Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File:                     EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier:          uiuqJRVCm0cjfkReIkeX+gIkwRTNAdGzUAyjrpXyNqA=
Subject key identifier:   20:26:D0:45:BA:F5:D8:9F:BB:74:79:17:3A:B6:E1:69:11:4A:E0:25
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer:       /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial:       01936AB42F4BF08D15652DD99F18FE9E2C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 23:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:13 +0000
Files and hashes:         1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: aWpEK2ebNDlZekGrxY1PCpMfYeYx2t1lAw38PMS+bmo=)
                          2: HZ-xV0rVs4hgJM9Mt1g6CC1EC2Y.roa (hash: fX25DvxC8ck7d5KYchNbL6AlgFroAvEOi7Y6UzUbESg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:2f:4b:f0:8d:15:65:2d:d9:9f:18:fe:9e:2c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
        Validity
            Not Before: Nov 26 23:00:13 2024 GMT
            Not After : Nov 27 23:00:13 2024 GMT
        Subject: CN=2026d045baf5d89fbb7479173ab6e169114ae025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:13:37:32:f4:ef:33:2c:03:92:68:40:ef:
                    26:24:7e:89:53:9d:e9:2d:1e:13:46:2a:bf:d3:7d:
                    0a:b6:5e:a1:84:94:24:f1:6c:6e:1b:09:86:43:94:
                    fe:1a:80:1e:2e:7c:e9:d1:7c:6a:f5:c1:f0:d1:6a:
                    13:da:0d:a3:ca:ff:92:11:a5:43:d3:a6:8e:35:84:
                    d9:c5:6e:54:06:d5:a6:bc:8c:6b:45:ef:61:29:9e:
                    f2:3c:1f:00:06:b0:e9:a4:7e:21:2f:72:35:d6:a6:
                    62:99:c4:bd:dd:a6:31:4d:28:4a:a6:5c:13:57:84:
                    ed:f4:2b:a6:b7:d9:2f:e7:62:1c:77:fa:91:0e:50:
                    bf:d5:23:d9:5b:08:94:0d:cd:83:84:12:d5:5e:de:
                    2c:82:6b:fe:e8:b5:4e:d2:ab:3a:95:1d:6e:6e:7a:
                    b9:f2:44:8e:62:30:d3:3f:2a:72:02:dc:e3:b0:e1:
                    2f:11:fa:0b:c0:03:29:b0:ee:46:55:49:1f:94:d8:
                    30:6f:29:10:ea:cf:89:40:cb:d7:12:65:d9:cb:46:
                    1a:bf:d0:56:74:16:ed:f8:07:dc:f7:98:c6:22:4f:
                    73:ef:ba:63:cd:bd:cd:6e:3d:d5:32:0b:d6:e7:41:
                    c6:47:b8:d1:f1:ee:85:47:c2:94:8e:0c:71:b5:68:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:D0:45:BA:F5:D8:9F:BB:74:79:17:3A:B6:E1:69:11:4A:E0:25
            X509v3 Authority Key Identifier:
                keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:d8:cb:53:89:8a:8e:64:94:0d:f0:8e:d0:5d:e5:7e:fa:
         6e:53:58:db:18:a2:f4:82:9f:ea:1d:b1:00:96:a2:cc:8d:80:
         61:e6:85:eb:e9:2e:ae:73:15:e4:1c:cb:e5:ad:d0:aa:bb:3a:
         db:66:2d:03:3c:cc:6b:2d:c8:e5:2f:a4:9a:34:3c:69:a7:7e:
         fb:03:f7:84:ab:50:ec:2c:6b:a7:a8:4e:d8:23:ae:cd:e5:56:
         4c:fa:ea:f5:db:58:d6:18:11:8b:ad:9e:d0:7e:a9:af:0f:0a:
         9e:65:ed:89:c5:2a:45:6b:eb:5f:9a:82:90:f8:05:c7:5e:6a:
         0a:bf:48:ff:61:2d:12:7f:b3:6e:93:3f:9d:f0:cb:2b:8f:3f:
         1d:5b:5c:ed:d2:f5:36:4d:a3:bd:5a:e8:67:b9:93:2e:b0:99:
         73:63:c4:32:b8:97:f5:5b:fa:8f:f2:8e:21:f7:aa:67:29:92:
         d5:9e:7a:3a:60:f6:73:d4:68:50:b1:cd:43:4f:8a:92:de:40:
         20:ea:e2:d8:18:b5:ee:76:a0:de:fc:34:1b:52:f6:7e:0f:9d:
         6c:6f:66:27:0c:63:18:d6:23:34:88:89:46:c5:65:9a:9f:9d:
         21:2d:e3:31:da:42:ef:4a:a2:94:e6:32:e5:ff:59:0a:c7:2f:
         cd:46:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:30 2024 by rpki-client on console-fra.rpki-client.org