Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File:                     j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier:          yVV0BvieI+oJIMVdfwBTPFPFOTiX4R3/2M2FX4SxnYc=
Subject key identifier:   40:C5:36:C8:A8:AA:6F:6F:3C:03:B4:F9:37:07:E4:3A:3C:6C:F6:ED
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer:       /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial:       01936A46DCBA0BE9D8CC759865BAC2E9F890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 21:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:49 +0000
Files and hashes:         1: YpqCf1V1GnEiv0lX06Kmjoh_2jQ.roa (hash: GLlC4YIVy2Mw8NcK4WTqYcMufXy2vaQnJ1DWSbaUY9M=)
                          2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: quNFxv1Ptl9KKz41htrxT6KOxL7Orjxx7wln/BIFuf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:dc:ba:0b:e9:d8:cc:75:98:65:ba:c2:e9:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
        Validity
            Not Before: Nov 26 21:00:49 2024 GMT
            Not After : Nov 27 21:00:49 2024 GMT
        Subject: CN=40c536c8a8aa6f6f3c03b4f93707e43a3c6cf6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:2d:d1:23:75:65:bf:ca:31:17:87:03:f9:
                    08:40:7c:c6:7b:15:b4:00:84:4a:a4:52:1a:11:1d:
                    95:91:42:78:24:45:7d:40:78:27:b5:e7:0b:a2:40:
                    19:42:60:e0:45:9b:f3:6a:54:a8:e6:2d:25:37:75:
                    72:c4:02:24:51:66:2c:73:40:04:60:35:58:a2:e5:
                    76:56:b0:a8:a1:91:0e:1d:c7:cc:15:d8:bc:25:6e:
                    ee:e8:97:96:92:8a:c6:aa:9c:f4:e1:9e:87:19:06:
                    b1:c4:fe:70:6b:8f:94:db:82:69:73:c5:e8:d2:bd:
                    1b:15:cd:f5:08:83:1f:6f:90:06:2b:bd:ed:4d:e4:
                    72:5c:02:b1:f4:cc:53:05:31:21:86:1d:3d:45:ac:
                    eb:18:d0:3b:47:a2:c5:ec:11:92:1b:82:49:0a:ed:
                    36:5b:0d:36:6c:4b:84:2b:9e:11:a5:d7:25:18:67:
                    74:78:35:19:11:98:86:76:13:8e:84:d1:17:58:7b:
                    09:37:0c:4b:2e:2e:e0:68:54:ed:73:d5:ca:3c:76:
                    06:30:57:e3:b5:38:4f:ab:5d:d4:91:71:93:95:6d:
                    5f:0c:15:14:0d:6c:1f:61:a5:74:42:ac:a7:46:cb:
                    f5:1c:d7:94:70:50:ae:e2:40:f2:ec:2c:40:f9:dd:
                    f2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:36:C8:A8:AA:6F:6F:3C:03:B4:F9:37:07:E4:3A:3C:6C:F6:ED
            X509v3 Authority Key Identifier:
                keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:da:77:52:b8:22:a9:4f:34:dd:45:d6:51:86:e2:df:a8:ed:
         08:bf:91:87:8f:26:45:74:63:f7:fe:39:59:b7:89:80:cd:24:
         0d:48:01:40:f0:ce:86:8f:df:c8:32:66:3b:96:5a:b7:2f:1b:
         ae:2c:f2:95:fa:77:3c:ae:d1:82:4d:4d:b9:cb:1e:16:76:6f:
         66:0e:53:71:81:e0:64:b6:1f:6d:a3:7e:0f:31:98:c1:1f:21:
         76:57:72:6e:6f:e5:26:b6:30:66:99:fd:e2:9e:5f:07:99:0b:
         0b:8b:01:bb:7b:42:43:64:a0:7c:12:88:52:cc:e4:2c:dd:2e:
         d4:e7:92:26:d6:6c:1c:44:3a:a6:18:cd:cd:5f:54:87:55:8b:
         11:62:ae:7e:5e:44:e4:a6:b9:81:f3:d1:78:f8:8c:5e:ce:32:
         fc:3e:48:39:83:e8:3d:16:55:6a:9b:da:2d:54:1c:31:d4:25:
         16:8c:25:d4:47:bc:89:2c:8a:c5:d2:75:66:09:68:c4:97:1b:
         93:e7:a5:7b:4b:50:7b:8d:8c:dc:46:27:51:cb:de:09:8b:a7:
         7e:ba:bf:1f:e1:df:d1:35:c7:d0:7c:b0:41:c7:8a:a2:57:84:
         99:e0:d0:c2:de:0b:71:d5:83:9d:ed:38:d7:00:31:a1:2c:f8:
         81:a9:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:53 2024 by rpki-client on console-fra.rpki-client.org