Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File:                     hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier:          1IgBD6gJKVirECzZkJyDIlLXSClO1ZWyp6qFbraM1T8=
Subject key identifier:   36:54:FF:F5:6E:B5:29:37:3D:6E:2C:E1:61:32:06:FE:5E:76:97:06
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer:       /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial:       01936A46703DD4F2A0CCE64011040C94DAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 21:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:21 +0000
Files and hashes:         1: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: w9HEuBhOVmu4KWfjHJtIqaYvn8jAM9PJ+NTHupP4mak=)
                          2: mlaxVKcE-ubf867N6LqscZc4x6w.roa (hash: w9xdtOWC+JXbMHHugUiqzP6wX+ZqCqVQ+dZA+jyO5S8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:70:3d:d4:f2:a0:cc:e6:40:11:04:0c:94:da:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
        Validity
            Not Before: Nov 26 21:00:21 2024 GMT
            Not After : Nov 27 21:00:21 2024 GMT
        Subject: CN=3654fff56eb529373d6e2ce1613206fe5e769706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:0f:4b:ba:e5:e8:1c:c1:28:a1:0b:c0:65:
                    6b:9f:37:c7:d4:69:98:05:83:40:e7:fd:c7:cc:52:
                    7c:47:e4:3b:51:c2:99:46:83:8d:65:bc:e4:91:87:
                    ef:3e:56:45:30:95:21:17:c2:03:ad:c2:ae:af:4f:
                    34:8d:4c:e6:96:dd:d1:e0:12:f7:98:71:95:f5:dd:
                    28:a1:9b:c0:00:b7:af:f6:fb:6b:86:76:a0:a4:df:
                    66:21:42:40:92:f6:54:95:3a:ce:39:7b:c7:9f:a8:
                    34:4b:1b:9f:33:03:16:ae:a9:62:d1:10:b0:46:d1:
                    36:79:0f:cc:3d:c6:76:4b:52:4d:21:b7:69:a5:00:
                    36:fb:61:fa:22:76:9c:0f:15:bc:23:85:9b:d9:5b:
                    a6:a1:cf:26:78:48:13:6b:dd:62:4e:f1:27:50:2e:
                    26:d4:3d:7e:e2:b4:14:cd:3f:9a:6a:59:a1:c2:15:
                    ba:db:5a:bc:49:b0:44:4c:15:65:07:f7:76:17:fc:
                    ec:09:8f:bf:de:10:93:67:73:af:39:d2:d0:d7:13:
                    79:14:15:ea:4e:91:a2:10:6c:37:fb:17:92:ed:1c:
                    14:f8:79:0f:e3:eb:12:3b:02:4f:b1:05:c2:bb:e2:
                    9b:d8:3c:a6:05:6a:35:eb:a5:d6:6f:48:b8:4c:75:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:54:FF:F5:6E:B5:29:37:3D:6E:2C:E1:61:32:06:FE:5E:76:97:06
            X509v3 Authority Key Identifier:
                keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:84:97:cd:99:6b:67:fe:e5:3f:c1:6b:a1:b4:ab:63:be:74:
         08:7c:9d:e4:0e:4a:ff:a2:55:26:91:9d:49:b7:74:31:02:9b:
         26:fe:63:d0:63:9e:aa:56:d0:c1:38:1b:87:08:02:b3:fc:18:
         12:8e:c3:a5:44:ed:4f:42:0c:84:75:4b:c5:f3:f4:98:3a:14:
         95:a5:cb:25:5b:5d:30:00:1f:a0:5a:d9:14:9a:20:ac:1e:25:
         a0:9a:35:29:5e:6b:d6:79:f6:c3:93:35:d7:a6:e7:70:10:26:
         b4:68:44:98:38:10:89:26:6b:ba:db:cf:69:56:e8:31:ad:b6:
         e7:a3:75:9a:e3:51:6f:32:53:1c:f0:72:ad:56:18:7a:1d:8b:
         0a:37:6d:f9:db:cc:f3:4c:50:b6:87:49:87:6f:4d:1a:9c:1a:
         ba:34:c3:aa:66:09:51:b4:01:42:4c:0d:b8:5f:a5:1d:01:71:
         4c:af:a7:94:42:76:6b:92:15:b6:8c:91:11:29:77:85:0b:8c:
         3e:ad:66:56:66:84:3d:19:ca:07:6d:4e:28:71:ae:68:43:f7:
         2e:ac:bc:ac:49:66:9f:be:9b:53:6b:40:2b:7a:53:08:73:67:
         6c:0d:7a:65:cb:a0:b0:13:50:25:3e:fd:12:7c:a2:cb:c0:d1:
         7a:2a:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:55:51 2024 by rpki-client on console-fra.rpki-client.org