Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File:                     CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier:          J4dPenoI6gheMZY/Wsg4QuGUqOSI93Cizjsr7Hotn90=
Subject key identifier:   31:3C:11:26:16:F8:52:67:64:3D:AF:06:78:F9:B4:16:69:82:34:6C
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer:       /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial:       01936AEB6F31156E9B4FBBB468C5730B7F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 00:00:34 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:34 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:34 +0000
Files and hashes:         1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: FSce7UfaDLVx6cGJ888pwVcDrcOVv0e7U61CYkBIW7s=)
                          2: kIodGZkuAwXDnbz0MyJtw4XbNag.roa (hash: /SBm/vFKXK/nYPk+P9SXBQTw9zFW/v6dvtP4VrQHPFg=)
                          3: otQj9ttnAX2PiHI-R5kL047zHvM.roa (hash: EqmlSpUBRrTnC3qmFzcQacBT38aBsVh7P0EEv7lmWso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:6f:31:15:6e:9b:4f:bb:b4:68:c5:73:0b:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
        Validity
            Not Before: Nov 27 00:00:34 2024 GMT
            Not After : Nov 28 00:00:34 2024 GMT
        Subject: CN=313c112616f85267643daf0678f9b4166982346c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:c4:24:35:9a:ca:a7:50:ce:b3:0b:3e:b3:
                    ef:14:eb:9f:0c:3d:9a:dc:b9:22:d6:12:c1:e8:8a:
                    de:d5:2e:af:56:b6:b6:62:37:71:f5:dd:c0:d2:8c:
                    c8:bd:39:80:39:ca:02:8c:8d:7d:c9:ad:e0:23:a8:
                    ce:f1:b0:31:40:81:ec:c3:51:8f:54:0b:40:2c:6f:
                    35:64:12:58:6e:2a:50:ca:da:8a:cd:de:78:f8:7c:
                    a2:f4:94:98:7e:4f:94:80:5c:7f:de:ec:9e:62:94:
                    06:f5:52:9b:fb:49:07:c4:3d:07:95:46:b5:49:7d:
                    11:28:1f:9b:72:56:ea:3c:00:88:29:55:6a:26:cc:
                    5d:9e:8e:fe:f3:b2:e7:8e:95:60:11:7d:5c:1f:67:
                    89:fa:0a:30:44:fc:fd:be:70:cd:bf:65:93:d4:bb:
                    39:fd:c4:b4:50:92:60:79:c2:79:9f:c0:3c:3f:77:
                    05:d8:a7:62:1f:19:3c:ff:8b:63:22:22:f8:5a:71:
                    6e:a3:c3:3c:ee:37:f0:61:de:b7:ae:a3:79:48:13:
                    4c:ae:22:81:83:48:2b:14:26:65:62:6b:bc:02:86:
                    72:95:ed:c2:63:e7:67:b3:f6:eb:da:e4:29:9e:a3:
                    0a:73:98:3f:7c:60:1b:ff:37:1a:a1:fe:d9:8d:f8:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:11:26:16:F8:52:67:64:3D:AF:06:78:F9:B4:16:69:82:34:6C
            X509v3 Authority Key Identifier:
                keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4a:67:0a:40:e6:39:a8:90:f9:70:65:cb:af:6e:a5:43:c0:
         32:2d:35:6f:f0:ec:55:41:a4:89:22:02:db:b2:23:81:79:f1:
         fb:c4:09:e4:7b:90:a5:cf:d8:e7:2e:8a:24:8c:e2:dc:e7:3d:
         1d:4f:70:cc:dd:30:11:85:38:a9:58:28:5a:c7:93:a8:52:70:
         16:3d:bf:9b:44:2d:c0:4d:69:ce:71:15:0c:5b:cb:88:a1:bb:
         c0:3f:9f:52:07:1a:4f:1c:08:22:d9:ff:75:a7:f8:2c:e9:a5:
         78:03:8e:f0:86:e0:71:17:95:b3:2d:15:b7:51:c0:eb:46:c8:
         f1:b6:e7:a9:14:2d:30:46:e9:53:05:da:80:21:ed:3e:c4:52:
         09:d1:b5:f4:d4:b8:68:9b:f0:77:37:93:8d:f7:8a:3c:21:40:
         98:52:dc:aa:45:32:71:60:a4:18:86:f2:a1:60:41:7b:3c:0a:
         1e:8a:75:dc:52:cd:bf:f4:e2:8b:ca:12:3a:94:16:d0:22:e9:
         a1:6e:df:33:2a:3e:e9:06:98:90:72:98:78:d3:2f:86:62:88:
         c8:9a:1f:77:36:0a:32:f2:82:05:91:b8:15:2d:a6:38:60:0f:
         e6:66:4f:48:dc:17:af:c0:c0:a9:b4:99:0c:56:2c:08:ff:53:
         06:bd:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:45 2024 by rpki-client on console-fra.rpki-client.org