Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File:                     V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier:          bMR3yl4uwJvfUB34TPpk+nSc8/83M/7izdZoWI2IHbU=
Subject key identifier:   D2:09:E0:9E:CE:AA:F6:A0:29:12:DB:0F:C8:D6:E8:D9:E2:32:69:3F
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer:       /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial:       019352750F6F803587C663280A6F9A8B379E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number:          136B
Signing time:             Fri 22 Nov 2024 06:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:23 +0000
Files and hashes:         1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: pSM95gM5gsLUfSHBv1oTIsW4HupC411EIop/XyQ9Oy0=)
                          2: pWUlKkjJcf8YPkywjzsONZYLRjc.roa (hash: nrxgyQSKsDcAk5iABnfxRBKcenXuVlksuYszZKdmLYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:0f:6f:80:35:87:c6:63:28:0a:6f:9a:8b:37:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
        Validity
            Not Before: Nov 22 06:00:23 2024 GMT
            Not After : Nov 23 06:00:23 2024 GMT
        Subject: CN=d209e09eceaaf6a02912db0fc8d6e8d9e232693f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:7e:fc:50:61:64:2e:16:28:58:7d:65:9f:
                    ee:e7:fd:d3:e1:7d:1d:da:7d:fd:31:c7:1a:eb:18:
                    91:69:c8:2b:44:21:76:3e:13:bb:0b:17:f6:eb:b8:
                    bd:28:9c:93:2b:80:78:68:36:34:bf:b2:55:b4:cb:
                    3d:61:c7:8e:e8:22:16:fa:f8:48:bb:9e:a5:0c:c0:
                    d6:87:cd:18:90:b9:b6:e0:7e:83:a1:05:be:f8:2a:
                    5c:d2:0b:b0:6b:65:31:d1:66:42:fc:bd:e0:79:40:
                    28:ce:34:98:fb:ba:a8:c0:2d:e8:40:ff:50:a6:0f:
                    5c:1a:e8:ce:db:43:d9:08:16:80:5a:3e:93:26:df:
                    df:cb:43:75:a7:43:e3:fe:73:05:72:57:8f:66:b2:
                    e5:56:b7:7d:c1:5c:84:97:97:9a:a8:cb:ec:59:d9:
                    00:34:6e:79:a1:aa:a8:95:75:60:f2:af:76:63:45:
                    e3:b4:dc:33:cb:7b:2b:f0:3d:46:aa:92:e7:1a:c2:
                    42:2f:21:79:0a:92:76:89:db:58:38:75:a8:56:7f:
                    52:5e:de:f3:e2:05:6e:4c:6c:06:e0:48:ca:25:81:
                    6a:11:85:e9:fd:47:2b:84:63:cb:97:00:f1:98:71:
                    12:c4:bb:d6:b4:69:01:e4:0f:2c:b3:d3:86:bc:02:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:09:E0:9E:CE:AA:F6:A0:29:12:DB:0F:C8:D6:E8:D9:E2:32:69:3F
            X509v3 Authority Key Identifier:
                keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ca:b9:8e:08:0a:cc:93:17:1b:28:34:44:38:98:15:07:35:
         35:ec:04:44:2e:f6:b9:fa:c1:74:90:35:39:8d:34:84:59:61:
         c6:11:fc:58:cb:ba:55:27:2b:80:1f:b0:ed:40:ff:40:dd:cc:
         a9:c5:b0:4a:49:4d:a4:e3:63:d1:07:88:e8:ea:c3:76:04:37:
         45:30:52:0e:46:52:ad:aa:97:e4:4d:3a:18:f8:bb:b4:38:37:
         9f:d2:ae:73:2e:db:37:e6:78:74:80:00:23:d9:81:16:aa:cb:
         4a:c8:30:f8:ec:1d:91:46:d5:98:f1:ea:86:19:24:79:5a:3a:
         74:f1:6d:c4:c0:99:c7:d4:e5:8f:6e:45:68:0e:b3:26:a9:13:
         d5:ad:f6:f7:48:79:e8:18:af:60:94:5d:1f:4a:fd:7a:04:e4:
         74:24:82:e8:49:68:7b:c8:38:67:ed:3f:a4:63:0e:71:40:06:
         fb:e3:e4:a2:8f:08:ad:4d:44:e7:f1:dc:a7:ec:3f:af:cd:cb:
         22:02:69:44:ab:00:1e:af:e3:f5:49:42:53:bc:18:2e:27:be:
         fa:96:b4:29:04:48:3e:31:5c:60:1f:52:15:ea:5f:8a:5c:86:
         30:28:ec:f0:73:0d:3c:22:7b:ec:66:f9:bc:52:19:f3:1c:95:
         87:b4:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:28:43 2024 by rpki-client on console-fra.rpki-client.org