Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File:                     a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier:          iVLpMAph7iv6I+40JPqsOeP2G/kty17dmQky6rAbyHs=
Subject key identifier:   3D:A9:A0:C8:1F:F2:7E:E5:9A:A8:C4:46:73:F0:22:48:FE:1B:F7:36
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer:       /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial:       019369D9186E3A5326D3768CBB4E3A29E733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 19:00:55 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:55 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:55 +0000
Files and hashes:         1: YJXTxrPf1NQxpTpo7K-agWTovQ8.roa (hash: 9YIWl69Mw+MMdDdfagdBSiN1eZ8N9clFM+ci7qP2LW0=)
                          2: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: 5meZjG7ap/T017F9KZ5aIh81xN56HAPR/6kVXzP5VpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:18:6e:3a:53:26:d3:76:8c:bb:4e:3a:29:e7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
        Validity
            Not Before: Nov 26 19:00:55 2024 GMT
            Not After : Nov 27 19:00:55 2024 GMT
        Subject: CN=3da9a0c81ff27ee59aa8c44673f02248fe1bf736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:d3:aa:df:23:a2:80:a3:d0:0e:63:4a:d1:
                    23:61:fc:07:0b:1c:49:9b:97:dd:7e:ca:8f:52:b2:
                    57:c7:cc:8c:c3:73:e7:39:de:e9:6c:7d:44:a6:98:
                    e9:fc:62:3b:bc:b8:8e:7d:c4:cd:9e:6c:22:f5:32:
                    55:88:f4:3c:0f:0d:8e:5f:35:f8:4f:53:77:15:1e:
                    ee:cb:d5:95:b1:15:aa:88:89:78:ec:9e:15:6d:5a:
                    72:46:4a:0f:79:1f:ae:3b:c4:f6:8e:3d:ff:e2:11:
                    86:f9:2b:f7:d5:65:1c:cc:a7:42:2e:5a:c9:75:e9:
                    50:05:15:27:46:ec:bb:59:3a:c3:42:ae:b1:1c:c3:
                    df:6b:40:83:6f:02:cf:ab:9d:94:e6:9e:ff:5b:8d:
                    eb:5c:db:ea:2a:f9:cc:4f:4d:0b:4c:f4:57:15:15:
                    d8:02:91:b5:33:85:35:1c:c8:eb:8c:cc:5d:b1:d5:
                    a3:6f:90:58:b0:f1:c1:36:62:0c:5a:da:2f:b2:28:
                    d8:c8:78:94:21:d2:45:2e:71:a4:a9:c1:70:3c:a8:
                    5a:02:31:7e:8e:34:f7:69:3a:98:c0:f0:f7:e9:d0:
                    3e:a2:98:8c:70:9f:78:13:f4:43:21:7e:b0:bb:f8:
                    a1:e4:05:17:0c:2a:58:7f:6d:39:64:3b:0e:56:c8:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:A0:C8:1F:F2:7E:E5:9A:A8:C4:46:73:F0:22:48:FE:1B:F7:36
            X509v3 Authority Key Identifier:
                keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:ed:55:4f:2e:aa:00:74:fb:fe:3a:89:4a:2f:39:2d:a1:
         32:d1:18:8b:fd:6c:82:fe:96:92:85:18:c4:a0:8f:13:22:71:
         e8:41:8e:47:c3:1f:7b:7f:09:77:82:c0:e3:a9:d1:1d:38:1f:
         2f:42:03:f9:0e:91:df:d1:73:32:5d:28:f8:13:d1:e8:d1:5f:
         c6:d9:63:a8:4d:9e:0a:6e:76:8b:95:2f:24:8a:73:e6:bd:73:
         bf:6d:c3:11:f5:b0:d9:27:d5:b6:ea:64:c5:a8:74:86:55:76:
         53:a5:e3:cd:2f:60:7c:7f:30:18:5e:f9:4f:a2:e8:91:34:33:
         99:a1:3f:65:39:41:0e:67:af:b8:bd:82:51:ce:4b:14:fd:89:
         1e:48:bf:47:ba:a3:4b:7f:71:14:e6:8c:f4:1c:d3:33:23:cb:
         9e:89:4a:3d:de:6c:fc:86:da:7a:33:4a:7f:d8:f3:56:de:30:
         5d:4e:13:99:52:6c:76:78:a3:cd:24:e2:48:75:c6:15:c9:c0:
         7f:fa:5a:e2:f7:ed:0c:8c:25:c7:9f:48:df:c2:77:0b:ee:c1:
         07:8e:04:e3:ea:3f:5d:ee:dc:aa:d1:23:26:dd:fb:b8:fe:76:
         4d:59:82:43:7c:e7:3f:55:18:34:af:a6:09:e3:b0:76:25:68:
         4a:79:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:22 2024 by rpki-client on console-fra.rpki-client.org