Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File:                     R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier:          yt8KzhUfdlBg3ktz3EhPfcXABVP6mSeJmY4vxzFyRmQ=
Subject key identifier:   0C:EF:DD:18:0C:DF:A1:B6:C3:C6:AA:8E:19:7A:A1:D2:87:29:BE:CA
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer:       /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial:       019350BD85FDFC0C77920EDAC7DD57161C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number:          136E
Signing time:             Thu 21 Nov 2024 22:00:17 +0000
Manifest this update:     Thu 21 Nov 2024 22:00:17 +0000
Manifest next update:     Fri 22 Nov 2024 22:00:17 +0000
Files and hashes:         1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: PtSl6izm+dhP7szt3faHyxTlFRj5DIbTO7LqqPuG7D4=)
                          2: TFoxFphTzuHyhh7yt8aJpg4TC2w.roa (hash: Xe/WVQXeKSMyd6z0dl2AkbWD87EzLKH/vT+lTDdSowA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bd:85:fd:fc:0c:77:92:0e:da:c7:dd:57:16:1c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
        Validity
            Not Before: Nov 21 22:00:17 2024 GMT
            Not After : Nov 22 22:00:17 2024 GMT
        Subject: CN=0cefdd180cdfa1b6c3c6aa8e197aa1d28729beca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:99:21:52:6c:01:b6:5b:df:bd:3e:49:76:
                    3e:d7:4b:7e:24:93:b4:e5:66:41:ae:13:3c:96:71:
                    52:3d:ad:25:bc:29:71:b0:39:c0:f2:93:28:61:4e:
                    94:b7:10:6e:80:9b:2d:76:e3:ac:e3:ce:18:86:74:
                    a2:57:8a:45:95:83:b4:75:1c:ff:2a:22:6a:1e:ff:
                    78:32:2f:ad:df:e2:94:9e:a0:ae:1e:e6:57:ba:0b:
                    57:b6:6b:d3:57:3a:7b:a7:fa:0c:8d:58:56:53:02:
                    54:84:e8:19:a9:20:f6:07:23:e7:b6:b1:54:90:a4:
                    fb:47:18:13:ce:8f:c9:01:29:99:d9:5f:a7:43:a9:
                    7c:30:c3:2e:22:93:14:d9:a7:bd:f1:02:01:01:18:
                    b6:74:de:b0:85:99:4f:a0:89:ef:75:fc:e6:ed:b8:
                    50:c6:10:d1:2c:b2:af:cb:24:6f:e3:28:b7:ca:7e:
                    93:05:f2:da:3d:fb:be:bb:6f:75:50:e3:66:66:49:
                    05:1e:a1:60:df:44:6d:e5:69:22:46:30:26:a3:30:
                    7f:9b:f3:dd:16:4c:4a:68:5c:1d:cb:c8:ed:92:1f:
                    af:51:da:25:32:78:f6:b9:67:9f:92:08:d0:72:43:
                    a8:c9:a2:e9:df:03:a6:2d:78:b8:70:8a:a8:fb:d4:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:DD:18:0C:DF:A1:B6:C3:C6:AA:8E:19:7A:A1:D2:87:29:BE:CA
            X509v3 Authority Key Identifier:
                keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:5d:91:2a:b2:3b:fb:17:8e:48:d1:df:00:20:c0:46:d3:
         c8:a1:62:c8:16:97:7f:75:c1:83:b2:68:c9:2b:d5:ec:60:14:
         fb:4f:49:8f:ae:c1:59:f8:5a:1d:b4:ce:b3:23:32:2d:c8:62:
         ed:d0:36:9a:ec:41:6f:ca:99:cb:b1:33:88:d9:90:a7:bc:ab:
         78:9a:99:ad:68:63:0d:44:ec:8b:b1:f5:ca:47:f8:04:82:a8:
         fc:95:5c:6f:df:d0:26:ed:ce:c1:75:72:ef:ee:2a:25:85:f5:
         4c:b2:fa:36:ea:21:49:7c:ec:8c:f9:91:af:bc:52:52:c7:b6:
         64:39:bb:c5:f1:ec:ca:b1:54:21:e0:e3:58:d0:0b:ea:23:31:
         71:3f:7d:26:4c:08:8a:9b:3c:f0:d3:17:ff:62:22:5a:8e:be:
         79:6d:87:44:4b:37:37:a3:0c:90:e7:0a:e4:8f:34:5b:5e:1c:
         43:37:88:bc:5f:3a:c4:6d:d3:2e:dc:86:76:5f:24:af:51:f1:
         2f:e6:4e:c4:4f:fd:fb:68:f9:f1:3b:dd:ea:4c:f9:da:91:e1:
         11:cb:40:4d:72:6c:0d:66:0d:96:12:30:43:f3:a7:2e:54:b6:
         02:67:bf:bb:7f:92:cd:e1:d6:dc:29:3b:e8:eb:48:c2:88:fd:
         b1:c4:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:29:21 2024 by rpki-client on console-ams.rpki-client.org