Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File:                     cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier:          XYXLLSucKqXvk4waG7LXOMhwJS88Vmk8+GApr2qIMDI=
Subject key identifier:   01:20:11:B7:B7:F7:85:AE:A7:4C:5D:65:0A:52:24:BB:49:F8:D3:69
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer:       /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial:       0193688F52EB171813D10A3FE661873F36CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 13:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:43 +0000
Files and hashes:         1: SwzNDHWL9pxrG6IrFeaKeyqX1Dw.roa (hash: UmDZnmcYAF8zGPeyWohmwntxmXal+uCYkTXeiwGvYZE=)
                          2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: mHDZR89TpxKrzYEMYx/9MxP9qJU3EFlytics5aPEOvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:52:eb:17:18:13:d1:0a:3f:e6:61:87:3f:36:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
        Validity
            Not Before: Nov 26 13:00:43 2024 GMT
            Not After : Nov 27 13:00:43 2024 GMT
        Subject: CN=012011b7b7f785aea74c5d650a5224bb49f8d369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:a7:3a:f5:fa:d4:f6:8c:05:fb:b2:a3:70:
                    9e:43:ef:8c:f7:2e:68:d3:59:a8:40:a6:22:25:e4:
                    04:54:20:87:36:75:1f:d3:46:0b:77:25:31:9c:25:
                    a6:12:30:ff:1c:9a:8e:f8:55:9d:fd:a9:58:31:7d:
                    a7:f2:23:c2:ae:b0:8c:3b:ee:3d:b7:f7:b7:b1:4c:
                    0d:a3:40:da:d4:cc:9e:e0:b3:aa:50:3f:9c:6f:7e:
                    8f:70:28:19:93:09:39:dd:18:ec:b7:11:ca:1c:4d:
                    08:11:eb:f4:4e:2f:6f:38:ab:91:c2:d2:03:fa:04:
                    c0:cd:54:e3:bb:d4:6c:14:ce:51:d9:01:6d:7e:74:
                    66:14:f8:63:bb:9c:87:c9:4e:54:54:8d:b1:e5:4d:
                    f9:3d:95:15:d0:61:2c:43:df:db:c7:53:e0:17:86:
                    90:c3:44:2b:89:d4:97:4e:a7:a5:65:75:c5:7e:3a:
                    a6:b2:e3:cc:29:6f:45:c4:75:1f:6f:08:23:b5:47:
                    f7:49:09:92:db:fb:71:9a:08:8f:66:64:62:ac:41:
                    a9:27:6e:9b:dd:7c:4d:18:00:fa:1e:7c:76:c1:09:
                    23:59:1a:89:09:4e:71:d4:46:7f:2a:7b:51:21:92:
                    bc:c3:b9:cb:1a:16:4b:b6:03:c3:50:a6:cb:40:55:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:11:B7:B7:F7:85:AE:A7:4C:5D:65:0A:52:24:BB:49:F8:D3:69
            X509v3 Authority Key Identifier:
                keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:55:64:8e:b4:b5:1d:9b:9c:b0:9c:bd:62:78:65:ab:2a:
         a5:d9:75:e4:cd:db:a3:77:bd:af:2c:b4:9a:f9:50:2b:43:98:
         66:26:66:71:5d:6d:84:8c:78:ee:a3:01:c5:b0:37:dd:a1:4c:
         96:21:4a:1d:d6:0c:06:0c:e1:34:ee:67:1a:fb:11:05:7f:31:
         a6:e2:1b:91:33:99:b4:84:35:00:91:c4:54:c8:29:1b:3f:f0:
         24:74:34:07:af:01:c5:6b:68:f8:40:5b:69:33:b7:ca:8f:88:
         eb:83:c8:2d:21:fd:49:d5:12:a9:30:8c:ab:6f:96:5f:69:be:
         d2:24:0d:0f:1f:2a:50:97:b3:a9:45:79:79:c0:eb:b2:f6:d1:
         b5:b9:6c:b7:bd:ec:04:a9:5c:94:c6:fb:ea:44:d8:0e:45:24:
         b6:42:fb:3f:85:10:ce:cd:60:01:bd:d9:23:4e:dd:a2:d0:01:
         59:aa:0d:ff:f3:78:98:6a:bd:e0:ee:d9:32:c2:d1:f3:66:29:
         2d:5c:e0:e5:37:ce:49:7f:eb:d1:94:f8:49:bb:83:7d:5d:a4:
         c5:46:1a:71:a1:50:84:a9:fe:ab:ad:86:d3:10:5b:90:9c:09:
         86:e3:e7:9f:4f:bd:da:21:49:f7:a8:1c:b8:fb:34:11:9b:2f:
         7f:c1:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:13 2024 by rpki-client on console-ams.rpki-client.org