Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
File:                     Hd51apttFAAMPhUNW31glbdhP-Q.mft (raw, json)
Hash identifier:          C0icB0hRZ0ZfRX5RS6dd/Ol2M4sZNYbpJD5tEP4l714=
Subject key identifier:   93:C5:B8:B2:29:B1:F3:7E:4B:B8:56:38:5B:9A:9A:B5:74:D8:49:0B
Authority key identifier: 1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
Certificate issuer:       /CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Certificate serial:       01936A4675B4150D925C40BB43D36684AF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 21:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:22 +0000
Files and hashes:         1: Hd51apttFAAMPhUNW31glbdhP-Q.crl (hash: dyMFE3YcRPcWTpAD38Dju0s0IJXLHLlctE6s7971QXM=)
                          2: rpbmrZHZIGrpxRzULVKjF2Cni6c.roa (hash: 2iSTWhQbLgPjJ51CvpMHWSbhkkmuW4cm/6Xplt1vdTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:75:b4:15:0d:92:5c:40:bb:43:d3:66:84:af:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
        Validity
            Not Before: Nov 26 21:00:22 2024 GMT
            Not After : Nov 27 21:00:22 2024 GMT
        Subject: CN=93c5b8b229b1f37e4bb856385b9a9ab574d8490b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:19:6d:f1:18:c4:e4:48:95:9c:e9:87:1a:
                    20:68:5b:16:28:88:16:fd:46:9d:a4:56:a6:25:20:
                    f6:00:cc:a9:37:15:e9:d9:e2:5a:62:ea:a7:d9:e9:
                    0e:86:a6:95:a8:f1:de:45:8a:be:8f:18:65:32:93:
                    1d:2f:de:95:d2:53:88:bc:44:e6:6f:9a:0b:dc:85:
                    a1:98:96:71:8e:65:ad:36:eb:8f:b7:f6:d7:4e:2c:
                    78:8f:3a:d7:da:79:8c:fd:a5:c2:e9:98:68:83:5b:
                    e5:9d:9d:4f:66:49:48:c6:e6:d5:67:06:34:4f:40:
                    68:75:66:a5:5b:f0:19:1f:b8:56:13:87:d3:42:19:
                    49:27:c1:aa:67:48:de:2c:44:3b:fa:7c:8c:74:9c:
                    e1:75:65:a7:08:9d:20:f7:80:51:9f:01:7d:72:da:
                    51:b1:ae:dc:c8:7e:fd:76:15:8d:a5:78:ec:64:33:
                    f2:5c:38:16:68:5c:00:bc:cd:db:9f:5e:e9:8d:5c:
                    7f:b8:cf:a0:f9:ac:f4:1f:0c:9f:1e:f7:ed:2b:9f:
                    16:aa:9e:40:ee:0c:1a:12:fd:78:1d:dd:dc:73:0f:
                    f1:a7:4e:9a:ba:95:5d:47:36:31:8e:ae:9a:49:75:
                    94:fb:70:a9:e1:c3:7e:c6:89:aa:d6:20:61:0f:c9:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C5:B8:B2:29:B1:F3:7E:4B:B8:56:38:5B:9A:9A:B5:74:D8:49:0B
            X509v3 Authority Key Identifier:
                keyid:1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:88:45:ad:7a:d6:aa:6a:3c:95:f1:42:4d:e5:4a:04:a2:0b:
         ca:90:6a:93:f9:d0:af:c4:64:b4:98:56:ce:ef:d1:c8:08:f2:
         03:37:92:ce:1d:d1:72:61:6c:5b:ac:41:c3:0b:ea:cd:09:07:
         9e:77:32:6a:53:49:a1:01:1f:a1:d2:0b:cb:8e:14:90:79:ea:
         64:28:d4:84:2e:60:fd:ab:8c:10:c4:7c:87:a3:27:ab:36:4a:
         60:07:db:4f:b6:1b:33:81:b7:16:8d:85:3c:9f:12:74:e0:8b:
         8e:85:db:d8:e5:bc:0c:81:5b:c6:b3:53:ee:16:ad:9f:d5:07:
         b6:de:a5:31:fa:4d:b1:af:ed:b4:d7:b4:ea:6f:af:1d:3a:58:
         78:df:13:3d:6a:14:1c:c5:d4:f4:eb:d0:79:94:3c:f5:e4:43:
         b8:c4:56:98:52:20:24:b8:88:ea:ee:4a:73:b4:23:8d:56:96:
         c2:3b:90:41:94:e9:b1:ed:28:3e:de:74:ea:94:74:af:55:0d:
         b0:00:8a:09:cd:54:90:75:14:cf:0a:ba:cb:1b:b7:93:de:ae:
         fa:4d:f9:99:ff:b4:84:93:19:36:d7:9f:a9:3b:6e:06:e6:89:
         92:f6:b2:2f:f0:76:25:09:b0:ce:5b:da:b7:9a:83:19:59:f6:
         65:dd:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:17 2024 by rpki-client on console-ams.rpki-client.org