Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          wbl0dWAGjFSyd+xD/3QCyPrq2KX1q4KYpRkWPohF2A4=
Subject key identifier:   95:4E:5D:39:9F:D1:7A:F2:B9:44:B7:59:CE:58:86:41:37:4C:6F:72
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       019369D975002713DC47D9F4D4C0233D9922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:01:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:19 +0000
Files and hashes:         1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: CcbGsd5cyG+tDQuCFbjw8Ec8cF93PPeW0iSJdKA4OqY=)
                          2: g2L_j_OlF8oNJJm5RDJfW4NvqQY.roa (hash: SyCsv5iIE6MdHBA8IaYkdHxnGbUHoOSIzGIpbOe5urQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:75:00:27:13:dc:47:d9:f4:d4:c0:23:3d:99:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: Nov 26 19:01:19 2024 GMT
            Not After : Nov 27 19:01:19 2024 GMT
        Subject: CN=954e5d399fd17af2b944b759ce588641374c6f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:02:51:e4:9e:a5:16:82:eb:fa:b8:12:1e:
                    28:3d:fe:68:70:cf:d1:fa:33:a3:35:03:4a:64:80:
                    f9:e5:16:72:e8:e7:51:13:41:bf:fb:2c:67:77:19:
                    d5:c5:2e:d6:9b:f5:e1:1a:8a:00:e1:9f:10:2b:28:
                    2e:3c:da:d6:0c:1e:ec:f9:38:26:ec:fd:52:d3:23:
                    93:e1:87:46:fb:2b:42:45:1d:46:f1:90:49:f7:7a:
                    f2:08:97:ec:2c:e7:a6:ec:c8:0d:18:02:08:23:9a:
                    7f:65:a8:53:cd:4e:4c:ff:b6:5f:db:74:1e:09:fc:
                    2a:53:92:b9:a8:c5:11:dd:15:a4:9e:27:27:46:69:
                    99:52:e4:59:d2:98:60:c5:7c:f5:27:8c:d4:f7:6e:
                    a0:6d:8e:6b:f3:3d:d4:4a:fe:d2:a8:2e:e3:b3:ad:
                    89:d1:dc:55:fe:af:05:b3:96:34:cf:18:23:c9:0d:
                    4d:bc:dc:9b:25:73:a7:60:55:97:91:f6:e7:c5:e2:
                    64:1f:a1:fe:13:cb:1c:a1:e0:4c:0d:f6:48:9c:a2:
                    ca:3b:95:53:fb:c6:81:72:29:35:c5:2a:0a:84:13:
                    61:7e:be:8b:95:f4:89:77:4d:ad:7d:27:a4:7a:50:
                    28:37:39:46:b7:3c:a5:7a:93:fd:81:da:da:fb:7f:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4E:5D:39:9F:D1:7A:F2:B9:44:B7:59:CE:58:86:41:37:4C:6F:72
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:6d:4e:c9:0c:05:d3:1b:e1:1e:90:57:0e:72:09:fa:c2:
         3e:d8:dc:f4:14:f0:b8:e3:35:44:45:03:ca:f6:56:ed:80:c1:
         3f:d8:c1:4b:2f:d7:19:55:a1:2b:18:e5:b1:f2:da:be:ad:ba:
         cf:aa:fc:d4:37:ac:0c:91:79:82:48:1e:24:0d:76:8e:f1:79:
         a0:66:62:ae:5d:c9:b9:a6:0d:fe:eb:b2:0a:ef:8c:c1:b0:8b:
         5f:55:3e:d8:81:8f:db:de:4f:47:e6:8e:d2:ad:35:b6:ab:99:
         82:0c:ee:9a:bf:eb:d7:e1:e1:7e:30:3f:d8:ba:78:43:69:ee:
         37:3c:ab:be:63:2f:ca:22:d6:46:7d:2c:f5:71:fc:c2:50:5b:
         eb:ba:0d:1c:90:7c:6e:64:62:8e:9d:43:29:7f:d3:f0:3e:d1:
         69:be:01:65:4b:30:62:30:18:29:75:b7:08:fb:a0:a5:19:33:
         17:e8:bd:0b:d3:24:47:12:85:f4:d0:65:19:bd:13:64:99:41:
         7c:f6:95:74:10:c9:d8:17:69:8d:52:57:f1:00:6b:43:2c:33:
         20:a3:b9:0f:e4:af:0f:d2:a5:d9:78:70:9d:5b:d3:8b:e0:90:
         68:e6:37:85:91:87:90:a4:22:17:27:ab:87:c4:38:be:77:f4:
         39:87:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:40 2024 by rpki-client on console-ams.rpki-client.org