Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File:                     muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier:          uh7baNgSepWqeN24UsKeKYQoI/sakojUcpX7+Apuk88=
Subject key identifier:   04:62:34:B3:6B:AE:09:2B:60:D5:A4:4D:1F:18:41:BB:3D:5A:81:8D
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer:       /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial:       019369D8C838D21F9C0BF089CFED83B147C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:34 +0000
Files and hashes:         1: FuVnobapfG-u6VtDWHQc-66H2Ww.roa (hash: Yz18dqFBovmVDJk/GpMI5Ss7dTp/g2aeX5lc5aPydVM=)
                          2: muOJscw5niFvztjTnsPuifwguDk.crl (hash: AsZl8Konvyx5I1jFPzkxU/xqvj3G9dSWcnOuGSP5kFs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:c8:38:d2:1f:9c:0b:f0:89:cf:ed:83:b1:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
        Validity
            Not Before: Nov 26 19:00:34 2024 GMT
            Not After : Nov 27 19:00:34 2024 GMT
        Subject: CN=046234b36bae092b60d5a44d1f1841bb3d5a818d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:2e:12:1a:e7:28:5a:b9:45:43:2e:8f:65:
                    0a:6d:d6:89:b0:d2:84:65:d9:82:42:b4:2c:7b:5f:
                    f8:af:0b:d3:fe:64:5d:63:1b:c3:8b:2e:c6:49:1f:
                    28:44:4f:bc:4d:04:e7:b4:65:31:b3:0a:3e:78:22:
                    00:ac:69:64:ea:d8:a6:39:dc:33:37:ab:be:bd:09:
                    39:8f:af:af:1f:93:cf:6d:e8:23:72:12:91:16:e5:
                    b5:f4:7f:88:22:b7:2b:29:8e:81:ef:f0:ad:af:e0:
                    cf:6a:dd:26:78:84:b7:ba:4b:d2:a6:9b:ba:13:6d:
                    32:5f:b2:de:24:5f:9b:6e:f7:58:9a:24:b8:71:cf:
                    7a:40:db:95:02:7a:e1:5a:93:5e:04:d6:53:71:24:
                    7f:a9:a2:b7:bd:05:4d:35:2d:8d:68:98:f6:4e:58:
                    fd:e9:d5:65:17:3b:a6:2d:0d:17:ac:50:52:92:e2:
                    b6:a1:50:15:d4:6f:98:39:9b:b7:19:a5:0a:85:fe:
                    9f:51:f5:cc:ba:54:d1:ef:99:69:ba:85:f3:f5:e4:
                    96:60:e6:c8:a7:cd:23:e3:e8:fa:e8:fb:a3:28:87:
                    ba:a2:be:d1:a8:b3:fb:b8:5c:fd:81:2c:a3:b5:cd:
                    a8:5c:4e:44:53:b2:bf:1e:9b:5c:a5:04:8d:9f:35:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:62:34:B3:6B:AE:09:2B:60:D5:A4:4D:1F:18:41:BB:3D:5A:81:8D
            X509v3 Authority Key Identifier:
                keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:d9:71:0b:07:12:5c:c7:a2:a8:d7:b4:aa:ce:52:49:62:
         de:0d:5d:0c:cc:e6:ae:66:7a:a0:df:6e:38:7f:32:fa:38:31:
         d2:e3:81:c1:42:87:10:6d:91:ed:22:28:c4:d8:29:95:f1:8b:
         ff:b1:3e:4d:ac:a4:2a:8c:ac:22:78:32:e3:53:ff:55:2c:7f:
         76:37:7b:25:66:61:94:1d:71:16:ca:ee:c2:31:48:61:91:9d:
         1e:1e:a5:70:d8:9a:7e:f6:d7:62:5a:90:a9:41:cf:bc:1b:b4:
         bb:2f:87:90:95:69:a0:04:83:ab:a0:39:70:f2:87:c0:db:4e:
         c0:f2:74:8e:68:2d:f2:aa:cb:7c:20:2c:43:16:c2:9e:bc:a6:
         b6:10:77:86:d0:99:80:74:8a:10:48:43:57:bf:d4:ef:29:bb:
         52:53:08:81:f3:2b:24:42:7a:5a:39:23:65:da:fb:b0:89:55:
         f7:5a:1e:7b:81:52:25:54:08:8e:0b:d5:6a:79:b4:f7:51:3e:
         1e:74:d4:4e:eb:0f:0a:66:22:02:06:97:62:ad:a3:49:04:35:
         09:7f:2d:c3:0c:7c:8b:4a:8e:af:f2:73:50:e2:65:c2:53:57:
         17:6b:d5:14:5c:52:c5:51:c0:83:d2:20:e5:fc:fd:48:92:a3:
         7c:a6:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:55 2024 by rpki-client on console-ams.rpki-client.org