Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
File:                     KuSoz5RAPH-drSfzyf_nMehrd4c.mft (raw, json)
Hash identifier:          SDFdAOhycde1cEpNgqw/e/pljtFCdCCtu6USBrY+sGo=
Subject key identifier:   27:59:6D:54:D1:A1:2A:54:92:58:09:66:E0:72:B4:AA:B8:05:18:F9
Authority key identifier: 2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87
Certificate issuer:       /CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
Certificate serial:       01935A67D78F7C57D1A3978AB417BDB66D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 19:02:55 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:55 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:55 +0000
Files and hashes:         1: DZCOI-ES2QF_93ycDxCnUyPKRrw.roa (hash: f0KqmdId8kLa0ODHLSp2dBvZuCm7X/Ykmno/K/VSwj8=)
                          2: KuSoz5RAPH-drSfzyf_nMehrd4c.crl (hash: ZY/cE/qg3HfqTtKjyk7QRQHz3plNA4M/x/l3evLPTzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:d7:8f:7c:57:d1:a3:97:8a:b4:17:bd:b6:6d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
        Validity
            Not Before: Nov 23 19:02:55 2024 GMT
            Not After : Nov 24 19:02:55 2024 GMT
        Subject: CN=27596d54d1a12a5492580966e072b4aab80518f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c1:fe:93:62:c2:6a:fb:1f:df:8a:6d:47:46:
                    41:1f:1f:52:5f:c1:64:31:8f:0c:35:2d:5e:f5:70:
                    4c:01:12:44:37:91:a0:67:98:f1:a9:a5:ba:06:67:
                    7f:e0:af:fe:e1:cb:57:4c:cf:04:41:32:68:c8:85:
                    4f:5a:38:80:65:03:01:99:15:33:69:4c:d6:a8:56:
                    62:59:2d:95:0b:cd:7e:c1:b6:db:da:fc:0d:84:a8:
                    91:37:87:1f:10:a1:1c:b4:77:37:d6:a8:81:94:40:
                    57:fc:b6:66:04:c9:39:a5:79:2d:98:31:91:16:a3:
                    7a:6d:0f:9b:be:29:fb:e6:b8:ef:63:84:fc:00:7f:
                    74:c6:ee:74:38:9d:31:2c:e8:93:47:6c:ba:7d:01:
                    d9:27:b5:2b:22:b1:fd:07:60:3a:ac:da:4c:7f:b0:
                    23:e3:a7:90:46:b0:ba:a6:9f:f3:87:44:f5:fa:9b:
                    52:46:cb:23:15:b9:aa:ed:27:12:40:71:73:c4:6a:
                    f7:70:ce:e0:56:08:7f:b9:d1:60:d2:5b:65:cc:26:
                    59:ac:aa:f0:8a:5e:ce:ae:54:25:47:c5:79:c5:82:
                    5f:ac:98:1a:25:ae:8c:68:7e:91:eb:7b:ac:db:9a:
                    67:dc:66:51:14:b0:33:3e:59:29:52:a6:10:c8:de:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:59:6D:54:D1:A1:2A:54:92:58:09:66:E0:72:B4:AA:B8:05:18:F9
            X509v3 Authority Key Identifier:
                keyid:2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:43:70:e7:af:45:56:9d:42:77:f3:4e:09:88:4c:e9:64:52:
         3c:06:c4:23:f1:ea:21:b7:66:cd:24:73:06:68:1d:70:fc:73:
         95:6c:21:d0:a7:3e:30:c8:ef:64:3f:fd:a9:26:19:96:cb:2a:
         0c:0e:d7:a9:5e:42:f8:99:e4:d9:c7:84:44:34:ad:3b:ac:cd:
         d2:16:e1:f3:5f:f1:2f:34:43:05:91:ac:f6:46:9e:01:3e:77:
         76:22:34:a4:70:43:68:45:43:86:a2:f9:b4:33:9c:6b:8f:9b:
         4b:eb:f7:fc:41:ba:bd:e9:d5:6c:30:18:4d:3e:bf:53:b7:6f:
         9c:67:33:f2:f6:9e:58:76:d6:8f:34:d3:57:53:05:c5:8a:c1:
         0f:1f:d7:df:88:9f:95:a4:45:07:fe:cf:23:93:98:4d:2b:14:
         b6:43:ac:5e:6a:86:e7:dd:7a:1b:08:42:0e:bb:3c:92:1f:9c:
         f6:87:0f:ed:13:e8:20:e5:cd:a5:be:42:d1:b8:9d:62:cd:60:
         e7:2f:48:73:da:16:66:92:7f:d4:4f:21:a0:84:42:c0:64:c2:
         1b:1b:67:2e:bf:e2:a3:38:00:2f:f5:f4:64:4b:ef:50:9d:85:
         e8:9d:a5:c7:7e:5f:a1:2b:c9:85:59:76:8b:76:dd:db:67:24:
         82:a5:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:41:55 2024 by rpki-client on console-fra.rpki-client.org