Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
File:                     gO9no9w9cYRemxVVz_WtMbtCOpQ.mft (raw, json)
Hash identifier:          PAC40G4V1gvCSIFxSmJgvW7Y+vbCUYgmw/RHVzRm04w=
Subject key identifier:   CD:14:7F:05:1E:A8:61:85:0E:9C:F9:6B:B8:20:A1:7A:1B:21:56:2F
Authority key identifier: 80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
Certificate issuer:       /CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Certificate serial:       01936AEB5D6AB9C9FDA333E15C613422FAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 00:00:29 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:29 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:29 +0000
Files and hashes:         1: gO9no9w9cYRemxVVz_WtMbtCOpQ.crl (hash: RExO9jsbypSbIw1mT+5Z9qv+yJXits9HgYzy6EZoLvo=)
                          2: jPA2MxhLQ9_KBGVPy2ifCvjNCtY.roa (hash: 4tv2ipCypwdiJlThbs9CrYgkFQVD7hlzffqhOkqc25U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:5d:6a:b9:c9:fd:a3:33:e1:5c:61:34:22:fa:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
        Validity
            Not Before: Nov 27 00:00:29 2024 GMT
            Not After : Nov 28 00:00:29 2024 GMT
        Subject: CN=cd147f051ea861850e9cf96bb820a17a1b21562f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:f6:d9:33:ab:6d:b8:92:45:1b:f2:c7:5f:
                    32:1a:3f:fd:7c:a5:46:00:bc:fb:9b:d2:18:40:1d:
                    e0:2e:d5:62:31:f2:66:1d:07:ed:c8:e2:ff:40:df:
                    3a:0d:bf:51:01:e9:f4:e7:e9:39:99:6d:f5:8c:8d:
                    75:60:86:bb:b1:c5:ab:6e:7e:55:66:25:11:87:37:
                    bb:9e:49:e5:6d:4a:87:c6:05:d1:6c:30:46:0f:a6:
                    1d:f3:d6:73:97:b7:92:02:7a:8c:5e:63:8c:2e:5e:
                    78:51:be:9c:ed:bd:a5:6d:6a:46:0e:37:27:41:1e:
                    17:db:6c:21:bf:d1:64:f9:5b:51:db:36:0f:d2:55:
                    33:90:a2:bb:ff:cb:fb:5f:a6:cf:4f:d6:b6:a5:0e:
                    6e:0e:e8:18:14:49:13:de:3f:29:ea:13:d5:dc:ed:
                    92:4c:e3:47:ac:66:3e:42:c7:5e:76:f0:7e:3d:4b:
                    1f:11:20:e1:10:1f:9a:3f:0f:71:df:2b:9c:10:db:
                    2f:71:af:c1:71:88:38:5f:c4:23:30:c7:9e:10:4b:
                    00:b3:59:0e:4c:c6:27:1c:a0:26:15:0a:7a:6b:c5:
                    29:25:9d:6a:6a:8b:62:5c:10:13:15:09:91:d8:f3:
                    87:65:84:62:43:80:8d:f0:77:e5:a7:58:3e:6d:13:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:14:7F:05:1E:A8:61:85:0E:9C:F9:6B:B8:20:A1:7A:1B:21:56:2F
            X509v3 Authority Key Identifier:
                keyid:80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:3e:e4:a8:2e:ac:3e:e2:5d:85:1e:f5:4c:dc:b0:47:89:
         04:56:37:b5:06:f2:95:b4:76:fe:d8:b3:09:ec:bb:ab:f6:92:
         e0:21:13:50:d8:08:9a:5c:13:cb:c2:0a:2b:18:b7:a1:88:11:
         b6:ae:5f:7b:c4:fa:bf:46:92:d8:4c:65:3c:1c:15:62:4e:85:
         b6:b9:35:73:2b:a7:05:45:1c:b3:10:da:06:33:95:03:d0:27:
         14:c6:e6:5b:78:36:cd:eb:5e:cf:0e:97:21:5d:26:20:37:b4:
         07:a8:fe:be:4b:fb:f8:e8:e4:d1:62:14:e6:e4:72:94:00:47:
         01:8c:cd:95:58:30:12:06:8b:11:27:08:ba:e3:60:20:fc:45:
         0b:b7:3d:4a:b4:11:01:73:78:a2:14:46:af:f0:23:1d:d6:7a:
         2e:bb:a7:98:ed:08:3b:83:16:c5:0c:14:1c:b6:9c:46:4e:25:
         59:0a:03:f5:35:59:61:e2:5b:50:d1:81:3b:e8:3b:83:5f:b8:
         3d:8c:9c:57:47:48:b6:af:20:c0:85:27:90:61:39:a2:bc:41:
         08:6f:16:f1:40:78:94:3d:d0:57:ce:07:3f:68:d5:29:70:d4:
         4f:62:09:7f:e1:b5:7e:1c:ea:61:99:8a:a3:0d:21:d0:57:79:
         a9:64:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:05 2024 by rpki-client on console-fra.rpki-client.org