Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          i37J5y08lEtWjwKN4vJqckm3QXKN3HJ3uJpF4Wq6rTw=
Subject key identifier:   83:BB:36:00:77:2B:DA:BA:52:77:24:81:D7:52:FF:BA:55:A3:63:32
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       019358787D077A24490B501CF62B73B2BA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 10:01:51 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:51 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:51 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: QYyrgVTBvn8CpazC4LXakWK+AcSD5SGnOCf8rSg15Hk=)
                          2: oBEWp-o92Jtwpn4k7KxuXyRcDhs.roa (hash: OqY9DI46vvCPiYHxi6E71OdJZPp3MyhNtEGXzGL8cuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:7d:07:7a:24:49:0b:50:1c:f6:2b:73:b2:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: Nov 23 10:01:51 2024 GMT
            Not After : Nov 24 10:01:51 2024 GMT
        Subject: CN=83bb3600772bdaba52772481d752ffba55a36332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:82:de:ac:d3:21:34:18:d2:1c:8c:05:91:
                    54:b6:f8:e3:02:02:b8:ac:27:8e:85:4f:be:6c:29:
                    50:21:de:1a:12:fa:6d:b2:2e:0b:cd:47:11:84:51:
                    7d:45:c0:2f:f4:40:2d:ee:65:90:07:ff:86:f3:f6:
                    8f:f7:41:3a:5e:88:64:f5:a2:44:ce:85:4f:3e:ea:
                    55:f3:14:ea:2c:dd:f9:e8:be:98:4d:58:35:e1:0e:
                    81:1e:89:97:1d:b2:51:24:8a:a0:c2:94:6d:53:cf:
                    78:03:02:7c:fc:dc:2f:83:9a:cc:6c:de:71:b8:c7:
                    a8:48:58:51:ab:c6:f1:33:95:7b:52:44:ee:f5:91:
                    b2:25:cd:45:6b:ac:81:4e:12:57:f3:73:16:14:0e:
                    01:ce:a9:50:83:43:5b:87:be:3a:fa:71:09:df:c7:
                    79:af:50:b9:17:7d:29:b9:2d:bc:4e:b0:fa:73:ae:
                    1b:71:5c:2e:04:40:6f:db:e0:b5:6a:04:14:03:7d:
                    56:62:ed:8b:c9:ec:db:34:52:3f:b2:55:86:31:c1:
                    21:cb:73:d6:73:03:e4:da:6d:8f:1b:e6:1b:ea:af:
                    9a:07:5d:c6:5b:5b:74:e1:6b:1e:1f:36:23:21:53:
                    a2:b5:5b:94:6c:98:8e:30:43:23:0f:a9:2f:61:ff:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BB:36:00:77:2B:DA:BA:52:77:24:81:D7:52:FF:BA:55:A3:63:32
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:77:d3:85:ba:19:1c:9d:9e:2b:b3:dd:01:d3:c7:7e:0e:
         07:e4:ac:e0:92:41:e4:10:7f:7d:0e:f2:d2:e0:8c:49:a5:c0:
         dc:f6:43:cc:89:44:36:60:72:53:7b:79:08:ec:e5:87:84:c9:
         70:cd:03:ae:1a:67:b9:78:d5:5b:a1:b0:8c:70:d2:78:b8:fb:
         ea:cb:2d:4d:68:17:3d:a1:d1:c9:b1:8f:85:be:94:fc:d4:f3:
         51:04:12:37:d3:49:d2:e0:ec:57:be:6a:35:cf:a8:5e:c4:f5:
         be:2f:3c:e6:b9:88:fa:90:a9:82:ac:02:9b:34:ea:24:73:a3:
         e0:dd:10:7b:a0:89:6d:20:a4:f4:3e:92:b1:c6:e8:e4:fb:ed:
         12:df:b4:aa:4e:15:6c:c8:57:74:61:4d:f5:ff:e2:f5:52:50:
         4b:a5:0f:ca:fe:e8:3a:60:81:33:7b:9f:ea:ae:c1:48:f3:df:
         8f:64:4f:98:28:82:04:72:53:26:f8:3f:44:bb:aa:cc:e4:d2:
         2f:7e:83:75:81:59:3a:e2:b4:6e:db:8d:b4:cc:d7:e0:12:0b:
         da:e4:6b:7d:b0:e2:b0:85:e6:69:c1:9b:46:aa:2c:66:b6:17:
         12:d9:29:9e:05:17:1d:b3:f6:c2:b0:bd:1b:e6:5b:92:8b:57:
         db:84:81:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:37 2024 by rpki-client on console-fra.rpki-client.org