Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File:                     ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier:          y0vwW72U+IeFVyDdpYqNWEzIhrtCtAWrZkK8nqaqaM8=
Subject key identifier:   55:44:E1:9C:4A:07:47:54:1B:5D:72:A5:38:44:AA:01:D7:CC:33:5E
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer:       /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial:       019369D89BDD3DBF38888D042C2EB65B3B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:23 +0000
Files and hashes:         1: 6v9X71RonvE3jE-B3WSiairMZ-Q.roa (hash: /jeBQf6qPpi//Fxl6Xm0OziQZh9DONd519MNAr2LQxk=)
                          2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: H8aEYWIbPtJKRIcs0K4dH3YuVnyJm3hzD+FDSBpmQdE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:9b:dd:3d:bf:38:88:8d:04:2c:2e:b6:5b:3b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
        Validity
            Not Before: Nov 26 19:00:23 2024 GMT
            Not After : Nov 27 19:00:23 2024 GMT
        Subject: CN=5544e19c4a0747541b5d72a53844aa01d7cc335e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:db:7c:bb:24:66:81:64:fc:71:47:7c:7d:f9:
                    48:e9:bd:d7:b5:60:e7:03:e7:b2:95:a5:9c:12:e0:
                    b1:34:04:eb:9b:88:ba:c4:c4:26:93:92:c3:1d:d1:
                    cb:6a:71:9b:51:6f:14:99:94:da:49:f2:0c:06:7e:
                    d6:64:ea:3e:be:08:1b:e8:7d:61:4e:c7:6e:f1:1d:
                    fe:99:85:64:06:a5:03:ca:9b:31:a3:0b:f8:20:71:
                    25:d8:9a:0d:b6:c6:1c:ba:c5:0b:f2:a8:8a:d5:58:
                    6f:99:e9:a1:0f:9f:39:31:5b:05:62:69:92:4a:ba:
                    bf:2b:7d:70:49:60:19:00:f7:a1:b0:20:c6:e8:6e:
                    01:b6:f1:0a:e8:0f:5d:6a:97:79:57:b1:fd:be:75:
                    95:45:2a:c5:e4:ea:0a:c3:c5:3b:2d:32:59:e3:10:
                    ea:82:02:44:1a:a0:da:cc:ba:ec:24:eb:4a:69:10:
                    e4:1d:44:05:cc:37:e0:05:e6:76:ff:f3:19:10:89:
                    62:97:f9:8c:eb:f3:a4:e0:b0:9a:04:14:12:46:d7:
                    d8:a9:c7:66:36:83:a6:05:57:77:91:b5:38:16:87:
                    bb:5c:85:b8:dc:c9:38:65:c6:c4:df:ed:35:31:d6:
                    69:bb:32:a4:f3:c8:f5:9f:7d:3e:1c:21:e2:fc:46:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:E1:9C:4A:07:47:54:1B:5D:72:A5:38:44:AA:01:D7:CC:33:5E
            X509v3 Authority Key Identifier:
                keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:3b:03:70:0a:53:6d:87:f2:3d:cd:a9:8e:2f:6c:d4:1a:
         43:40:28:ae:9c:fd:2a:88:7b:8d:32:61:1c:5c:98:df:9f:6f:
         c5:ec:82:e0:79:c6:c4:51:8f:ba:a6:da:2e:3c:f4:13:94:14:
         a7:f4:72:08:f1:79:a8:62:ce:a6:3f:a2:f7:d1:3c:e8:b6:13:
         07:3f:f7:1a:87:62:23:43:88:bc:e9:c7:1b:ea:ce:56:00:1f:
         8e:38:a7:22:d5:f2:85:ce:27:4f:a9:22:16:d8:df:b0:db:96:
         4f:5d:8f:a7:ee:8b:e8:23:6f:2c:5b:de:48:c5:3c:fa:5e:60:
         09:2d:16:43:c6:c8:86:d7:a5:3b:7e:6b:ab:87:37:cf:4b:06:
         7a:e3:c3:be:a0:81:70:5c:f7:97:0a:64:52:74:0c:db:67:1b:
         a9:29:87:ee:0d:f5:2a:eb:cd:31:b1:3a:6c:2e:24:36:69:09:
         f0:43:ab:0e:fd:07:20:90:f1:f5:c5:21:e3:b4:e2:ba:0e:78:
         d3:00:88:93:4d:90:5f:cd:51:ed:e8:02:ca:aa:bb:47:63:54:
         00:c1:49:c1:ca:12:8e:0f:4c:68:92:64:9b:a6:5a:91:e1:d0:
         1a:de:b6:3f:f1:d8:c3:05:e9:6d:70:e3:d9:af:e8:89:2b:3d:
         b7:59:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:27 2024 by rpki-client on console-fra.rpki-client.org