Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File:                     DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier:          Gxh+3XZF0R1uugWTVBZqf4tGVd425Z4dL71FjWZGHNQ=
Subject key identifier:   38:33:3C:EA:81:81:26:94:9B:46:5C:5A:01:1D:FE:C2:80:B8:29:CC
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer:       /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial:       01938C9D464ADD003DA5A82D21F8C5D713EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number:          138E
Signing time:             Tue 03 Dec 2024 13:02:17 +0000
Manifest this update:     Tue 03 Dec 2024 13:02:17 +0000
Manifest next update:     Wed 04 Dec 2024 13:02:17 +0000
Files and hashes:         1: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: rN6vLYibBmtQipYuk4XqYTVqd2P+1CjltA2TnB/4fu4=)
                          2: ID0SFLbTJzKhniUo-DP-Z8Tb_rY.roa (hash: bMHZDNEKZBMBfzcWan7fgdw0ypb7FpxuGk5AwZgcGBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9d:46:4a:dd:00:3d:a5:a8:2d:21:f8:c5:d7:13:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
        Validity
            Not Before: Dec  3 13:02:17 2024 GMT
            Not After : Dec  4 13:02:17 2024 GMT
        Subject: CN=38333cea818126949b465c5a011dfec280b829cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:b6:c8:5d:ed:f6:ab:4e:d7:81:98:6e:09:
                    79:69:0b:ba:05:70:49:5a:ee:c3:cf:ef:91:f4:3b:
                    71:3d:ca:25:e4:cd:fb:a9:ab:d4:52:97:e9:0d:02:
                    7e:83:5d:69:95:c1:00:35:45:82:12:d7:50:bc:5e:
                    15:51:dc:21:70:e4:31:ff:09:8a:ab:27:27:21:e3:
                    00:0d:8f:9b:bf:90:a9:95:3d:e9:42:ef:e4:d1:0b:
                    a2:cc:a8:a4:07:e6:b5:76:72:62:3e:f1:74:e1:c8:
                    f0:67:33:69:72:fb:b1:e5:81:dc:32:83:08:9f:ff:
                    1f:90:68:62:10:7f:49:79:4b:79:47:0c:ef:a4:d8:
                    eb:a9:ab:c8:8e:f9:89:2a:9c:41:15:3a:f5:69:57:
                    87:ee:66:fa:ba:a2:6c:3b:f9:59:f5:ac:a3:c8:42:
                    b6:99:31:e3:e6:04:80:54:02:d5:e5:d6:cf:81:4e:
                    39:99:4f:72:32:b9:b4:b0:45:8a:03:a0:27:f9:3f:
                    d6:b7:e2:a1:f3:53:1b:3a:71:f1:4f:68:e8:4b:55:
                    8d:72:a6:b0:31:2b:0f:9d:78:9a:1b:80:e6:e6:4d:
                    a7:43:d8:29:cf:21:6a:e1:4e:75:94:0b:ce:cf:6d:
                    8a:85:ec:fa:4b:4b:cb:10:aa:5f:89:39:16:ac:f0:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:33:3C:EA:81:81:26:94:9B:46:5C:5A:01:1D:FE:C2:80:B8:29:CC
            X509v3 Authority Key Identifier:
                keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:22:de:34:eb:6c:04:4c:0c:a4:8f:e5:18:f2:79:d7:04:de:
         fb:a2:34:ab:df:ed:00:4b:7d:cc:da:fd:dc:da:7f:ba:5e:5b:
         7e:a6:74:cb:99:80:18:4d:aa:d4:26:3a:e2:53:ae:5b:a6:82:
         3a:89:6e:ce:ca:70:71:19:81:44:bc:70:f4:8d:81:64:19:55:
         e3:5f:2c:a3:2a:b5:eb:f0:fc:8a:bc:9e:00:eb:76:1f:64:20:
         d3:5a:fa:96:ab:1f:f6:93:cd:ed:41:88:bc:24:8f:4d:22:61:
         dd:e4:90:f1:cb:1d:ef:58:cb:a6:74:41:9e:99:28:14:85:e5:
         96:c6:2e:2b:af:77:6b:95:e7:8a:6f:e2:cc:2b:0e:80:ec:f5:
         d8:7c:f2:04:69:20:34:e3:a2:af:f5:ea:b7:ae:04:ae:f8:f2:
         fa:cd:ec:8a:08:50:96:db:03:8e:58:ca:4f:68:bb:4a:61:d8:
         3e:20:12:1b:64:62:32:0f:e0:95:47:f7:b9:28:d5:15:28:fc:
         b0:47:f4:86:40:e7:ff:53:53:41:f3:60:1d:ef:d8:e2:ab:ef:
         5c:e9:12:e9:46:40:f3:77:65:26:e5:f7:50:7d:15:b6:9a:21:
         7c:8c:54:bd:dc:ff:99:40:2e:77:c6:ab:06:1f:7f:1a:25:2d:
         25:fa:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:14:14 2024 by rpki-client on console-fra.rpki-client.org