Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
File:                     R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json)
Hash identifier:          Y2rq6208rjtBWGn288vkLgRBy5XJDKNs4+kILUUHvXs=
Subject key identifier:   61:E4:71:81:E3:31:D3:3E:DC:F7:50:D2:99:4D:27:18:18:AC:C9:82
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Certificate issuer:       /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial:       0193549C60F7B180DEB82DA50D60201062A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:02:34 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:34 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:34 +0000
Files and hashes:         1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: LGZOemMkuUODE8DAbpg5ESuOgVLNidq70ngnhpreG1w=)
                          2: as6MxFnsgQJMhgg-T5A7cfc8HbQ.roa (hash: 30x2scjO+6YRqx9FOQkN67odA/VLMtxpTl9Pkk+k/GA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:60:f7:b1:80:de:b8:2d:a5:0d:60:20:10:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
        Validity
            Not Before: Nov 22 16:02:34 2024 GMT
            Not After : Nov 23 16:02:34 2024 GMT
        Subject: CN=61e47181e331d33edcf750d2994d271818acc982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:5a:9c:bb:c5:43:92:08:e8:69:26:c1:a8:
                    8b:9f:4d:6b:1f:29:5d:05:92:2b:aa:fd:e5:25:f6:
                    cf:50:74:fe:64:01:7b:9c:05:6e:fc:bc:33:d9:9f:
                    e7:3c:a5:a0:32:64:41:a0:4b:5a:5f:28:a9:bb:7f:
                    fd:29:9b:b2:d3:ac:da:76:77:83:18:5c:bd:70:fa:
                    75:d3:8f:60:70:e9:ce:12:66:ed:27:3a:6b:08:a8:
                    2c:25:66:75:2a:fe:42:cb:de:9e:f3:50:3c:23:87:
                    c8:d0:90:07:80:03:92:92:e2:fe:02:48:5b:b1:98:
                    51:45:fa:a2:d8:1e:4f:42:df:bb:80:80:23:6a:5b:
                    c6:c5:0f:c2:5f:89:a6:75:99:40:fc:8f:b3:64:de:
                    38:64:99:3a:ec:d2:bd:48:cd:23:57:3c:b7:93:c6:
                    23:63:1d:2b:85:31:86:ea:dc:8f:c8:ec:36:6b:7a:
                    7d:65:de:fe:96:81:e0:5b:7e:a6:63:cb:a6:53:80:
                    04:e8:88:4a:4d:ae:a7:35:06:12:14:7b:8f:59:a6:
                    f7:9a:16:93:85:75:e1:36:de:89:7a:63:bb:ad:ad:
                    39:f1:a3:b3:c5:31:5d:65:e5:dc:91:a9:9f:e6:62:
                    19:54:c4:ff:c5:5a:82:7f:17:b5:69:a0:5d:42:37:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:71:81:E3:31:D3:3E:DC:F7:50:D2:99:4D:27:18:18:AC:C9:82
            X509v3 Authority Key Identifier:
                keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:58:0b:23:bb:69:85:5a:d1:33:e2:7f:d1:ec:5e:cc:9f:ef:
         96:6b:67:34:32:50:cc:12:21:20:9f:0b:37:f5:88:db:0c:0a:
         ac:09:da:33:ff:e3:8b:8f:73:7d:70:66:32:5c:93:37:36:46:
         b5:6a:3c:6a:ce:c3:53:9f:16:9a:19:58:15:8f:ef:db:9d:59:
         26:15:e9:11:7c:c3:8a:aa:3f:02:90:8d:07:16:7c:b9:3c:eb:
         77:74:34:8a:6c:73:0e:2d:5f:6b:e1:21:4f:57:74:ee:63:50:
         02:92:27:7b:5d:6e:dd:30:b8:90:7f:f4:56:7d:5c:04:9e:e6:
         ad:a7:f2:61:d5:8c:9f:4c:cb:85:21:71:88:5d:cb:1b:c0:f5:
         71:00:f2:ee:76:ba:64:a8:e1:c7:60:ee:97:9d:d3:62:d0:56:
         79:36:42:9f:f9:8e:31:cd:21:99:88:b0:65:31:bf:7a:f0:55:
         eb:7b:25:b7:37:0f:41:3c:ea:44:ae:17:4e:2b:b9:1b:b3:b1:
         f3:8d:dd:f8:9e:1a:e3:2d:4a:a9:20:d8:11:31:58:d3:34:ed:
         b6:34:d6:53:e1:c2:4c:8a:7c:c0:9b:4c:64:9c:cf:8e:6b:f1:
         8d:f4:73:eb:a8:14:81:8d:40:50:c4:e8:07:24:1e:3e:d6:38:
         90:ec:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:27:01 2024 by rpki-client on console-ams.rpki-client.org