Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File:                     g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier:          W3zAS5oJPvxNW7eZFIIsXHK9l9rM1qXN2/VUfO+VZVU=
Subject key identifier:   96:8E:F7:18:56:35:DB:F0:B9:1D:FC:BA:B0:60:6A:4E:3B:8C:92:6E
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer:       /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial:       019369344011A89A32B9FFF741EC87081B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 16:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:52 +0000
Files and hashes:         1: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: Nv3/EpHWR4xy1b+8FEwAzQOIUynZeSndgiKiG5EYUEw=)
                          2: ryJGCtubQAfzHgJ4NfxS6xdoGag.roa (hash: LNvfL+DozLIQUbUhEQWwxFjOX1rMEyvG740v49nwy7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:40:11:a8:9a:32:b9:ff:f7:41:ec:87:08:1b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
        Validity
            Not Before: Nov 26 16:00:52 2024 GMT
            Not After : Nov 27 16:00:52 2024 GMT
        Subject: CN=968ef7185635dbf0b91dfcbab0606a4e3b8c926e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:02:ef:89:65:dd:ee:54:61:09:4d:a5:c1:
                    40:54:64:d2:10:19:9b:a6:87:1b:e2:71:ac:54:b2:
                    8f:50:f1:c0:73:61:c6:cb:54:7b:7f:50:12:3d:af:
                    7d:47:d0:9d:ab:31:8b:e1:1d:f9:5f:88:3c:6a:bd:
                    10:7b:a6:4b:7f:d0:ad:da:41:8b:8b:39:ca:3a:0b:
                    46:33:c4:42:89:3c:cd:73:98:02:c4:d8:83:d9:21:
                    f1:c3:5a:16:93:47:a7:c4:0b:74:85:4a:5b:04:ea:
                    ea:48:10:46:0c:fc:21:96:2a:09:cf:70:24:63:df:
                    dd:93:cd:dc:8a:d3:b4:c7:17:2c:18:ee:64:46:8a:
                    2f:56:37:9b:a8:03:fe:c2:4d:8d:36:0b:ac:3c:2a:
                    98:e3:6c:d2:5a:df:39:6b:dc:02:73:4c:14:16:b5:
                    84:a2:5d:f1:14:c4:ee:7a:41:70:b9:2e:7a:b2:22:
                    e1:ef:2e:42:2a:89:44:e6:7f:d6:97:fd:1e:56:da:
                    f1:ef:c8:7c:45:bf:db:66:3f:2e:6d:d9:43:f4:21:
                    90:7a:36:31:b4:c7:a6:0e:b6:36:05:d2:56:63:da:
                    1a:1a:89:a6:82:9a:00:b0:a6:61:49:97:ae:5f:03:
                    06:43:71:88:04:e6:62:55:a8:4d:46:c5:62:6a:69:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:F7:18:56:35:DB:F0:B9:1D:FC:BA:B0:60:6A:4E:3B:8C:92:6E
            X509v3 Authority Key Identifier:
                keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4f:1c:4d:f5:9b:a5:50:7c:1b:75:ea:7d:d4:fa:df:34:f3:
         66:19:dc:f6:76:55:07:3e:54:f3:b8:95:ac:c3:50:d2:f6:0e:
         77:13:ea:39:7a:8c:99:d4:00:35:6a:15:31:fb:be:2b:69:6f:
         2e:ed:59:d7:aa:3d:cc:e6:eb:bc:ec:ed:a3:54:fc:a6:86:c3:
         10:11:2a:8b:78:3d:23:48:19:af:e9:1f:1c:b6:10:99:14:ae:
         42:58:b4:ad:68:fe:f8:fb:61:1c:87:e8:18:e4:77:47:40:aa:
         26:04:d7:e6:34:27:43:9d:30:15:5f:4c:cc:cb:56:8e:66:10:
         87:93:8e:79:da:19:f0:75:36:ea:e6:ca:44:fd:bc:ca:6e:c2:
         e8:ff:14:c4:87:ea:4c:01:63:09:42:12:e8:eb:cf:70:ac:fb:
         83:58:bc:99:c1:0e:f4:79:70:6b:0b:1d:6d:4a:bd:11:88:9d:
         1d:0b:34:ba:2a:cc:01:ae:f2:76:c4:74:57:ff:8c:77:38:34:
         9b:08:f5:b7:71:23:a6:3d:6b:c8:8c:c7:c5:31:20:9d:34:ec:
         f9:a1:52:5f:0d:d3:51:22:28:e5:80:d6:f8:68:6e:c8:96:ed:
         ae:14:5b:8d:d0:0d:6b:70:06:ec:b6:0a:40:57:a5:35:ae:59:
         02:14:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:49 2024 by rpki-client on console-fra.rpki-client.org