Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File:                     peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier:          S+ELrdu4a4Xx3cnUIFuqivkO4D7xtfbcbXhcw2tHtLs=
Subject key identifier:   2D:CA:90:9C:CB:D2:88:53:FE:B8:34:6D:DC:A4:BA:00:5A:09:8B:81
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer:       /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial:       019364B23B4D7CF5BD8285792FB3014B8680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number:          137A
Signing time:             Mon 25 Nov 2024 19:00:22 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:22 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:22 +0000
Files and hashes:         1: kr4LNex3EUfteifc8oDQ1BEfAGM.roa (hash: REce6uDliEqiEVitsbIczkPQPqEcss3+Z4m4hhQF7Vo=)
                          2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: SM6TpSz8zkLywTbCGHflK9FFbIvKa6t8u1A6ixW87wE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:3b:4d:7c:f5:bd:82:85:79:2f:b3:01:4b:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
        Validity
            Not Before: Nov 25 19:00:22 2024 GMT
            Not After : Nov 26 19:00:22 2024 GMT
        Subject: CN=2dca909ccbd28853feb8346ddca4ba005a098b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7b:04:c3:5d:43:a1:57:63:f3:f4:f2:4f:76:
                    bd:c0:54:cc:7c:3a:a1:a1:50:1b:55:9f:50:90:1a:
                    d3:74:d6:71:02:0d:ec:3f:86:64:a1:43:da:85:f4:
                    0e:80:bb:4b:42:9b:8f:8d:8e:32:c3:34:f5:a4:55:
                    87:70:43:d0:56:2d:db:37:ee:59:52:d3:13:8f:8d:
                    25:e9:3d:ba:99:38:1d:41:9c:b8:7c:19:aa:c2:88:
                    ad:c8:30:07:64:12:1d:5e:53:4e:0f:a8:c5:2c:b9:
                    43:7a:25:10:d1:5c:50:2e:84:4f:57:f2:e3:91:a3:
                    58:63:24:6a:53:23:71:aa:2a:17:cb:83:85:0e:18:
                    4b:b0:40:69:b6:90:5b:01:55:ac:6d:01:f7:91:03:
                    6b:85:e4:2b:6c:c2:b0:04:15:a9:83:ee:6a:8e:ca:
                    4f:59:20:3d:f5:6b:67:f9:2d:cc:1d:d1:9a:9f:2e:
                    2d:62:61:27:fe:8d:63:27:51:49:ce:ec:e1:97:ee:
                    47:3f:26:bf:0e:74:c2:df:f4:cd:49:26:7a:4a:76:
                    5d:90:dd:a2:93:de:58:00:97:d9:b9:12:76:93:f5:
                    c7:ce:af:4a:74:f4:ae:b4:65:b6:83:b4:65:5e:c7:
                    7d:c0:b4:fa:de:0c:17:d7:63:16:2b:22:2e:fb:ec:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:90:9C:CB:D2:88:53:FE:B8:34:6D:DC:A4:BA:00:5A:09:8B:81
            X509v3 Authority Key Identifier:
                keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:f7:bb:67:2e:2c:1a:5f:45:54:99:8f:3d:30:63:b5:46:
         1e:8f:9d:6c:b1:3a:e7:23:24:e0:01:b1:89:d5:38:da:7c:b5:
         6d:1c:bc:2e:36:8b:da:dd:85:ca:fc:27:e0:7c:a9:e5:cc:2f:
         7c:48:62:74:76:c9:59:89:48:d1:90:4d:b2:06:b9:44:18:fe:
         f5:a5:d0:18:28:69:ce:c1:14:2e:f8:fd:16:65:b5:82:a7:16:
         0d:7a:79:97:6d:35:0a:73:d6:2c:ff:02:d1:24:38:80:8a:9c:
         12:ff:a6:6d:61:d0:4b:fb:ac:8e:8a:f9:c4:c1:a0:73:eb:26:
         c8:4c:8a:6b:59:8e:c1:23:06:8d:48:39:ba:55:23:94:ab:8e:
         de:1b:ba:97:09:7e:b3:34:c6:a6:1c:84:55:ba:21:79:1c:5d:
         98:d1:3f:d0:73:56:69:05:16:ee:9e:3f:77:1c:1b:eb:af:7c:
         e4:24:04:73:ef:e7:9e:94:3c:f1:4f:6c:27:12:8b:83:d3:13:
         28:0c:be:50:c4:ad:fe:70:bd:22:89:5c:ae:73:22:5b:cc:24:
         35:b5:26:8f:60:66:91:8d:0d:4d:e3:80:6c:26:6c:63:da:bf:
         eb:73:3e:e9:89:d2:ea:89:f8:19:86:5c:fa:64:df:c9:c6:af:
         79:1c:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:11:52 2024 by rpki-client on console-fra.rpki-client.org