Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          vJ3wTSB0od8jQjzTgyRPVn7t/FEUTBDOwGxXUw9nLjo=
Subject key identifier:   E6:E3:E2:14:34:28:47:01:3E:31:32:54:DB:B2:D5:F9:A1:0B:58:95
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       01936AEB3D2A6BDA499A9FBB68526E006AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 00:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:21 +0000
Files and hashes:         1: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: LyXlWepTKr1bY1uMdRii9Ss7BDCg8O98raT3xqw8JL4=)
                          2: TRoXRGLcIDzfQAvyPAIFh6qDCq8.roa (hash: qQzjDsjm6SJWb3OyC2EMEuth0w/KD0r4GZLIT085SBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:3d:2a:6b:da:49:9a:9f:bb:68:52:6e:00:6a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: Nov 27 00:00:21 2024 GMT
            Not After : Nov 28 00:00:21 2024 GMT
        Subject: CN=e6e3e214342847013e313254dbb2d5f9a10b5895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:11:10:8b:e9:af:c3:b6:f9:c4:58:cb:12:58:
                    b9:66:5d:85:f8:1b:4d:10:c1:8b:c2:3d:1e:ed:6e:
                    e3:67:67:9a:ae:be:10:96:f2:d8:8d:58:b6:08:ad:
                    53:17:3c:46:fa:85:4f:88:9e:fb:c8:47:4e:e4:d3:
                    ca:dd:d2:23:48:ba:57:61:47:ec:03:66:22:46:a8:
                    74:bd:ee:0a:30:fd:64:67:9d:7a:05:35:8f:11:98:
                    71:36:64:a0:dc:4b:e3:43:0a:04:44:a8:93:f6:36:
                    aa:a2:ae:8c:75:a8:d9:ac:51:d6:90:01:ab:56:9e:
                    6c:b2:2f:fc:40:84:4b:a2:be:75:2f:ef:8a:60:29:
                    f6:55:df:5c:b9:ad:91:ae:3c:f3:4b:5f:f2:12:5d:
                    52:01:d7:65:91:bd:ef:f1:a2:2d:dd:7d:e9:c7:70:
                    1b:bb:dc:fd:50:b6:c7:7e:ca:55:bd:f0:86:0f:9e:
                    3d:f4:18:8e:78:b7:75:d3:f0:1a:19:19:cc:ec:22:
                    78:85:7e:5f:41:95:20:4a:43:5e:86:d1:88:31:dd:
                    d8:d1:84:7e:9d:a5:41:3f:b3:46:e8:df:3c:41:82:
                    92:99:37:92:0f:b6:e6:5e:b9:b1:04:d0:a7:92:78:
                    6b:07:4d:8f:10:db:7a:42:04:82:dd:92:b5:ac:45:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E3:E2:14:34:28:47:01:3E:31:32:54:DB:B2:D5:F9:A1:0B:58:95
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:51:0f:9b:66:92:88:78:d1:ca:32:4d:2f:f9:7b:dc:8c:4c:
         56:17:f0:36:b4:94:bf:c7:71:35:8f:29:49:a2:e0:3a:01:e1:
         30:81:cd:6c:75:2b:4c:4a:d0:44:a6:d1:4d:94:89:f4:23:f5:
         c4:b0:05:9e:bf:36:32:8f:24:25:78:c0:8a:f1:f2:54:e2:25:
         3a:13:a1:44:92:45:a1:d6:b6:ea:92:30:40:09:46:cc:b1:14:
         d6:48:73:e7:c9:38:65:25:ca:8a:d4:a4:0f:50:9e:e8:8e:78:
         bd:f5:8f:98:9d:53:57:a8:98:77:cf:eb:ef:cd:f4:03:f9:bf:
         d1:ec:c0:80:07:2d:7d:79:7a:ad:fc:3f:44:6e:85:c9:cb:ff:
         2e:c4:e6:54:b1:60:ee:e3:ff:c8:95:bf:a4:5b:dc:68:dd:58:
         00:d0:1d:89:a0:01:9c:92:00:01:4a:f5:9a:f3:63:40:23:36:
         a4:4b:ce:37:b9:d0:5f:ac:05:eb:db:5d:24:ae:cf:cc:9c:cb:
         ef:50:13:e4:77:f2:0f:d7:32:ca:08:9b:ff:b1:9b:1b:f8:98:
         fb:7c:2e:c6:30:cb:4f:8a:10:9e:b6:c6:c5:97:2d:25:1a:b6:
         4b:57:3c:9b:7e:9b:9e:c0:b2:e1:46:17:92:db:a2:37:87:bb:
         2f:36:a9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:51 2024 by rpki-client on console-ams.rpki-client.org