Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File:                     Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier:          G5bvZAVgFjjnT2iAsYGkBdUEUBfH0sLIQ8XZR50fjhs=
Subject key identifier:   72:12:45:FE:78:AD:F4:75:32:3F:D1:E1:36:96:17:60:D3:D1:A5:CF
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer:       /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial:       01936B2231F9822C51DEB5496FD2B62248FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 01:00:23 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:23 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:23 +0000
Files and hashes:         1: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: hUk5pQ9Fv1KiqhEX4fY6hOohSZ8by5zqldc4PV6eCO8=)
                          2: SDl1d_LwR3-jsQaFpaRJ3Ye-bkk.roa (hash: omZ9VHEx9ao81dZNxJqdiG1TdfTjWgNa/X5v4anT2h4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:31:f9:82:2c:51:de:b5:49:6f:d2:b6:22:48:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
        Validity
            Not Before: Nov 27 01:00:23 2024 GMT
            Not After : Nov 28 01:00:23 2024 GMT
        Subject: CN=721245fe78adf475323fd1e136961760d3d1a5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:50:c5:fd:ba:bc:05:60:ab:9a:c5:3a:f8:
                    87:7d:7c:00:57:46:62:6f:11:03:cd:19:5b:3d:e4:
                    88:7d:a4:c9:b9:e2:6b:39:46:62:b3:ed:2b:94:0d:
                    49:52:c1:2e:f8:14:d9:7e:0b:6a:fb:fc:b4:c2:ef:
                    22:56:b7:00:a8:2d:7b:25:c6:e7:8a:23:ad:f2:8b:
                    25:e2:cb:44:65:86:c0:3a:63:52:a5:e5:6e:f6:95:
                    0c:ad:20:75:21:dc:60:7a:4c:81:a7:aa:7c:97:5b:
                    94:db:2b:24:e4:25:22:e9:ae:d1:bf:2a:ac:03:fb:
                    47:87:db:fb:63:4a:08:ef:17:82:73:fe:c6:a4:56:
                    58:2c:ce:ec:b2:f5:3e:6c:9d:24:2f:61:aa:4d:4c:
                    45:ff:53:a0:48:6e:e4:a1:9b:54:0e:98:a3:3f:86:
                    98:e4:ce:a2:5e:59:71:85:3f:cd:70:6c:30:78:22:
                    5f:79:0b:c8:55:12:85:66:8a:11:f7:67:2a:a8:3d:
                    c3:cd:3d:6d:d6:c9:3c:6f:fd:ee:33:1b:57:89:80:
                    be:e8:bc:4f:78:17:ee:d5:56:a8:10:e5:c1:ec:82:
                    5a:e0:05:cb:53:01:31:dc:e8:84:6c:0e:66:24:fb:
                    8f:89:b6:df:52:a2:24:39:51:3b:c6:e9:49:7a:2e:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:45:FE:78:AD:F4:75:32:3F:D1:E1:36:96:17:60:D3:D1:A5:CF
            X509v3 Authority Key Identifier:
                keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e9:0c:46:89:06:15:ee:fa:20:a5:c5:6d:08:5d:ae:c2:db:
         82:d5:0e:a0:1a:b4:cf:47:d1:8e:c7:c4:ec:bb:e9:0d:9c:d7:
         66:67:75:f3:44:e3:cd:2c:47:25:cf:67:7d:ff:8c:b0:36:44:
         0f:9b:34:ae:22:cd:47:52:f0:d5:cb:f7:29:06:fd:b4:bd:53:
         5f:f9:aa:5b:21:13:d8:d8:ea:16:1d:e8:cb:ab:32:ec:e9:b1:
         0e:2a:b4:3b:3f:c5:75:bd:b3:d8:e6:fa:1d:ac:d1:67:e3:62:
         4a:f5:5d:42:e2:4d:83:f3:39:b1:92:9b:0c:04:13:d7:7b:ad:
         41:5f:ae:7b:19:ce:90:76:42:88:33:62:d4:05:af:26:c9:a4:
         f0:55:fd:11:02:3c:2a:b1:de:2e:9c:d8:54:1e:a7:03:e4:7c:
         a2:bf:a9:b1:4b:ca:05:b2:2f:04:97:aa:b4:cb:88:b1:cd:cc:
         4f:e0:27:40:3a:c0:40:c8:60:81:af:c3:f5:81:b9:c9:0f:cd:
         3f:88:2f:8a:3b:c7:b1:c7:8c:4f:b3:84:49:a1:23:69:89:4e:
         7e:4b:5e:ce:8c:2c:03:29:5b:58:b6:8c:3e:c4:4b:b6:0d:94:
         0b:36:19:2d:19:98:9b:56:bb:cb:10:9a:05:6d:ce:7e:55:67:
         6d:a6:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:24 2024 by rpki-client on console-ams.rpki-client.org