Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File:                     S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier:          IgUIdp2wJTOE/2r1uhBKuu8jyx7+Lfpb3rgTmSVnMCg=
Subject key identifier:   8E:AD:38:42:A1:AE:BA:C2:54:FA:E6:48:A1:2D:E1:DB:09:11:7F:C1
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer:       /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial:       019369DA98AE45EA8A429EDF2BD129B94F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:33 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:33 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:33 +0000
Files and hashes:         1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: 7ClG5aoLxlWsX8oG/qKfBew1VvfX8rtv2UsdPIOke/E=)
                          2: Yx4xe80VPk4Z468rCAzaleNclfI.roa (hash: cJznuRdnD9+Vk/7pR2Z/hcujuy1O+maGzXqXO8rX2F0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:98:ae:45:ea:8a:42:9e:df:2b:d1:29:b9:4f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
        Validity
            Not Before: Nov 26 19:02:33 2024 GMT
            Not After : Nov 27 19:02:33 2024 GMT
        Subject: CN=8ead3842a1aebac254fae648a12de1db09117fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:5b:5d:53:ff:a2:a6:48:1a:f7:07:23:58:
                    e4:d7:2c:0a:55:a8:2c:4a:4e:93:59:c8:b3:be:a1:
                    3a:bb:2c:db:cd:76:6a:cf:2d:00:12:e1:4d:8a:a7:
                    8b:56:ce:9e:df:ac:7a:65:2b:b7:10:ef:80:83:b4:
                    64:fd:d2:2a:7b:0d:27:f6:e9:d3:37:c3:cf:96:1e:
                    06:5c:55:76:9d:6c:48:3c:d8:b8:63:f8:c5:4e:8a:
                    bc:95:1f:2a:94:c4:f3:5f:1a:c8:c9:1c:ef:26:82:
                    f7:7b:6b:7f:d7:11:3c:06:17:3d:35:a2:22:60:dd:
                    29:79:38:3b:eb:a3:c3:9e:40:65:66:d1:a5:31:d4:
                    26:83:70:f7:cd:54:7e:f6:e1:cc:6c:03:f4:20:a8:
                    02:b6:bf:bd:a8:36:04:56:d8:43:83:d2:0f:1b:15:
                    a6:f0:aa:97:1c:e6:aa:2f:07:aa:0f:26:5d:e8:8e:
                    e8:8e:26:dc:93:cb:d0:2b:f2:f9:d7:7e:e4:a4:49:
                    7c:cf:e8:ea:5a:e6:73:49:36:9b:48:d6:33:dc:35:
                    eb:bd:5b:b2:31:c2:cc:ca:02:ee:5e:90:ce:63:d8:
                    2d:6b:2c:db:f6:eb:a4:d9:54:ef:b6:1a:6d:7f:9e:
                    a5:a6:ee:a4:3b:a7:a1:e0:20:41:66:38:02:8b:56:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:38:42:A1:AE:BA:C2:54:FA:E6:48:A1:2D:E1:DB:09:11:7F:C1
            X509v3 Authority Key Identifier:
                keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:66:6c:51:1c:7a:49:9d:16:0c:73:87:b3:13:17:16:1b:35:
         d7:bd:09:5f:18:ca:e8:46:95:be:13:23:95:86:9f:8a:c2:c7:
         59:eb:71:1a:7e:f5:2f:ab:40:82:c6:04:ac:c9:55:3a:a4:7c:
         4e:26:9a:c3:3f:36:db:a5:0c:31:9a:d8:ac:74:25:94:9e:c3:
         a4:8a:e9:79:73:bf:84:61:20:51:3d:be:00:58:7e:dc:df:3c:
         81:03:fe:b1:26:6d:5e:52:f1:bd:28:84:c0:1d:90:ba:cf:7a:
         f6:5e:2e:38:ec:4a:3e:00:60:ec:1a:1e:71:8a:af:26:49:2e:
         2f:28:c8:e1:1a:0e:ba:cf:9f:51:f3:c2:6f:f1:13:a7:7d:9e:
         ff:60:96:52:86:e4:f8:cb:53:a4:77:42:05:ce:9f:38:80:2a:
         ee:da:da:1d:7b:39:e9:42:05:ed:07:f9:f8:f3:05:7c:e0:cc:
         5b:f1:a7:67:ea:8e:51:6a:ab:98:02:02:fe:99:71:d4:91:38:
         38:09:b0:b0:0a:59:bd:22:d5:64:ed:bc:95:08:4b:04:19:43:
         63:fb:1b:bc:c8:99:54:30:71:50:59:11:5b:46:99:54:7f:3a:
         9b:14:eb:36:06:b5:dc:e4:10:bb:f8:03:a0:c1:00:87:9a:c1:
         0a:73:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:18 2024 by rpki-client on console-fra.rpki-client.org