Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File:                     a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier:          hl+9kMZYZSVzpGvERZQ8PTNs2H/Zu/F1kCSari96Suc=
Subject key identifier:   37:F9:7F:46:16:27:47:F4:32:0F:2E:DC:DE:EC:C0:6D:8B:D7:DC:B7
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer:       /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial:       0193553F4242557E31FF074DC8C95856296A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number:          126A
Signing time:             Fri 22 Nov 2024 19:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:29 +0000
Files and hashes:         1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: ozGiPBmmf8h8MG5yUrohfi1U3IISLfQ/u0EumoU/090=)
                          2: fGCUlOMlBP8K3I5MqRytg9TA9tA.roa (hash: uY/Mi67C2PnabRM8yuYDzkVVd46fDPgisXNEt7G1IeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:42:42:55:7e:31:ff:07:4d:c8:c9:58:56:29:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
        Validity
            Not Before: Nov 22 19:00:29 2024 GMT
            Not After : Nov 23 19:00:29 2024 GMT
        Subject: CN=37f97f46162747f4320f2edcdeecc06d8bd7dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:d7:79:d4:00:5f:1a:0e:7f:9a:ca:9c:a3:
                    f2:98:9c:83:ee:82:65:2a:ff:42:e9:24:59:26:1c:
                    1c:05:c3:1b:ab:e8:61:b6:9e:55:56:b0:16:ad:cf:
                    e4:c2:87:dc:2d:e3:92:97:9f:40:b3:28:24:15:74:
                    b1:25:bb:40:1e:3a:b5:bb:92:24:73:54:68:c8:8b:
                    e2:90:48:bc:8d:71:5a:55:68:67:8c:02:ca:75:30:
                    d9:8a:ed:62:74:a5:2e:ad:f4:a6:5d:c9:ae:40:f2:
                    f4:5b:72:a0:a1:13:f7:04:60:6d:23:70:3f:b2:f4:
                    f7:39:6b:d9:1e:e3:88:b1:e4:34:2c:6e:9c:30:78:
                    da:d1:fd:ca:28:18:5b:75:a1:c1:21:c2:cc:2e:93:
                    90:23:25:31:41:d4:4a:63:3d:f1:3d:7d:b6:8c:06:
                    24:40:39:fa:e7:82:e2:65:6c:b5:04:4b:dc:8c:c0:
                    4b:e6:e4:ce:60:d6:1a:ad:a6:f2:7b:26:87:cc:cf:
                    14:b0:01:10:b8:f4:aa:16:e9:f0:28:72:91:5e:5d:
                    48:f1:94:ec:00:95:fc:20:09:74:35:c1:6b:f0:db:
                    2d:44:45:46:41:c9:83:66:9b:c2:c8:d9:75:67:a1:
                    9e:1a:f9:b2:db:05:8a:52:ca:eb:38:b9:78:8c:4d:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F9:7F:46:16:27:47:F4:32:0F:2E:DC:DE:EC:C0:6D:8B:D7:DC:B7
            X509v3 Authority Key Identifier:
                keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:be:05:56:84:80:a7:cc:ff:da:8d:ce:d8:3c:5f:bb:1a:ef:
         50:36:18:34:f3:aa:b0:a8:96:ee:79:aa:48:7f:e1:9b:5e:a4:
         c0:bc:ae:a6:31:8d:59:54:92:6d:fc:57:ba:f4:ce:40:3c:1b:
         9e:2c:01:40:5b:1a:37:ad:2f:f7:1a:71:05:df:ef:9e:ae:1a:
         59:12:71:fa:97:3b:e0:89:b1:6a:99:d0:2c:a4:8f:3b:39:ac:
         e9:33:ef:91:37:15:75:ff:4f:28:3e:d4:bc:c6:44:d3:a1:89:
         a9:09:73:63:29:5a:8d:67:01:51:8d:d1:a2:0c:b2:ba:2e:43:
         60:92:84:ed:db:10:9b:0a:40:f8:e6:81:d0:e3:48:21:d1:61:
         1a:fe:f7:b4:4a:3c:bc:83:ed:0e:c0:95:d5:d1:cf:65:1b:bb:
         f9:25:12:36:2e:72:c7:49:85:2b:63:c7:64:b5:92:07:38:fb:
         22:8a:75:bf:fc:f0:f6:62:80:e8:31:1f:45:bd:f9:50:16:df:
         ec:51:86:ce:19:0d:48:46:e6:18:e7:44:d6:ff:36:65:a0:df:
         c7:db:34:ae:02:1d:2a:7a:44:5a:32:7f:94:68:b0:cb:2d:e5:
         8e:97:d1:c8:d5:db:01:c6:3f:ed:f6:4b:c6:71:c0:c4:4a:aa:
         f8:ee:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:13 2024 by rpki-client on console-fra.rpki-client.org