Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File:                     ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier:          Z4fIH/v0XkEm85rclb/TsI2wSDrtZayRIEh2XI3n3d0=
Subject key identifier:   84:7C:DB:49:07:FA:DD:FE:7F:37:E7:DD:DF:BD:4E:0E:8E:4A:B5:BD
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer:       /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial:       01936AB475DA6D4DE0552C756A5D64ADDE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 23:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:31 +0000
Files and hashes:         1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: qdZ7BfwLnu82Z8kcmxsSNGM7T4/hwOI/M6eltcxqdn8=)
                          2: fY7myP6WtQ5vqe-SDtjbiiWxiVs.roa (hash: YKTNRxlsb184yeKebODcclGvQy68Qe4ZTJiOsdTk8Sk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:75:da:6d:4d:e0:55:2c:75:6a:5d:64:ad:de:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
        Validity
            Not Before: Nov 26 23:00:31 2024 GMT
            Not After : Nov 27 23:00:31 2024 GMT
        Subject: CN=847cdb4907faddfe7f37e7dddfbd4e0e8e4ab5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:7a:f1:78:da:df:6a:52:f5:48:87:76:60:
                    65:7d:e0:89:d7:d2:d8:93:2c:3e:93:88:2e:eb:b8:
                    6e:3f:43:6c:83:e9:10:ca:26:dd:b7:15:64:73:48:
                    fc:2d:62:8a:00:d7:fb:08:cd:1e:e7:18:9c:89:8f:
                    d3:16:7e:b1:ad:1f:8f:84:fc:d2:af:14:c2:7e:df:
                    65:15:0c:81:c2:f3:42:7a:44:2d:2e:a9:53:03:84:
                    48:9d:ac:b2:49:1f:60:12:b2:55:8a:74:d3:f4:ce:
                    ce:9f:95:b7:74:01:9f:aa:3c:28:91:91:a6:16:d9:
                    9d:f2:4c:77:c7:ad:f3:a6:8c:a6:55:05:48:30:29:
                    2c:34:5d:81:f4:a4:13:b0:c2:3a:14:ed:7e:6a:67:
                    95:8d:90:80:2a:94:a7:1a:e1:77:47:af:1b:c6:5b:
                    d4:40:f0:2d:c7:f7:4a:41:27:11:6f:ae:08:a9:3f:
                    41:3f:c5:e4:bb:ac:0a:02:a6:a9:50:3f:11:b3:3d:
                    9c:fb:b9:4a:df:d4:f6:4f:a3:3b:ea:32:ce:61:20:
                    d1:6e:c3:0d:3f:9e:f0:ca:2b:4f:a6:82:dc:fb:c1:
                    41:0c:d3:b4:5e:c2:ae:c4:ab:6f:7d:bf:e5:ed:50:
                    2b:c2:8e:85:a7:07:a7:2c:23:2d:02:bd:45:09:1f:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7C:DB:49:07:FA:DD:FE:7F:37:E7:DD:DF:BD:4E:0E:8E:4A:B5:BD
            X509v3 Authority Key Identifier:
                keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:40:18:d8:1e:ab:e0:f1:db:20:67:aa:e3:b1:45:f2:81:60:
         a3:6b:1d:a7:c4:c7:43:f9:73:03:f2:bd:c8:a6:18:52:91:b7:
         11:de:bb:65:8a:8f:42:a1:2e:d5:7f:47:0d:a9:fc:d1:18:4a:
         2f:36:75:4f:67:e9:5e:0f:5b:07:9c:f5:0a:00:32:79:48:ce:
         f2:c7:4d:c1:c2:31:b9:30:f3:76:21:1f:2a:d7:6b:88:c6:cb:
         4f:af:c0:e8:87:ab:f2:e5:b6:a5:5e:e2:c2:2e:ba:a9:4a:77:
         f6:f3:61:c3:88:0a:e1:08:d3:f1:e8:91:af:0e:d7:7d:b6:60:
         11:b5:97:b8:e6:7b:82:83:b4:8f:23:ae:e6:0b:9d:14:44:1f:
         23:78:0c:4d:c6:b7:7c:ea:96:f3:d2:fe:57:2d:ec:cb:80:48:
         a0:c9:16:07:72:2f:ef:82:65:11:d0:d2:4f:df:e2:d5:71:dd:
         15:c7:6a:3f:ab:04:47:05:7b:48:62:65:a6:0b:04:61:14:e8:
         e3:85:d5:3c:42:be:c8:b5:8e:6d:cd:6e:f3:db:40:13:e8:cd:
         56:8c:af:b6:05:e1:c3:10:35:fa:ef:0d:ee:d2:49:21:1b:56:
         da:cd:78:6f:88:c5:d0:f5:62:5e:72:df:13:cc:bd:6a:c5:78:
         6a:6c:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:33 2024 by rpki-client on console-fra.rpki-client.org