Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File:                     SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier:          XE85vI3/jWjnPgCtXzo40/leXmdJl/X3GOlITB+B2pM=
Subject key identifier:   D6:92:EF:56:A0:0C:45:20:8A:6E:93:37:0B:5E:CA:57:6D:5A:59:9A
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer:       /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial:       01936A46C3D4C36CB18ED8186E21513CA8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number:          135D
Signing time:             Tue 26 Nov 2024 21:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:42 +0000
Files and hashes:         1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: mh/yiNVXUGtfmbzLiY+GJCfHYXWYnRMu+LAmqX/BnZs=)
                          2: xXdD-bZ_mHDek1I2do89Um4507E.roa (hash: QSM4rofMj1r07zxf5bWGDGFusQb9ZhuapaBnY63Epv8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:c3:d4:c3:6c:b1:8e:d8:18:6e:21:51:3c:a8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
        Validity
            Not Before: Nov 26 21:00:42 2024 GMT
            Not After : Nov 27 21:00:42 2024 GMT
        Subject: CN=d692ef56a00c45208a6e93370b5eca576d5a599a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:05:d7:df:a3:88:44:33:c7:23:c3:97:7f:
                    6a:1c:07:b9:7e:de:95:f5:53:5a:c6:7b:5a:3d:59:
                    7d:2a:2a:83:24:3d:f6:cf:9a:d4:6f:0c:bd:57:95:
                    5e:f0:04:7b:67:06:ef:ce:96:1d:4f:ee:b4:47:21:
                    81:9e:f5:6c:62:da:44:73:36:48:62:31:63:b3:45:
                    79:b2:df:9b:d6:e2:5d:a9:0a:d8:c8:04:8f:e1:2b:
                    ad:9a:ec:d2:fe:b2:e8:d2:f1:78:06:72:2b:bd:46:
                    dd:7c:0b:b5:57:76:05:ef:4d:9c:06:3b:b6:8c:be:
                    4f:fb:53:b7:8b:c9:3e:ac:d6:0f:47:6d:9c:41:de:
                    e5:6c:85:56:e4:f1:7d:bb:b7:17:06:74:ce:42:ba:
                    08:21:fe:f0:f2:23:35:c6:88:9f:c3:d3:92:eb:9e:
                    10:51:28:b6:66:af:7e:f1:36:f1:4f:22:ca:59:1a:
                    a5:8c:1c:bb:25:4e:a4:ff:d7:31:3f:5a:bc:8a:e4:
                    69:23:f2:6b:8a:33:69:99:16:90:4c:d9:88:71:96:
                    cd:7d:13:fa:50:16:f8:50:34:b9:75:f0:39:fb:23:
                    90:13:a7:23:ad:ef:ce:20:73:d1:00:3d:1e:72:41:
                    a9:74:be:46:d3:e1:f1:92:be:b5:d8:43:76:8f:10:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:92:EF:56:A0:0C:45:20:8A:6E:93:37:0B:5E:CA:57:6D:5A:59:9A
            X509v3 Authority Key Identifier:
                keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8d:24:29:9c:c7:b5:a8:57:c1:1a:0f:c5:ae:48:1c:b8:a9:
         bd:85:4b:76:e3:5c:a0:f1:99:66:9a:c3:97:d0:02:cb:a1:0e:
         96:61:e1:13:b4:d8:a7:3d:b9:0d:a1:20:c8:4a:be:11:81:15:
         46:76:e3:9e:d7:25:a6:e1:ae:1f:2c:1f:48:b2:13:03:9e:06:
         d6:1d:a3:e0:30:1e:e6:7a:80:71:db:6c:5f:29:34:43:d6:4a:
         01:da:96:e3:99:66:f4:77:af:b5:0b:a9:05:1e:cf:56:c8:84:
         93:32:84:f4:f5:94:68:ca:36:c8:61:16:04:99:47:34:63:44:
         34:22:ad:2c:65:3b:4d:18:dc:3e:f6:59:eb:e2:11:eb:f0:c7:
         93:50:14:80:e5:c5:43:83:f7:3c:85:55:37:ee:63:48:8a:8a:
         90:c2:bc:4d:a9:67:85:02:24:f1:ac:43:55:76:48:4a:b0:0c:
         78:22:88:4f:7b:d5:a8:1d:10:f5:84:a0:2a:2e:55:2d:7a:31:
         60:fe:42:cd:62:36:88:43:45:cc:a7:18:1c:13:56:fe:70:2c:
         db:a8:7d:34:f5:1c:2f:8d:07:3b:29:d5:42:a9:55:a6:02:15:
         74:50:57:06:e6:6e:38:dc:3a:c6:c4:aa:e5:5d:8a:01:a3:f2:
         fe:f9:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:38 2024 by rpki-client on console-fra.rpki-client.org