Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File:                     GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier:          D3q0KLgK73SJtIyShRja2OErxfSem0f1DMZOXaRRDEE=
Subject key identifier:   61:17:08:37:19:D6:1B:E9:82:8F:51:92:00:68:22:BA:53:E7:09:BC
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer:       /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial:       019353510336E0EDC374BE99A0B34719980B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 10:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:38 +0000
Files and hashes:         1: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: uzHevSaEz1wh9XUPq4AXQZThm1iR69YlK0jUhnAtbKs=)
                          2: fxJVyVPUMbwk_o8J-tP7CmxSBFc.roa (hash: tL4lk8ZUZwMNk/QwshRzFaRtS1mYlNwDPNwO5p0kHCc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:03:36:e0:ed:c3:74:be:99:a0:b3:47:19:98:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
        Validity
            Not Before: Nov 22 10:00:38 2024 GMT
            Not After : Nov 23 10:00:38 2024 GMT
        Subject: CN=6117083719d61be9828f5192006822ba53e709bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:a2:a9:42:4f:7c:c7:f5:cd:77:f1:b5:b7:
                    04:68:b8:db:68:5c:4f:4a:66:3c:5f:00:5b:ac:ea:
                    9a:8c:90:50:d7:df:80:04:89:d8:7a:0a:5a:95:9e:
                    48:59:5e:96:42:c6:73:ab:1e:13:2a:db:4f:af:2b:
                    ae:08:9c:78:af:70:53:dd:6c:4e:05:d4:0e:81:bc:
                    be:82:80:7f:b6:c1:a9:d8:ac:6d:c2:0c:4b:ef:aa:
                    d7:6c:a6:bc:2b:a5:20:d7:68:1a:b2:23:35:3f:b1:
                    8d:5e:42:ce:68:c6:82:08:aa:03:55:5c:8c:9b:99:
                    70:f8:2b:4b:ba:17:59:34:45:08:af:14:7e:9f:1f:
                    ee:dd:10:03:2f:ce:d8:8f:bf:31:c1:2b:62:57:c7:
                    ea:0f:d5:b9:e3:7b:72:e1:7c:66:50:09:24:e0:a4:
                    6b:90:ee:17:63:f4:6b:a5:e6:82:67:7c:96:24:a5:
                    ce:bd:c2:be:74:1f:cd:be:5c:e8:00:3a:88:df:4b:
                    7f:9d:47:d6:f8:20:42:81:65:74:f2:df:02:92:f3:
                    17:4b:f8:10:a2:88:50:a2:04:9a:29:71:68:9f:1b:
                    23:b8:67:54:3b:56:f2:29:92:7d:4d:8f:4a:6f:c7:
                    23:5c:4b:a1:7d:a7:d1:17:67:6a:2b:75:8b:51:d8:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:17:08:37:19:D6:1B:E9:82:8F:51:92:00:68:22:BA:53:E7:09:BC
            X509v3 Authority Key Identifier:
                keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f8:af:f4:0f:a6:44:7a:d6:8e:5d:83:aa:fa:64:5b:2b:24:
         57:29:38:d1:5c:5e:c0:41:45:8b:cb:bf:bc:2c:c9:1b:88:90:
         10:f8:e8:8f:1e:15:2c:b8:cc:68:34:5f:08:95:20:2e:c7:de:
         d3:67:7d:ca:fd:14:ee:c9:13:d4:14:ec:6b:f8:42:06:01:3f:
         cf:83:df:05:16:6b:63:ae:6b:f8:3f:a4:1a:11:be:84:e8:a4:
         a6:a3:93:5e:7d:96:7d:94:0c:a4:be:61:28:04:53:48:16:8d:
         1c:cb:90:d5:35:bd:93:bd:82:b0:74:92:e6:3e:74:f2:ad:89:
         e8:83:e6:16:2c:33:8b:ff:86:0e:a2:4e:8a:f7:4a:c3:fe:8d:
         aa:38:d0:9c:a8:42:20:34:da:01:fc:31:13:59:d2:59:94:67:
         99:2b:4d:0b:cc:c1:cb:78:e0:fa:c7:8a:dd:f9:63:84:b2:7e:
         87:f0:ba:e0:c4:88:49:e5:10:24:ee:8d:e2:22:13:4c:b3:cf:
         ae:86:a4:1c:b3:3e:45:43:30:56:17:bb:4b:19:a8:37:2e:f1:
         f8:2e:77:25:95:e5:39:24:97:52:41:fa:99:63:64:99:30:82:
         9f:9f:58:7f:a2:bc:ca:2f:a8:cf:f5:da:54:cd:63:eb:d7:36:
         cd:2a:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:08:58 2024 by rpki-client on console-ams.rpki-client.org