Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File:                     cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier:          Hcpr8od55CSC4CSFcdiys6WpwahsWg7wp6a5SRMpEfM=
Subject key identifier:   F2:EE:C1:DA:78:C9:FB:E3:76:38:40:E5:00:35:8A:CE:7C:1F:7D:9D
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer:       /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial:       01936AEB28FFD7B976AB1F77A70B5BCC8C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 00:00:16 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:16 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:16 +0000
Files and hashes:         1: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: G4+0PVs0+eISZ6+U7aYA7ATmOheitPghPJ+WzkjOvys=)
                          2: yOXTCotS61qj0hRsHJ6DRzbWn78.roa (hash: e8CnwmZpglLytJ5EhLo5pd75T0iOYkagC7maFD/N978=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:28:ff:d7:b9:76:ab:1f:77:a7:0b:5b:cc:8c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
        Validity
            Not Before: Nov 27 00:00:16 2024 GMT
            Not After : Nov 28 00:00:16 2024 GMT
        Subject: CN=f2eec1da78c9fbe3763840e500358ace7c1f7d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:0b:79:ef:58:2d:ea:c8:e7:87:50:45:dc:
                    09:5a:02:c9:43:9c:89:e1:b6:f7:81:b4:c8:fd:59:
                    05:39:a3:e0:de:d3:fa:3d:f7:48:d1:ee:f1:3d:84:
                    0e:7d:62:5b:46:69:a3:8b:f3:58:23:ac:05:1c:9d:
                    23:8a:76:78:d1:de:29:43:9e:c3:d8:23:61:21:2f:
                    68:b5:42:c0:36:e1:1c:a8:fe:0c:c8:6e:ac:77:6e:
                    52:b1:3f:f5:50:ea:03:2e:67:ba:46:db:b7:7d:8a:
                    49:05:84:00:51:d2:3e:e9:f9:5d:47:76:89:09:cf:
                    e2:52:c5:d0:2b:79:84:7b:cc:20:7d:b9:28:6c:e2:
                    2c:76:f8:32:6f:29:9d:f3:c2:b9:c4:53:57:5f:f0:
                    f8:62:69:db:22:e5:46:21:97:30:6e:b9:56:28:8c:
                    bf:9a:6a:54:59:b7:cb:57:e5:4c:47:75:66:82:c1:
                    e6:de:2d:dc:41:12:b3:03:e9:15:81:28:ec:41:bc:
                    af:3a:df:69:f2:b5:03:28:5a:b5:7d:c5:50:7f:dc:
                    14:39:ac:89:2d:6d:59:7e:98:07:01:3f:83:e5:8e:
                    c1:c6:d5:36:f2:be:81:ca:97:ad:81:69:b4:90:56:
                    ab:f2:75:a5:57:13:56:87:76:2a:b5:a8:0a:9e:55:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EE:C1:DA:78:C9:FB:E3:76:38:40:E5:00:35:8A:CE:7C:1F:7D:9D
            X509v3 Authority Key Identifier:
                keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:3b:51:66:bb:7d:25:70:3a:88:d8:70:bf:9e:2c:a2:34:
         fc:5f:42:2c:1b:30:f1:3c:12:e2:7e:e7:9e:a0:9b:a0:ab:16:
         5c:16:c9:8f:98:f2:f2:1e:1f:59:6a:a7:c0:2e:b7:14:97:fa:
         b3:c8:12:fc:e4:f9:0f:48:f2:b2:99:ca:cf:86:28:1e:8c:56:
         a5:68:6c:29:d6:9c:b5:1f:52:56:50:98:d2:b8:c0:9a:ca:6c:
         3d:ce:5c:6d:de:15:04:b8:08:2a:4e:75:ac:f2:f1:c7:89:dc:
         93:96:4c:b8:3d:4d:b7:d1:09:bd:5f:2b:80:49:88:70:69:ff:
         e4:11:8e:8b:0f:3a:2a:77:fa:bb:94:74:06:e2:f0:91:0e:ce:
         6f:63:d0:f7:80:1c:6b:97:09:d9:21:e7:94:78:a0:d7:e5:1e:
         28:35:d0:e5:2e:e2:fb:82:04:b7:5f:48:37:8d:4e:4e:ba:50:
         80:84:4b:93:1c:84:a4:c7:e4:72:8d:13:f2:ef:05:88:27:16:
         8e:34:e3:af:cc:27:eb:ac:b2:63:e9:d2:9b:54:b1:ad:7d:53:
         80:70:47:db:05:01:aa:e5:b2:3c:50:a5:30:43:ea:79:85:fb:
         28:01:cc:47:d4:94:c9:3d:3a:a1:64:b4:52:de:9e:04:19:9b:
         89:0d:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:34:09 2024 by rpki-client on console-ams.rpki-client.org