Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File:                     5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier:          sl2eLWs1U6eGSx1t37rqGWTyziflM8rTN7ETx7szKNg=
Subject key identifier:   50:D4:E8:94:28:95:21:0F:94:F0:69:18:79:67:3F:D3:16:BE:D6:F8
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer:       /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial:       0193549ACD492CC57C305F424463822DA92F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 16:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:51 +0000
Files and hashes:         1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: ModqNqx8v1dbi3ZJvowxv6xGSSHS64sULIiYd1S13yM=)
                          2: VjjciUtEQToh6R7u5B17S94GYu0.roa (hash: jsChcAzBoAWnwOg2ht7j6lIZL6vGfNZT059GwWbQxnw=)
                          3: Yg6iJyNu_zvQV2x7kmzYbTREUF0.roa (hash: UTlaqhYCoY+oHZ+seZylPNSakMy6I0P7yu/Ali0kir8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:cd:49:2c:c5:7c:30:5f:42:44:63:82:2d:a9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
        Validity
            Not Before: Nov 22 16:00:51 2024 GMT
            Not After : Nov 23 16:00:51 2024 GMT
        Subject: CN=50d4e8942895210f94f0691879673fd316bed6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:b8:b9:be:6c:f2:0b:9d:6d:d5:5d:bb:92:
                    4c:a6:39:16:ec:20:1b:22:6c:7a:86:17:f4:2f:db:
                    b5:ca:8b:6a:a0:58:47:1c:5b:5d:6d:c3:b1:78:65:
                    a2:63:57:61:57:ec:b1:61:72:39:8e:18:9f:a4:a0:
                    47:51:70:a2:1e:07:9a:3c:72:44:3d:e7:1c:d4:95:
                    7b:2b:63:33:cb:41:53:f5:f9:10:c0:a3:ed:2f:0d:
                    39:19:2f:7b:26:82:50:c6:e3:e9:06:c1:96:24:13:
                    df:08:f4:5e:e1:93:2e:3d:59:73:1c:63:0d:bf:2a:
                    bc:97:32:3c:0a:34:dc:b8:a0:0f:8f:16:71:84:57:
                    f4:c7:03:2c:aa:91:f9:b5:73:00:07:ca:33:69:3d:
                    2c:13:13:4a:44:f8:01:f3:10:b6:dc:80:04:bf:4f:
                    e5:cd:3a:f5:c1:81:63:93:d9:e8:c6:54:0b:de:73:
                    e4:e3:c3:71:b2:64:76:7c:b8:9e:d8:6e:e9:2d:db:
                    03:54:53:f7:3c:c6:ac:26:3e:46:98:a8:03:a2:23:
                    91:85:5e:8f:bc:ed:cb:a8:14:be:97:2d:08:33:e5:
                    03:63:f2:12:f3:10:d8:e6:23:58:e1:0e:27:fb:be:
                    7f:9f:6e:d9:9b:7d:be:1e:5c:10:74:24:2c:02:8a:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D4:E8:94:28:95:21:0F:94:F0:69:18:79:67:3F:D3:16:BE:D6:F8
            X509v3 Authority Key Identifier:
                keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:eb:b5:bf:64:2a:13:36:6e:72:28:d2:d1:79:02:86:36:
         dc:5b:c0:f9:c3:ff:03:c1:ea:b4:9c:c7:12:35:31:3d:4d:e2:
         a8:18:3c:16:53:0b:05:43:14:9b:3f:5e:62:51:78:4a:f3:ce:
         78:82:36:dc:15:5b:20:c7:23:4b:7d:d4:09:3b:c8:4d:b6:a3:
         45:fb:93:19:e4:21:17:a3:40:3a:81:00:36:4a:c2:45:48:f4:
         5f:4f:ef:02:39:b4:95:13:c0:fa:e7:89:c1:a6:52:2e:22:ff:
         10:8a:6e:d3:b6:0a:8c:f9:29:01:bf:08:28:03:c3:66:b0:2e:
         12:db:c2:a4:ac:db:2b:77:19:65:d0:da:05:ec:39:a4:84:cf:
         bd:7c:b9:9a:9b:ca:6a:55:fc:0f:6e:02:9e:a9:9f:be:40:d2:
         a6:7a:79:4f:8c:0a:bd:49:ac:a8:bb:4f:e4:24:12:c5:eb:35:
         c5:b4:d6:52:88:c8:42:e3:52:4a:09:c8:9a:f5:1c:f9:b1:e9:
         e6:26:47:88:6a:8b:52:33:c7:5a:66:4b:25:80:e9:57:65:9e:
         a2:6e:41:4d:1b:43:99:5c:6f:0e:dd:b3:f9:8f:1b:8f:0a:2d:
         05:24:08:85:22:4b:0b:d7:f2:87:e3:a4:89:1f:24:07:54:06:
         01:6f:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:16 2024 by rpki-client on console-fra.rpki-client.org