Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
File:                     AyuMVE4N68_W11VNFZXwRMIFB4M.mft (raw, json)
Hash identifier:          eLDb4aEPi7scEbHBCE5uxOt4wNuJ4nkOIzhDwJS9vDc=
Subject key identifier:   1D:7D:DD:3B:B3:F6:82:20:B7:0C:CD:0A:B7:22:1F:FE:9C:97:C0:FA
Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
Certificate issuer:       /CN=032b8c544e0debcfd6d7554d1595f044c2050783
Certificate serial:       01936A468FD5267B57E8EDB4B590C9767AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 21:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:29 +0000
Files and hashes:         1: 21mqpNfpZUc8_VXnY4UaiK1c1F4.roa (hash: 7eTLfH+oqz6BIpch3RNiPGX/N7skiR0ijS5CCDyOHhg=)
                          2: AyuMVE4N68_W11VNFZXwRMIFB4M.crl (hash: +6XAHFHuSf/XrpYjKVm4cZ035obSBEBvxRgDXurNkoc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:8f:d5:26:7b:57:e8:ed:b4:b5:90:c9:76:7a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783
        Validity
            Not Before: Nov 26 21:00:29 2024 GMT
            Not After : Nov 27 21:00:29 2024 GMT
        Subject: CN=1d7ddd3bb3f68220b70ccd0ab7221ffe9c97c0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:71:95:a1:a8:a2:7a:90:8f:1b:ee:f4:f5:
                    3b:09:e0:8d:ea:6d:02:ab:2a:04:82:e6:3b:10:59:
                    ce:1d:66:40:70:e1:ce:1b:5d:e3:5a:7f:3a:1d:92:
                    d9:d1:14:d9:57:f3:a4:e4:ed:dd:e8:c8:f3:d0:2f:
                    cf:54:39:70:c5:d7:ca:48:49:b5:f3:90:1f:98:f3:
                    16:0b:3f:fe:cb:ec:18:11:c3:45:40:02:f5:29:ae:
                    32:1b:45:99:bf:04:36:c3:52:02:e1:48:45:f5:dd:
                    6d:7c:d5:99:47:06:53:bf:c6:05:76:7e:7f:17:8e:
                    0f:07:99:3b:c7:f6:ed:6a:35:e0:9d:fc:be:cd:b0:
                    c5:e5:99:0c:84:94:ba:35:0e:b0:53:ee:1c:a9:d2:
                    d1:46:26:c2:e3:b1:76:51:2b:c8:17:28:9a:b6:e5:
                    55:34:35:a2:2c:3d:60:37:da:43:cd:07:2e:e5:44:
                    89:4a:24:2a:50:06:b9:02:b7:43:f7:1d:a6:3f:d2:
                    05:b4:19:29:37:14:ae:0b:aa:ca:6c:36:a3:87:db:
                    5e:32:79:54:96:d0:85:56:fb:c2:8e:90:56:10:b1:
                    c3:3b:fb:84:3f:22:8e:64:52:75:6e:5b:0d:6f:7a:
                    ae:60:86:64:49:02:eb:00:34:00:e0:68:52:51:4e:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7D:DD:3B:B3:F6:82:20:B7:0C:CD:0A:B7:22:1F:FE:9C:97:C0:FA
            X509v3 Authority Key Identifier:
                keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:da:6c:b3:f6:13:a5:76:4f:95:0e:13:23:09:90:ee:7e:55:
         4f:88:dc:4d:89:d1:ae:79:f8:65:7f:a2:3b:fb:aa:1a:a5:26:
         d6:b4:37:1b:16:29:70:c5:c5:46:b3:87:07:bf:ca:72:75:eb:
         c0:f0:d1:a6:51:e5:a8:59:0b:aa:c7:03:46:08:58:0e:27:d1:
         f2:88:8a:b4:d8:c9:24:98:74:51:6e:e6:1d:da:80:c2:22:18:
         0a:da:23:c8:16:a9:8e:4e:96:11:ec:2d:cb:61:8f:a2:57:9d:
         c4:25:3e:9d:c6:ac:25:cd:49:e4:f0:a8:18:58:0a:60:a1:33:
         1c:d0:5d:03:1e:15:94:d6:13:a0:7c:5d:61:45:52:45:d8:41:
         5c:26:f6:8c:de:d4:15:bd:52:e6:05:f8:6f:03:9c:78:99:f2:
         af:7a:29:15:bf:f9:3d:7a:59:09:c5:85:ec:a4:31:1e:c9:23:
         29:39:ac:1d:f5:39:89:6a:89:09:42:40:07:97:1d:1f:93:e3:
         b0:49:93:6f:2b:5e:f9:14:2a:43:23:c3:bc:b5:4c:37:c0:f7:
         4e:67:e3:0a:8a:42:53:d8:63:bc:1a:5a:b8:b7:5d:71:bb:32:
         67:13:41:ac:df:4e:d2:2e:1e:26:bb:5e:99:15:7b:8c:c2:3d:
         fb:8c:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:15 2024 by rpki-client on console-ams.rpki-client.org