Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File:                     RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier:          uOEiav5XRtNkWUQCVs4SDnHSxwUbySSproQkAmupEkQ=
Subject key identifier:   86:81:A9:84:6E:C0:78:1F:97:5B:35:A4:D9:B0:DE:07:A1:B9:08:7F
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer:       /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial:       0193549CA6DB859E7BD109D900E2BD58093A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 16:02:52 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:52 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:52 +0000
Files and hashes:         1: Mlf_PecUVHK1vvNW7HZijtWK0XQ.roa (hash: KKuxSXLf7Ozcjmrx74aZhMNS/8zyxS4jSDVE120/Frk=)
                          2: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: oZRnkUVX9RohVcwGbLa74bPf6Q7tPWDCUhrYYnQI91k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:a6:db:85:9e:7b:d1:09:d9:00:e2:bd:58:09:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
        Validity
            Not Before: Nov 22 16:02:52 2024 GMT
            Not After : Nov 23 16:02:52 2024 GMT
        Subject: CN=8681a9846ec0781f975b35a4d9b0de07a1b9087f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:4e:ac:c6:91:d0:fd:35:d7:7b:e9:30:e4:
                    d3:64:58:61:2a:fc:f7:d8:1d:34:20:76:73:7f:fd:
                    90:7e:2b:d1:dc:13:f7:d5:fd:c6:db:cf:ff:bf:52:
                    84:9f:e3:10:49:d5:9d:3d:b7:c1:ae:a9:87:26:1c:
                    d2:cf:92:ed:9b:94:6a:4d:d9:c7:07:e6:d3:92:ac:
                    67:06:c0:44:0c:97:fd:b6:f8:f2:81:53:48:d1:f1:
                    16:44:4a:78:64:a4:8e:e0:73:cc:10:49:82:73:25:
                    a5:1b:6b:df:2a:18:ee:df:ea:6e:db:05:11:71:23:
                    96:fd:82:31:2c:ba:6c:b1:99:9d:a1:b8:f6:e0:9c:
                    fe:d7:26:85:64:c7:7e:8d:40:ac:a2:f0:75:be:81:
                    55:c9:a8:0e:d7:f2:a8:58:57:e8:75:cc:dc:77:c5:
                    1c:b5:cd:76:53:72:f4:06:d2:97:63:05:5f:67:d7:
                    f3:9c:ad:6c:dd:c7:9c:86:1e:c6:89:fc:31:d4:aa:
                    4a:c0:35:8c:23:d2:f3:03:85:1b:66:e2:98:df:90:
                    6e:9d:07:66:06:c3:62:75:df:31:e5:ec:e7:80:7f:
                    38:2e:4f:6e:7f:e6:6a:18:b6:c7:54:61:f7:ee:59:
                    8d:f0:f7:5b:16:4b:5d:09:ec:75:5c:be:76:78:9d:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:81:A9:84:6E:C0:78:1F:97:5B:35:A4:D9:B0:DE:07:A1:B9:08:7F
            X509v3 Authority Key Identifier:
                keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cf:5b:e0:f5:77:9f:98:a2:6c:e9:2b:f8:4a:27:4b:60:37:
         ce:51:56:fe:b0:61:5c:8a:4e:a5:60:6d:32:c0:ae:a1:9c:cc:
         1c:9a:a7:b9:33:eb:e7:04:e6:f1:dd:07:d4:09:59:9b:c1:bf:
         82:0d:8a:2c:50:b2:32:bd:89:e7:48:a1:03:d7:78:94:de:6b:
         fb:01:69:04:13:69:cd:39:18:08:1a:f3:6f:90:f9:7f:4d:9d:
         1d:62:89:12:3b:97:2a:b7:4a:3f:2c:c3:17:4e:7e:a3:49:13:
         a8:90:67:77:c3:23:e3:ac:f9:9a:75:8c:e8:26:31:ba:7d:06:
         9c:29:6e:b0:ac:fc:4b:6b:c8:40:ac:c1:dc:5b:64:9d:a1:d6:
         37:db:fc:32:85:96:33:37:85:a3:fb:c4:97:42:04:fd:a3:f5:
         65:bb:c8:06:1c:74:ad:f3:08:40:98:93:4a:85:a9:fc:af:fc:
         fd:fc:1a:07:77:1b:db:1d:de:c9:90:3f:af:e9:74:3f:ec:70:
         04:c2:78:0a:7c:65:7f:11:43:8c:45:c9:b3:d8:6a:e8:d9:8b:
         ed:ad:5c:ea:49:d1:22:cc:97:91:b2:7f:79:28:0f:77:5c:3a:
         f7:cb:5d:ef:ea:01:ee:fa:f9:0c:2b:70:8f:fc:73:8a:d4:57:
         33:85:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:32 2024 by rpki-client on console-ams.rpki-client.org