Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
File:                     cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json)
Hash identifier:          Jq1o3bW6BBI7eU6nY+0nt5ILK9AzJBEZQSGpZCFS6Nw=
Subject key identifier:   93:4C:87:91:D3:BD:B7:5A:94:DD:92:16:C5:1F:E0:E4:3E:A7:E0:0F
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Certificate issuer:       /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial:       019369D8BFB91F195D96F22C92499C38833D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:00:32 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:32 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:32 +0000
Files and hashes:         1: 7tQchNAKP6-9F52RjymgJ8y05x8.roa (hash: tlwPXSv9WqRU7mhrUU9Ck8Xhov0AoWcY7AV8ZswqmPg=)
                          2: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: Bx57qDz4I0kDiI8pvVJOBm/bj1ZHGJKs0aYfBAX5TiQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:bf:b9:1f:19:5d:96:f2:2c:92:49:9c:38:83:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
        Validity
            Not Before: Nov 26 19:00:32 2024 GMT
            Not After : Nov 27 19:00:32 2024 GMT
        Subject: CN=934c8791d3bdb75a94dd9216c51fe0e43ea7e00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:0b:5a:fa:f5:da:a5:5c:b8:1d:b3:f1:3e:
                    0c:9c:d3:0b:19:0e:36:e1:3b:1d:c1:8a:d2:39:2b:
                    5b:c1:39:d6:30:35:6f:db:21:07:38:62:d9:79:36:
                    c6:ad:03:87:ef:14:56:c8:e0:ee:80:55:d6:0e:1a:
                    2f:3b:36:ca:5a:a9:22:17:fd:b4:37:1c:4d:9b:56:
                    1c:0f:7e:d8:84:6b:92:19:b1:80:1b:51:23:06:49:
                    3b:fa:69:79:b9:d9:54:52:2f:4e:63:d9:80:b9:99:
                    9b:ff:d7:aa:22:dd:dd:8c:3e:74:d2:fc:2e:29:78:
                    39:69:4e:e0:dd:27:4c:1f:fb:87:10:49:68:7d:3d:
                    d5:77:d7:81:cf:7d:5f:49:40:d5:ba:6f:a6:9f:b1:
                    d4:91:f5:a0:07:08:ad:74:e3:70:d7:8c:ec:5c:f5:
                    48:79:ae:79:2e:04:5a:55:95:a2:dc:9f:97:8b:67:
                    11:e9:6e:e8:e8:81:68:38:7d:61:33:ee:e1:54:aa:
                    cf:f4:ff:8e:95:fb:d0:d4:d0:2c:df:bd:bb:d7:4a:
                    64:c8:8c:7f:25:a7:74:51:c5:47:92:00:a8:d4:5c:
                    16:53:bf:5a:c5:87:3f:47:d8:3e:68:ae:a2:6e:0d:
                    54:76:43:04:c2:c0:83:80:eb:92:a3:23:58:2b:ba:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4C:87:91:D3:BD:B7:5A:94:DD:92:16:C5:1F:E0:E4:3E:A7:E0:0F
            X509v3 Authority Key Identifier:
                keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:94:17:dd:a3:cb:77:ef:5a:af:ab:99:d5:7c:80:56:8a:1f:
         e4:f7:bb:74:0b:82:31:54:d6:14:c4:62:40:98:9e:c3:d2:f8:
         31:3d:22:eb:49:21:34:bc:91:e0:67:34:dd:d7:6a:5f:56:9b:
         a9:36:5c:88:9f:57:69:a4:8f:f3:8b:3e:a7:1f:db:94:f6:d6:
         c4:d0:ec:af:f0:93:1d:63:1e:61:ae:4c:7f:c2:ab:46:c7:58:
         ce:e4:ff:f6:76:05:67:e6:b3:da:7e:76:c3:e9:bb:14:75:a1:
         7f:f8:18:f4:64:73:a5:84:af:64:80:0c:e0:2c:01:fb:6f:10:
         79:1d:17:17:5b:91:c3:c9:68:b3:69:e0:1c:fe:27:0c:46:f3:
         9f:c4:47:75:7c:12:d9:13:9d:94:99:e8:7a:ac:eb:40:a4:4b:
         fc:bc:5c:ba:aa:cb:c0:24:0b:27:59:16:fb:e4:4f:76:4f:e7:
         1d:86:97:18:b1:60:7b:1e:43:7d:fc:2b:1b:be:c1:01:ff:a4:
         9f:31:54:4a:52:38:10:a3:7d:86:03:9c:ac:d0:d8:a6:61:de:
         89:13:85:9b:92:18:e3:67:8b:0c:f0:e1:7f:91:67:5a:af:0f:
         94:cc:19:99:12:0d:ff:dc:47:48:cc:06:5a:c6:a2:03:87:7b:
         51:38:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:56 2024 by rpki-client on console-fra.rpki-client.org