Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File:                     DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier:          nrOoGGhziSSC+8G7EVeGFyGEd2BRotpxD0PNpl1LBvk=
Subject key identifier:   E9:CB:48:96:30:B5:E5:E0:4A:B8:41:CE:C4:EC:E4:68:15:F1:C1:77
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer:       /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial:       01936AB4980476E3AC05377B1D7D2AF84726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 23:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:40 +0000
Files and hashes:         1: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: p75Gmbu+N/BpHfidpJf6/1DpAZH+waZuYHDiZQAUcUo=)
                          2: Pn1-770PjHZ8Zxn2szx534AIkUI.roa (hash: +IYoOk/F+Rah2sySi3BWeAvMRN3FFpEuoDVZmzlA2tw=)
                          3: bD3qheBjAa6fZbGQUaWlR8ALKaA.roa (hash: S64nQe2H91rUKUGVFs+Fvn+tmdDHxB7+3RKTP5lNBMk=)
                          4: eQQ8EBNI-AgH8sQGUHcT4Pt7Glc.roa (hash: 56SVpBtyC5LcCXYFe25IEah28pGRHOrduy+kcy2LxTU=)
                          5: f-aK3lfa-UR4nytxi7y8u4V1Oh4.roa (hash: Uo01SR0rkQjHhmn1cbPkD2ri+4fn/LW6PhKJ7bRZtEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:98:04:76:e3:ac:05:37:7b:1d:7d:2a:f8:47:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
        Validity
            Not Before: Nov 26 23:00:40 2024 GMT
            Not After : Nov 27 23:00:40 2024 GMT
        Subject: CN=e9cb489630b5e5e04ab841cec4ece46815f1c177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:4a:d9:ec:86:f4:5e:a8:9f:e3:1d:c4:eb:
                    be:d3:b9:0b:b1:43:21:9a:6b:54:f6:69:d7:8d:ad:
                    85:c1:b3:ea:3d:a2:90:5d:61:5f:f7:77:e8:a0:e8:
                    4a:3e:68:66:c3:87:a7:e4:6d:7e:8c:ac:4e:2c:31:
                    a1:ce:59:94:0b:b6:7a:55:0e:13:7b:6d:bb:98:18:
                    7d:76:fe:22:8c:88:0f:26:18:4d:e8:70:59:43:23:
                    0d:17:87:28:f6:1e:79:91:f1:a3:ec:3e:0f:d5:dd:
                    fa:7d:75:69:9a:e7:2a:ac:e9:ac:6c:8d:68:31:b2:
                    92:aa:39:5b:70:51:a6:d5:b6:74:7a:9c:38:23:3a:
                    d1:fc:ef:df:56:c8:a8:c1:20:cd:52:18:cd:65:37:
                    a3:01:39:a0:df:3f:2c:58:b9:a9:75:04:bf:9e:b8:
                    22:8d:29:b7:5d:3d:8d:d8:e3:1c:dd:1b:94:b8:2e:
                    df:d0:19:77:e7:26:a5:20:18:60:cc:3b:94:65:eb:
                    22:6f:14:48:d6:14:f7:1b:82:13:71:87:8b:32:bb:
                    49:6c:1b:29:9d:32:5f:ea:a6:65:59:85:63:0b:c9:
                    02:4a:d5:1c:ad:27:f3:e8:1c:9b:f2:04:4b:f1:d5:
                    cd:d0:4f:02:bb:ba:c3:3d:58:18:e2:47:02:2c:10:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CB:48:96:30:B5:E5:E0:4A:B8:41:CE:C4:EC:E4:68:15:F1:C1:77
            X509v3 Authority Key Identifier:
                keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:fa:fb:a2:54:1b:c1:ba:96:05:b6:ba:c0:e0:ac:ac:f2:fc:
         df:f6:9c:dd:98:f4:9a:75:46:43:8a:4d:c8:1b:49:58:ed:dd:
         f3:e2:21:f1:be:07:e9:95:6b:7e:71:26:88:68:ec:8e:51:1e:
         d1:ef:1a:c8:4d:4f:36:be:35:d2:4f:a4:53:6e:3b:d9:16:a0:
         da:8c:1c:1c:7f:d1:04:b1:d0:64:44:e5:12:f9:80:35:45:a9:
         b4:06:46:d0:c8:f2:a9:88:e7:d8:60:ae:52:41:7e:cc:e4:85:
         6f:ac:df:0d:ed:50:ff:7b:13:49:be:7f:b9:99:b0:e3:9c:76:
         a3:c4:89:ac:db:c0:b5:9c:2e:d1:7f:bf:96:63:04:e5:79:a0:
         75:b9:a1:1c:59:d1:eb:bb:60:0d:ac:90:9d:6f:bc:b7:8d:98:
         f1:82:43:68:4e:05:57:fc:a0:79:bc:c1:b3:4b:30:21:71:6a:
         c5:89:3c:b9:1f:d0:e7:77:5b:10:83:ab:5a:7e:04:40:8a:76:
         b4:e1:18:f4:56:76:33:10:6b:ef:b7:2a:f2:b9:ae:50:a3:ce:
         e6:eb:4f:34:f8:48:0f:ed:52:f5:2c:0b:e6:11:a8:29:ef:13:
         f8:39:0b:42:e3:82:fb:c8:60:bd:d9:a5:44:ac:42:f6:f6:51:
         62:a6:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:41 2024 by rpki-client on console-ams.rpki-client.org