Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File:                     48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier:          F+Gm5c45GCPb0ydyT4u4IqfKFZrio6Y4UpWW4GRUYfg=
Subject key identifier:   1F:0A:07:95:51:7E:F0:14:C5:22:97:90:A8:BD:EE:E9:B3:84:53:82
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer:       /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial:       019352078745F86A188B0D30FF8C65779189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 04:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:45 +0000
Files and hashes:         1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: gwLdE1lnCvi7ahcUMQsQGdetD+qKJVGcpzO3B6htVCg=)
                          2: BsI4gal2WXzic8nQiJkMTA14LKk.roa (hash: alJuzYPhgp8NaU7KpNCDNBCSZF9ikWn6agn4bMwWAdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:87:45:f8:6a:18:8b:0d:30:ff:8c:65:77:91:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
        Validity
            Not Before: Nov 22 04:00:45 2024 GMT
            Not After : Nov 23 04:00:45 2024 GMT
        Subject: CN=1f0a0795517ef014c5229790a8bdeee9b3845382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:bb:66:73:be:29:c1:d4:da:d9:34:d4:ff:
                    a4:62:7b:5d:c4:7d:d4:04:f4:12:ce:96:d5:a6:72:
                    d8:28:2c:09:e6:7d:a6:63:da:3c:41:e2:4b:88:fb:
                    74:16:26:f1:0f:81:4b:b3:ac:1d:39:bb:b5:3d:8c:
                    d1:47:96:c4:c0:f3:d8:cb:2e:3c:cb:28:68:3c:7d:
                    55:06:bb:7f:d2:19:51:6d:af:30:05:7a:fd:40:35:
                    65:5f:b2:fd:17:40:a2:b7:d1:ca:45:ed:48:8e:89:
                    d2:62:83:8e:8e:78:a6:06:37:4a:1e:16:7d:71:56:
                    d3:ec:4a:0c:84:e9:ba:51:8e:b6:9a:99:0e:5d:95:
                    c9:db:83:7c:30:04:e7:2f:fe:44:e9:1a:b0:d0:f5:
                    29:d7:84:4e:3a:17:e6:ce:d7:22:66:51:2c:82:e6:
                    73:ff:8b:4a:34:d5:f9:62:67:d1:f5:f1:e9:96:77:
                    44:9a:80:18:73:09:12:dd:36:8f:ee:f9:8b:35:52:
                    01:90:c7:00:8e:d6:4a:21:26:b4:dd:3d:c2:88:d6:
                    13:14:ff:33:98:b4:f4:dd:15:76:b7:12:f8:c3:33:
                    8d:38:25:87:a1:62:39:14:29:2c:43:3e:aa:5a:8c:
                    92:ad:85:22:e4:bd:1c:2a:52:74:9a:8e:f5:57:27:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:07:95:51:7E:F0:14:C5:22:97:90:A8:BD:EE:E9:B3:84:53:82
            X509v3 Authority Key Identifier:
                keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:25:3b:45:6a:5e:ed:b2:1f:d2:d6:29:a0:23:5c:a4:ec:d6:
         ae:53:56:26:fa:d4:da:56:a0:19:dc:8e:65:5f:83:7f:b3:65:
         30:82:c6:11:8b:45:64:59:91:70:e2:21:c5:81:08:a5:1c:40:
         0f:1f:09:2f:ec:3d:01:5b:86:c2:33:1c:63:95:5d:c0:31:5c:
         ff:0d:08:13:17:ed:c7:d0:21:b9:9d:95:8d:13:3e:e4:ae:30:
         0c:66:f4:4b:af:f9:8a:aa:f4:ac:c0:da:b5:bd:ea:02:ec:16:
         b1:48:31:42:a1:6f:de:4f:63:f1:10:d4:dd:13:dd:b8:c1:ab:
         19:c3:94:0d:bb:d2:71:47:86:8f:56:62:71:07:51:36:17:9f:
         12:27:78:f2:ab:a7:80:28:cb:28:32:d2:4f:f6:5c:41:85:fe:
         ee:c2:cc:01:40:94:33:c7:0b:2c:d2:84:91:e2:99:c5:ae:89:
         3a:01:b2:d7:60:91:3c:b6:51:be:ef:59:ac:f3:04:bd:6b:52:
         3c:4c:85:86:b4:1c:cc:0c:82:9e:01:cb:b6:da:25:96:6b:ad:
         6b:ec:dc:bb:ec:7f:36:0a:bf:bf:0d:f3:1f:4c:e8:b6:8b:6c:
         15:c6:4a:e0:64:9e:c4:24:ac:aa:7f:d7:c7:b3:28:46:03:ee:
         52:99:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:01 2024 by rpki-client on console-ams.rpki-client.org