Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          V/ao3PgOpJHxq1iIyRB03KFSyHanLtR4th+lckA6kfk=
Subject key identifier:   AA:FF:23:3D:67:30:E1:47:6C:0A:42:76:C5:25:7C:94:83:EC:76:6A
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       01936A0F6C9061C62DC366D2AE6D89E63F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 20:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:15 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: FTozpvUVq/9MLabAT9OkYK/fYpXP5FdxDEhVbo/rGgU=)
                          2: Fs6DRZvz0N6mRspBQPLuBJvMGqQ.roa (hash: s7tOgU5lWueV6bJ7EFTlTM7MMfZgmHxduHFXCOtWllk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:6c:90:61:c6:2d:c3:66:d2:ae:6d:89:e6:3f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Nov 26 20:00:15 2024 GMT
            Not After : Nov 27 20:00:15 2024 GMT
        Subject: CN=aaff233d6730e1476c0a4276c5257c9483ec766a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:cd:1d:74:7b:1e:a4:43:5f:de:0b:a9:51:
                    a0:d8:61:9b:3c:79:d6:12:34:f7:57:db:3d:91:e4:
                    41:c0:f7:67:ea:1d:09:fb:5a:39:8f:39:7d:0d:4b:
                    9c:7c:b2:bd:a7:d5:21:b8:2b:af:c8:47:e1:fb:6f:
                    7b:95:28:70:9b:97:09:d0:ac:fb:b5:c9:71:ea:ef:
                    7d:6f:fa:ea:e7:04:07:9b:84:86:4b:7d:29:20:8e:
                    a7:30:d3:46:a7:1c:2b:12:4b:83:a0:bb:66:55:3d:
                    80:4e:f7:d2:58:75:fd:b0:b2:64:e8:38:f7:30:df:
                    24:c8:a2:17:7e:29:d8:e3:41:87:1a:c3:f9:20:b5:
                    6b:dc:1f:a8:92:0e:f9:b5:d8:2a:e0:6b:51:0e:cf:
                    07:42:18:0f:34:0e:82:98:1d:8f:3b:00:f0:77:1a:
                    44:ac:be:33:d2:74:48:a2:1b:55:55:43:07:05:6c:
                    e4:2f:f2:71:3e:7b:0a:03:be:b7:3e:bf:2f:f6:36:
                    38:5c:78:1c:eb:c4:23:f2:69:42:0e:c1:8e:e3:ad:
                    4b:bb:48:d5:0a:11:6d:7a:a9:fd:b6:9b:39:99:df:
                    e0:12:85:07:75:69:88:93:ba:3b:b8:1f:e1:89:c8:
                    fc:d8:bf:d8:64:54:b5:03:c2:01:67:3c:dc:c8:9a:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FF:23:3D:67:30:E1:47:6C:0A:42:76:C5:25:7C:94:83:EC:76:6A
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:19:a6:8e:bc:fa:34:ea:39:07:a8:30:56:65:5c:55:a9:b9:
         67:e2:92:42:30:53:d0:53:a0:21:5f:7b:cf:71:a2:3b:e5:1e:
         89:23:0f:18:95:61:03:57:e4:f7:11:b5:f5:21:83:35:6e:0d:
         7f:e3:a1:c7:8b:a0:dd:a5:41:01:7c:65:a4:40:b9:08:10:2a:
         a8:ff:b9:7e:bc:af:ee:43:53:f6:68:c1:fb:e7:2c:98:de:67:
         61:d9:9a:f4:27:92:1e:d4:60:eb:12:26:06:de:da:5e:e8:c6:
         71:c7:91:80:10:46:83:b2:1b:49:6c:a0:c2:29:cb:33:93:dc:
         1f:22:e1:77:ee:3f:f2:51:ad:69:ee:d5:62:33:96:07:a1:d6:
         f8:fc:6e:7b:66:f0:9d:4a:48:dc:87:c0:85:c9:21:15:3c:81:
         ac:4b:73:88:b8:e3:14:07:b0:33:3e:7a:1f:ea:42:f1:d4:0a:
         2c:c7:05:a0:c6:e0:9c:9f:5b:20:be:dc:68:00:9c:65:45:65:
         49:3b:15:09:b4:17:78:c0:fa:c0:f4:e6:c0:5c:a1:19:b0:0d:
         ca:01:bd:68:0a:d5:1c:0d:81:70:fd:cc:e0:1b:c9:ff:22:9b:
         6b:c1:82:ca:69:4a:c2:75:64:ce:db:f4:95:c1:2b:86:3e:e8:
         30:4f:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:11 2024 by rpki-client on console-ams.rpki-client.org