Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File:                     tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier:          NafA1K4zMKWrbzK8PbeJQe1rr4Ms+tS5VP5jGDdWvOM=
Subject key identifier:   E4:D2:A0:7E:AA:E7:DC:C6:9F:F6:4D:D1:81:FD:54:18:85:9D:BE:84
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer:       /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial:       01936AB4FB876DED379D60F4D6A7E9950B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 23:01:05 +0000
Manifest this update:     Tue 26 Nov 2024 23:01:05 +0000
Manifest next update:     Wed 27 Nov 2024 23:01:05 +0000
Files and hashes:         1: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: JQugkP3EohFP05Erz3VRImmOc0Ggy+NJS57IMqK+26o=)
                          2: ua1yiGMv0TpQ_PB1-E4rLGVHm-U.roa (hash: Z1cgpx24Cx93r6vFhK7XgdhrVyoO/JsE4NyuKoyhb1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:fb:87:6d:ed:37:9d:60:f4:d6:a7:e9:95:0b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
        Validity
            Not Before: Nov 26 23:01:05 2024 GMT
            Not After : Nov 27 23:01:05 2024 GMT
        Subject: CN=e4d2a07eaae7dcc69ff64dd181fd5418859dbe84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:e1:92:a3:c0:c4:d1:94:b5:33:b2:d1:d6:
                    4e:42:af:46:1d:44:5e:9e:3f:23:50:11:12:1f:9f:
                    ae:fa:3d:0f:1f:77:12:30:0f:fd:6a:17:d9:5d:4f:
                    5b:63:98:f4:3f:37:3a:fe:61:ec:98:6a:a1:63:60:
                    90:37:f5:67:47:a3:04:fe:1c:9b:2b:03:a0:b5:7b:
                    bd:f0:65:c8:0d:25:61:8b:76:ad:53:c4:f4:34:c1:
                    24:a8:05:3f:61:2a:a8:aa:43:f3:93:21:0b:0a:ac:
                    f9:19:09:ee:01:09:2f:dd:83:6c:20:c4:03:f2:46:
                    91:57:ef:c2:5a:11:26:14:3a:62:ce:61:7b:16:80:
                    e9:e5:dc:ec:24:d5:47:72:0e:4a:fe:96:c9:54:07:
                    1c:de:e4:da:a5:48:16:96:83:3c:59:4a:a3:9b:a6:
                    71:5e:ea:dc:44:da:2c:fa:0b:fe:9c:fc:4c:e1:98:
                    f4:c1:b9:68:01:37:83:d4:f7:60:62:72:92:99:cd:
                    ea:d7:d6:b6:f1:a3:c3:3a:70:2d:c8:f8:cb:a9:f9:
                    23:95:88:31:19:6a:6f:ac:4c:ea:da:12:2f:ff:ba:
                    c4:5c:64:6c:2c:87:d3:92:c8:32:32:7f:46:24:cd:
                    fc:84:48:25:ab:b2:ce:18:b5:76:8c:f6:3c:06:52:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D2:A0:7E:AA:E7:DC:C6:9F:F6:4D:D1:81:FD:54:18:85:9D:BE:84
            X509v3 Authority Key Identifier:
                keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:66:7e:5c:94:50:e2:3c:e2:34:38:bb:0c:17:9b:a8:36:3f:
         55:21:08:63:b1:a4:60:39:4a:74:b3:df:71:fc:78:ed:82:e6:
         3c:28:aa:62:8e:6c:d6:c4:bd:04:80:9f:da:af:f1:66:6a:fb:
         ea:8f:e0:f6:b3:1d:28:61:39:ea:af:67:e5:84:ef:bd:9f:e7:
         f6:bc:9e:21:54:8e:fe:1e:00:5d:67:e4:f9:b0:b1:cc:11:b1:
         48:9f:04:bd:3e:29:da:4b:b3:1e:60:a1:d0:18:1a:bc:3a:ea:
         df:2d:b4:2f:19:19:94:c7:be:0b:db:98:e4:4e:a9:e5:c1:17:
         35:5b:37:cc:6d:06:74:a4:2f:47:09:96:e0:30:75:9e:c1:b0:
         f0:b0:71:7f:3f:b9:20:50:7c:e7:9f:ee:ad:2f:ba:5c:f3:b6:
         0e:00:1f:55:c5:49:1b:cd:a9:e4:d8:05:a9:33:04:e7:da:bf:
         7c:01:da:67:d9:95:16:57:e5:fb:de:d4:04:be:9c:54:19:55:
         5c:b8:10:6a:d3:cf:02:70:8a:82:84:5e:2a:e3:5c:43:35:a1:
         4e:54:d2:70:6b:64:8f:88:02:8c:b9:20:2f:74:e7:69:cb:b7:
         90:8d:a4:66:5d:ec:0e:43:2e:4f:2b:fa:ba:d7:08:d3:7d:d8:
         9a:dc:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:10 2024 by rpki-client on console-ams.rpki-client.org