Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
File:                     hiGwt9-gp4iPde_yDzIUWgs_DdU.mft (raw, json)
Hash identifier:          9oPSoFUrzmIWIdgOG8rsvJgzNoHhO+5DahqX2ieT4Zs=
Subject key identifier:   56:6B:18:B7:EB:D2:20:97:43:B4:88:58:0D:C0:71:D4:55:06:2E:87
Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
Certificate issuer:       /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Certificate serial:       019369DA9246E05C91290BC9B91B5BD7FB62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:32 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:32 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:32 +0000
Files and hashes:         1: 1MiVbJJN1xZuzXn5HT6EmxRPGcg.roa (hash: LtIKxj58XWbXcVLlYuy6qq5VqisTMIu4t+gWnw5pre4=)
                          2: hiGwt9-gp4iPde_yDzIUWgs_DdU.crl (hash: +i5SogvP43dynAuaogPDp0o44VwEGwOCcWaaUIeS0gw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:92:46:e0:5c:91:29:0b:c9:b9:1b:5b:d7:fb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
        Validity
            Not Before: Nov 26 19:02:32 2024 GMT
            Not After : Nov 27 19:02:32 2024 GMT
        Subject: CN=566b18b7ebd2209743b488580dc071d455062e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:6a:43:6a:90:d3:57:98:93:05:cf:9b:e8:
                    03:04:8e:27:20:a9:ee:36:5f:97:f7:b8:c8:00:db:
                    85:9e:d9:b4:f2:af:50:3e:7f:40:14:24:40:6d:c8:
                    0f:6d:c6:7b:84:ec:99:94:9c:8a:73:93:d2:25:ea:
                    98:8c:b5:4b:b1:33:30:80:0d:21:f5:ed:01:e6:f1:
                    61:70:dd:ac:0d:f0:2f:40:b0:9c:9e:74:d2:43:6b:
                    b5:40:0b:55:4e:03:e5:28:f2:70:64:57:0d:c9:f8:
                    05:b7:36:ca:ce:43:04:fa:75:da:74:90:7a:c9:de:
                    37:f1:e0:68:15:10:99:a8:fa:4b:22:36:87:93:2c:
                    cd:22:fe:ca:13:38:dc:6e:3b:6d:21:d4:22:27:e7:
                    3e:97:c1:83:c1:a3:d4:08:72:22:08:ea:65:ce:4b:
                    bc:c7:59:33:39:20:7a:44:86:3e:3f:9f:c5:75:eb:
                    4c:7e:90:43:31:a6:b4:1b:d0:cb:8a:af:d1:fd:85:
                    85:3c:18:af:fd:18:d4:0c:17:95:2b:85:1d:09:81:
                    0c:da:0b:57:a8:59:f5:13:15:4d:5a:a7:6d:da:0f:
                    50:23:10:f0:c5:6b:d7:b2:9d:6f:71:88:6e:e9:23:
                    0e:0f:25:2d:6f:40:12:6a:83:bd:5d:6c:7f:79:1d:
                    05:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6B:18:B7:EB:D2:20:97:43:B4:88:58:0D:C0:71:D4:55:06:2E:87
            X509v3 Authority Key Identifier:
                keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:dd:62:06:fb:4e:2b:e2:13:3a:ff:0e:52:d5:35:d2:b3:7d:
         ef:c7:80:42:de:21:35:08:35:61:34:67:c1:53:ee:b0:79:b4:
         4a:24:3e:74:95:0e:62:0f:9e:03:36:75:2f:4b:b6:28:a5:cf:
         d0:e1:24:e3:ab:35:2c:d3:94:5e:23:1e:69:33:8f:98:c5:fb:
         7f:48:c4:64:0e:a4:82:c6:09:3a:3c:e2:a2:78:b8:03:89:31:
         35:41:31:70:ba:ac:c5:ec:16:1e:0a:f5:71:c1:68:89:cc:4a:
         c7:da:3d:18:85:1d:2c:ba:05:f8:7c:06:41:b2:ac:6f:d9:91:
         4c:a5:96:40:4b:02:8a:e0:0a:ec:ce:4e:b6:41:d5:f5:68:1f:
         fe:dd:f8:e7:0d:ea:97:a1:b4:0d:1f:a9:4f:cd:a1:6e:42:57:
         64:1d:64:63:de:52:25:8e:91:5b:85:e8:fa:1f:e0:ca:aa:2f:
         8e:de:ab:10:cc:27:b3:79:6d:78:52:ce:36:f6:e4:ed:5f:bb:
         6c:0b:97:ef:08:47:28:0f:db:d9:6f:cf:30:bf:53:e9:5e:fb:
         bf:4b:75:c5:c9:b5:88:b3:88:fd:61:01:72:af:0b:e0:e3:2f:
         52:20:67:7a:6a:43:52:e4:aa:34:1d:58:f9:a0:8a:90:5d:ce:
         e8:0d:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:50 2024 by rpki-client on console-fra.rpki-client.org