Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File:                     Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier:          z486wjWUcFP6Mo5s7YujFKLri86FlKVwyUIVerK3O9w=
Subject key identifier:   B3:90:7A:73:A3:86:C7:A2:47:79:B6:63:FA:CD:51:A1:27:24:1E:7C
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer:       /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial:       01936A690F1B6CF3596531E88C523E56FF39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 21:38:10 +0000
Manifest this update:     Tue 26 Nov 2024 21:38:10 +0000
Manifest next update:     Wed 27 Nov 2024 21:38:10 +0000
Files and hashes:         1: 0ASnvhQLoFaM9-jrUt0dq2m5JKg.roa (hash: 0y1squijEOLZAns0qYPK89rKNkj8q/buBFssWX2JgRg=)
                          2: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: j1UtapVofH3b6vxCwOFsdWlQvDS1oG+svuog7v7B0YM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:69:0f:1b:6c:f3:59:65:31:e8:8c:52:3e:56:ff:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
        Validity
            Not Before: Nov 26 21:38:10 2024 GMT
            Not After : Nov 27 21:38:10 2024 GMT
        Subject: CN=b3907a73a386c7a24779b663facd51a127241e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:03:9b:8a:2c:5a:c9:ab:9e:f0:60:c0:b8:
                    59:69:44:35:44:61:4a:20:af:e3:29:d4:54:61:b0:
                    b7:26:df:52:f2:54:92:ec:5d:aa:47:15:ef:44:2d:
                    fa:f7:d0:e2:51:ac:6c:3f:fe:cf:6d:a8:07:9c:85:
                    bc:0b:67:c0:a1:0e:f0:e5:3c:81:9c:76:d0:98:53:
                    b4:c4:4b:e5:29:53:7d:9e:50:f1:78:24:64:75:f2:
                    0b:07:f9:f3:05:f8:fa:23:01:e4:97:a2:4e:fb:ac:
                    e8:ea:19:58:2f:97:fa:d7:0e:38:2a:db:d6:3f:9f:
                    19:c7:29:88:04:a5:80:fe:c5:d4:aa:a3:07:af:24:
                    ef:4d:97:36:b8:92:49:fd:0b:81:dd:49:c4:be:8e:
                    0f:da:b3:25:9d:d4:cd:84:d5:03:c8:d3:13:d7:a6:
                    4c:ff:bb:94:64:ea:2f:41:0c:38:b6:7b:ba:1b:ca:
                    68:14:84:af:18:74:0e:eb:22:37:74:8e:53:a7:f2:
                    32:e2:5d:f6:95:df:c9:46:7d:69:9e:60:56:71:9a:
                    2d:be:85:20:61:1f:c8:ba:43:61:7f:b7:e2:24:59:
                    f5:6f:96:be:38:96:fa:55:83:f9:99:83:77:14:fe:
                    86:3c:d9:36:7d:0a:1e:d7:c6:71:3b:ce:ae:89:96:
                    be:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:7A:73:A3:86:C7:A2:47:79:B6:63:FA:CD:51:A1:27:24:1E:7C
            X509v3 Authority Key Identifier:
                keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:eb:2b:1f:a2:0d:65:df:11:9a:03:83:79:58:c4:a5:69:
         2b:b8:18:72:8a:d0:64:d4:c4:a8:23:2a:ff:4c:73:55:06:a0:
         80:e9:52:d1:08:7d:a9:fa:25:4c:78:59:1a:28:7c:68:ee:04:
         d8:28:a0:3d:98:4a:cb:7d:58:38:1c:6d:74:cf:2c:82:85:58:
         2d:15:da:c7:ba:fe:27:32:9e:9c:34:2b:37:84:0a:84:d6:73:
         b7:6a:6b:76:05:54:e5:f8:6d:f1:7a:cb:77:aa:69:0d:c8:f9:
         08:37:59:e9:82:e6:eb:78:00:98:91:f0:80:e9:5e:7e:26:ad:
         15:91:68:4c:51:1e:1b:8d:6d:cb:7e:e5:ea:29:57:ed:9e:a6:
         14:43:5a:9f:2a:60:5e:78:cd:05:da:1f:17:87:58:24:db:59:
         d9:4a:c8:5c:32:87:c6:65:33:81:31:47:a0:52:af:8e:fb:44:
         3b:7c:ea:a0:fd:7a:99:69:03:0e:56:45:03:43:f2:07:74:31:
         49:54:ec:07:16:63:22:76:30:6a:bf:41:a7:1d:47:00:0c:99:
         92:00:87:28:ce:1d:e4:0b:d9:61:77:10:03:2c:08:5a:4d:b3:
         76:5a:36:a2:7f:c3:d4:15:ae:11:92:5c:6d:b9:ed:c8:cf:5c:
         d2:73:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:24 2024 by rpki-client on console-ams.rpki-client.org