
         8e:ba:15:9c:f3:4d:00:1f:00:45:99:94:33:10:8b:de:7a:4c:
         75:ea:07:81:6b:8b:da:01:ed:1b:f4:87:6b:b1:4a:bc:d8:39:
         93:c5:e7:ac:8f:1f:4d:d8:69:af:51:05:3b:2b:6c:36:bc:b3:
         cd:af:50:cc:07:10:f9:99:13:a2:5d:42:bd:8f:48:62:08:5d:
         62:59:c9:57:97:40:1b:1b:9d:25:f3:14:ee:b2:5c:ac:9e:50:
         10:f8:27:7c:98:56:ff:81:ff:b0:b8:6d:49:5c:35:4c:e6:b8:
         79:5f:2b:52:19:67:1e:e8:9a:b5:e2:9f:3d:f4:a2:f2:63:19:
         24:d0:59:3c:84:b1:6f:9a:34:ee:f3:b5:cb:ac:2c:1d:74:6b:
         f5:80:a2:ee:4c:e2:69:4b:bc:1c:f7:95:2e:ec:d5:a6:76:9c:
         a1:25:2c:27:0e:52:5b:ed:76:bd:c2:d9:64:13:cd:b1:9c:bf:
         ce:c4:81:e5:1b:3c:6c:02:5c:a2:49:6e:e4:31:a6:37:14:8c:
         0b:1f:4b:ea:cc:bb:c5:e9:75:55:d0:1c:cd:cf:60:8b:ec:56:
         b9:55:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:36 2024 by rpki-client on console-fra.rpki-client.org