Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File:                     Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier:          aqcSQ08FYeRtuopDu8+ui+5tQQuQwEtoc99JaFL5Q9Q=
Subject key identifier:   AD:5F:12:CD:1E:77:D6:70:42:38:46:3C:62:B1:BA:19:67:36:D0:1E
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer:       /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial:       01936A7D68C7ECD8F5E7360B28A6D0FC3D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 22:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:23 +0000
Files and hashes:         1: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: DCjH1sMXZe/oy/ZJhGgdBOJjGjO+J/XlK9e03ACCkDY=)
                          2: T0ksw1nvsRSnOrFdksjqaPkieSU.roa (hash: bmu7KbJRbcYBJR7ud8jylerJVlrfrGIB00lzn5M6W20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:68:c7:ec:d8:f5:e7:36:0b:28:a6:d0:fc:3d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
        Validity
            Not Before: Nov 26 22:00:23 2024 GMT
            Not After : Nov 27 22:00:23 2024 GMT
        Subject: CN=ad5f12cd1e77d6704238463c62b1ba196736d01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:56:04:54:ff:4f:e8:8c:35:93:1d:e7:10:
                    a2:62:22:58:62:79:a9:19:2c:4b:37:63:15:4e:cd:
                    25:1f:5e:e9:bc:b3:9b:af:21:f5:b5:c4:31:00:15:
                    fd:6d:9c:8a:21:6a:a1:5e:1b:6f:5b:91:a5:eb:07:
                    7e:b7:56:3a:1c:fd:1d:0d:0b:9e:8a:66:a2:70:52:
                    b5:cb:72:39:75:e9:fc:96:38:84:1f:3d:ee:6e:05:
                    f6:97:52:6e:84:6f:c9:09:c0:77:28:d9:62:00:36:
                    57:15:82:3d:3a:aa:21:25:c2:d6:ce:7a:b0:a7:9e:
                    9b:3d:a5:28:6e:99:e1:2d:2c:d6:6c:30:18:fd:24:
                    60:f4:6c:e6:84:17:37:25:ae:01:7d:fe:7f:32:dc:
                    0c:31:8d:67:ed:ad:d4:1c:61:fc:33:80:5e:55:9a:
                    b3:b9:8e:15:66:e8:6e:17:a6:e8:e2:b9:ff:19:af:
                    9a:6d:b2:10:67:56:e7:67:33:db:cb:87:9d:6a:70:
                    7b:51:89:c0:4c:55:a4:06:83:f7:3b:2c:c2:53:d7:
                    fe:41:4a:b9:38:36:27:f3:82:47:96:6b:29:af:da:
                    05:df:c5:55:61:5c:20:ea:fb:79:ed:84:90:32:ad:
                    d4:51:29:64:11:35:2e:4d:54:58:e0:21:57:12:fd:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5F:12:CD:1E:77:D6:70:42:38:46:3C:62:B1:BA:19:67:36:D0:1E
            X509v3 Authority Key Identifier:
                keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:bf:19:ce:20:2d:23:fb:b0:ab:01:fc:a5:6a:5b:23:51:
         7b:2a:fa:65:b6:a1:5f:74:b5:4e:b5:a8:80:45:ff:62:0f:7e:
         6a:dc:00:ea:d9:a8:7b:e3:2e:03:b0:ea:16:39:0c:6d:ae:53:
         5f:3f:8d:dc:13:49:c7:f3:5a:78:4a:b7:64:82:b4:e9:7e:cc:
         ee:e1:25:b0:06:27:61:20:72:b0:ed:2b:07:2b:47:0b:40:f2:
         69:08:f9:cf:4d:88:5d:b8:94:a3:ed:3a:07:9f:dc:4f:4d:77:
         6a:ce:52:6c:0c:60:7e:c5:67:7d:70:7d:99:21:89:bb:f4:8c:
         18:fe:05:2a:d6:36:1c:61:ff:6c:d8:17:af:ee:b1:2a:1b:60:
         0f:06:a2:22:58:2b:ad:6b:16:7e:4e:69:8a:19:8d:50:f1:53:
         42:18:a7:04:b1:79:03:b1:d1:c8:76:bc:7f:87:ac:e8:6d:fb:
         d9:14:56:cc:b9:b5:be:a6:4e:a4:11:12:45:7f:7b:29:59:52:
         88:02:df:98:29:59:dd:2a:d7:3b:55:15:fb:ca:9d:2d:2e:46:
         05:dd:0b:40:a0:d9:03:89:c7:9e:90:09:2c:a3:bb:b5:3f:df:
         8e:51:8f:60:0f:87:c5:85:42:28:f8:68:1d:59:6b:d4:83:08:
         d7:52:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:23 2024 by rpki-client on console-fra.rpki-client.org