Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File:                     L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier:          69MHfGeJq22zdvdklV5pYJ+Zl2z9LrFfe0lf3ivL4sk=
Subject key identifier:   85:76:DE:A0:54:B8:50:BA:10:FA:AF:C4:E8:62:F0:40:5C:EA:BE:B5
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer:       /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial:       019369DA852448D58536583A4ABD59495774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:02:28 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:28 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:28 +0000
Files and hashes:         1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: CtPrGXkgF2Z1KAqzLu5etOhq4VVnMseUPmYK37NyKOk=)
                          2: OD0GsphEcFPPwK-cz6Brmw42tsI.roa (hash: l2CcKHnJss1og3INj27mi6ZVbsVwjaeATxoNViOL+R8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:85:24:48:d5:85:36:58:3a:4a:bd:59:49:57:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
        Validity
            Not Before: Nov 26 19:02:28 2024 GMT
            Not After : Nov 27 19:02:28 2024 GMT
        Subject: CN=8576dea054b850ba10faafc4e862f0405ceabeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:5e:16:98:b1:dc:36:f4:6f:d4:14:33:33:
                    78:23:4b:23:bd:39:2c:50:43:2a:74:a7:55:fb:c4:
                    c3:be:69:d1:23:56:5b:74:08:d0:23:e2:80:17:98:
                    14:d3:f1:75:40:dd:51:d3:f4:f2:ec:41:f1:6a:82:
                    a6:15:91:32:2a:65:a0:cb:7f:33:59:55:5d:f6:0c:
                    8c:34:57:8a:01:25:71:09:0e:db:7a:6d:e3:42:fa:
                    69:0e:ef:26:5f:3a:45:b6:bc:ef:3d:89:c8:a7:6a:
                    c8:ff:f9:ba:03:c6:f1:93:28:ae:c1:10:23:bd:3e:
                    a0:86:45:7f:89:4f:82:1c:43:fd:24:e7:2c:d0:a4:
                    89:a0:29:e1:c9:1e:5d:3d:48:5e:3e:20:cb:5b:94:
                    aa:17:be:a4:d1:48:f0:54:aa:f3:ae:39:d0:a8:c6:
                    fd:5c:75:1b:44:31:1c:44:63:33:1a:f8:72:a0:f6:
                    76:04:3d:06:53:ff:b5:1f:0c:47:31:58:6f:6f:94:
                    1e:63:0a:47:eb:23:23:e0:31:cf:9b:8c:16:c9:27:
                    c9:13:14:b1:4a:5f:b2:c5:55:7a:f9:ea:61:83:e7:
                    3e:a7:c7:92:7e:83:4e:e2:9a:e9:89:ee:55:c3:c2:
                    3e:86:d9:f5:9c:17:b4:ed:61:de:02:60:86:cb:e3:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:76:DE:A0:54:B8:50:BA:10:FA:AF:C4:E8:62:F0:40:5C:EA:BE:B5
            X509v3 Authority Key Identifier:
                keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:bd:aa:4f:ee:90:6b:74:ac:b2:f1:99:63:5c:a3:3f:3f:
         90:89:ea:92:58:b4:16:a6:9a:99:3d:56:03:f7:c4:d1:d6:cc:
         b3:1d:47:4d:3e:e3:56:57:45:ef:b4:a1:20:dd:7e:8d:af:c2:
         e0:a6:79:bc:9d:f6:06:ae:1d:78:47:c1:b8:39:aa:a4:d5:d1:
         f7:d4:c2:dc:a3:f9:7a:a5:47:38:aa:5b:aa:4f:12:7c:ba:b5:
         4d:4e:91:9e:d9:7d:5e:26:1b:a3:e7:bf:d8:fa:04:df:40:21:
         56:11:72:06:d7:21:ad:72:5c:c2:37:32:5b:8e:6f:1b:ce:fc:
         62:8d:b4:20:85:38:fd:50:61:71:b3:21:a2:36:f2:ed:9b:8b:
         55:f7:e5:f4:71:df:f5:4e:79:a7:ca:c4:bd:78:0f:44:f2:f9:
         47:06:a5:62:90:61:6e:5c:f4:50:d1:e2:b8:76:32:7f:81:65:
         79:f2:57:ad:b4:8f:a4:6f:f9:b1:d3:4a:11:6c:18:01:0a:9e:
         06:3f:69:c5:7d:7a:82:9b:3c:28:f8:df:7e:15:8c:7e:8f:9f:
         8b:d1:40:fb:4c:d2:12:ad:7a:4c:45:3b:64:45:5e:49:1c:f1:
         56:4b:5a:05:08:bb:b6:ea:19:ff:2d:c8:ca:f4:44:79:20:22:
         a3:80:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:42 2024 by rpki-client on console-fra.rpki-client.org