Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
File:                     gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft (raw, json)
Hash identifier:          7MBn/vKLMrRn87/z9gWnaBpRtbasKrxfjEhaK0tohpU=
Subject key identifier:   6A:6D:49:94:A9:4E:C8:08:6C:72:88:C9:59:79:96:AF:44:9E:D7:93
Authority key identifier: 82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
Certificate issuer:       /CN=827313247c486fe434833c09087a00a900301840
Certificate serial:       019354D163C395284EBEFE06223D06365F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
Manifest number:          136C
Signing time:             Fri 22 Nov 2024 17:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:28 +0000
Files and hashes:         1: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl (hash: F0/tGhtUDGqxBDq9Z6Afn2yg/UhSOUvQcDW3llKE5MY=)
                          2: x3xW71BO51t2eGX9yE0I4lGZI2c.roa (hash: rwYP3AO/FX9djyIfBXT47CYRQzNMnxCIc6wVVqaz7QI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:63:c3:95:28:4e:be:fe:06:22:3d:06:36:5f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827313247c486fe434833c09087a00a900301840
        Validity
            Not Before: Nov 22 17:00:28 2024 GMT
            Not After : Nov 23 17:00:28 2024 GMT
        Subject: CN=6a6d4994a94ec8086c7288c9597996af449ed793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:b9:38:c7:28:2b:79:70:7f:7e:61:dc:5b:
                    5c:ef:a2:97:07:6a:a2:34:36:3c:4b:22:48:16:a9:
                    a0:e4:4b:62:3a:6e:78:b8:e0:55:f1:37:fa:ad:10:
                    a8:14:48:c2:6c:46:d9:3f:c2:bd:b1:b2:f3:48:bf:
                    e5:8b:f6:eb:ac:38:a5:2c:af:aa:ab:54:db:6d:29:
                    61:bf:4a:76:52:85:9a:11:d5:28:14:8d:e1:bf:f7:
                    a6:62:96:62:31:18:ed:a1:28:2a:a2:df:11:9a:16:
                    de:cf:17:24:6c:08:bf:ae:66:cb:82:cb:71:a3:e9:
                    3c:b4:00:ca:f9:d0:57:33:23:89:cf:76:b6:c2:52:
                    fc:03:d6:85:4d:38:95:8a:7a:3d:16:a3:ef:a1:3c:
                    3b:70:d0:46:71:12:2c:1f:00:da:8f:b5:3e:c0:04:
                    a0:78:09:de:5b:10:be:8a:f2:94:47:16:99:d7:a1:
                    bb:8d:ea:fd:d0:ae:5d:00:72:a0:ba:82:9a:7e:e5:
                    c8:21:51:87:b4:5d:77:11:f5:fc:c1:8a:74:ea:37:
                    6f:10:da:10:f6:fa:a1:3b:6e:51:7d:db:ce:55:6f:
                    6d:b8:11:75:a2:7d:77:71:0d:04:f2:75:cf:f2:ed:
                    2c:87:ca:64:68:e0:26:f0:86:d4:31:c5:41:0e:b3:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:49:94:A9:4E:C8:08:6C:72:88:C9:59:79:96:AF:44:9E:D7:93
            X509v3 Authority Key Identifier:
                keyid:82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:00:ec:b8:76:e9:fd:2d:b2:59:80:4e:56:9b:01:49:e2:
         6c:0c:b1:f3:a4:1a:be:d8:df:12:3f:75:78:7d:9c:db:67:28:
         fb:7e:01:c0:2b:df:18:cd:dc:3b:54:db:2c:4d:08:26:8c:31:
         2b:8b:c4:01:0e:ad:b6:40:c8:95:07:74:1a:33:2e:85:45:c8:
         1b:74:d5:d4:a1:00:3d:8a:18:93:bb:fb:21:26:51:c1:4a:b0:
         95:6e:ec:b3:22:2c:7a:90:4c:db:a3:7f:fa:4d:9c:16:b8:bc:
         fa:01:b7:b7:45:02:00:7a:9a:e3:90:c9:53:a9:60:34:ee:07:
         b7:1a:11:a0:71:f1:43:ec:16:17:c0:29:cb:38:9c:ec:38:59:
         a6:5b:b9:d8:35:3b:16:12:5d:f8:80:7f:d4:30:52:9d:c7:7a:
         42:9f:bb:5a:06:05:99:32:8e:ed:5f:4f:23:96:ff:ab:ac:5c:
         ba:aa:11:21:18:6a:66:79:b8:45:73:3e:94:e3:9d:20:ed:0c:
         77:f1:fb:be:2f:d1:17:4d:e2:be:69:93:a7:50:e7:d8:8b:8f:
         31:99:e5:ed:a8:2e:95:bb:1c:75:eb:81:16:55:26:b7:7b:78:
         f2:08:8f:9b:69:60:47:b8:af:31:ff:32:6c:46:91:a8:3a:0e:
         5c:e7:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:18 2024 by rpki-client on console-fra.rpki-client.org