Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File:                     jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier:          Ax2/MqMoLVNSqfBHNeIfC6DtWxjkgIPYPeAPzm5/JvQ=
Subject key identifier:   BE:E9:1F:C8:04:4C:40:18:26:04:A8:00:47:C8:06:65:F9:11:AA:AC
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer:       /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial:       019369DA13214E46F99BF7076AC47549C477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:59 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:59 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:59 +0000
Files and hashes:         1: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: dPSDCP5hjwYeNdSOwSpnOOs2HjYXA5MVCD+vPIDvyuY=)
                          2: wVxGeQuiUF84Pv_FYtgqFS-t3Vs.roa (hash: dK6j6lEiXsf02p1oadhltuECT585SYjcwo9qTQVQij0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:13:21:4e:46:f9:9b:f7:07:6a:c4:75:49:c4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
        Validity
            Not Before: Nov 26 19:01:59 2024 GMT
            Not After : Nov 27 19:01:59 2024 GMT
        Subject: CN=bee91fc8044c40182604a80047c80665f911aaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:67:e5:03:a5:1f:4d:60:a9:9f:e5:c7:8f:
                    1d:d7:27:1a:4d:53:0b:37:71:d2:a1:8a:92:b2:b6:
                    53:28:ca:05:42:ff:ee:41:13:db:58:4a:94:84:0c:
                    f1:65:3f:af:9b:bd:30:d6:bc:fe:ef:4a:56:89:f4:
                    cb:87:3a:5b:27:f7:4e:98:80:00:e7:f9:47:31:54:
                    b7:33:7d:9c:e5:ab:14:ac:e1:23:a0:51:8c:08:40:
                    2e:72:90:f2:ce:a0:33:0a:eb:f9:93:80:9b:a1:c8:
                    74:cd:1d:8b:c9:75:ac:5e:77:09:64:8d:93:45:bb:
                    77:fc:46:c5:48:2d:c8:1a:dd:0f:13:36:e9:d4:87:
                    18:7d:b3:06:32:b2:27:a6:63:50:9b:c6:74:be:9e:
                    08:63:92:70:64:fd:76:10:df:79:c7:c0:47:e7:20:
                    d7:38:80:7a:a1:b7:0e:0f:19:6d:bd:7a:4f:46:25:
                    ee:f9:2b:ae:79:74:a6:c1:76:7d:60:9a:b9:23:e6:
                    25:37:49:5a:d5:ec:3f:76:12:96:45:b2:e6:a5:68:
                    e8:dc:9d:01:b3:94:e7:84:a9:10:70:03:92:61:1f:
                    37:6d:47:8c:9f:81:b3:4d:83:9d:a9:18:c0:11:c3:
                    7c:e5:b0:cc:3f:9d:6a:e5:0e:40:16:13:80:ec:dd:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E9:1F:C8:04:4C:40:18:26:04:A8:00:47:C8:06:65:F9:11:AA:AC
            X509v3 Authority Key Identifier:
                keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:97:b0:09:f0:a5:a2:59:0d:4e:08:9f:c0:b2:9f:01:54:60:
         5d:39:9b:ca:3c:7c:ba:c2:9d:d0:70:58:9b:25:77:3d:99:be:
         62:70:dd:72:c6:17:36:4f:ac:88:19:e7:e5:5d:24:92:14:e2:
         47:d8:c4:81:a3:f0:64:28:9f:9a:c9:cb:d9:96:05:a9:4c:26:
         ab:ec:91:e9:54:d9:14:29:c6:22:50:51:52:52:87:73:38:51:
         05:38:f3:47:97:89:38:b0:24:58:9f:af:eb:2a:04:4a:00:29:
         04:24:05:23:91:cd:2a:3e:7f:26:f5:ce:e1:d5:98:96:37:68:
         00:57:45:0e:72:90:d4:88:b9:5a:5b:d7:91:6c:30:0c:bf:f4:
         1d:b5:f4:f7:e6:83:57:77:26:a3:9c:fd:3f:3b:28:06:20:e9:
         21:fa:d1:71:a0:c8:65:3c:b8:28:52:7d:5d:47:db:7f:ab:e4:
         7b:6e:e2:66:8b:4e:26:5a:a6:47:ac:97:0b:65:59:4d:7c:c7:
         07:b9:60:20:23:41:06:17:07:f5:cf:b6:62:58:7a:90:db:07:
         7a:3f:c2:0e:8e:9b:ff:49:18:3d:02:db:53:8f:fc:1f:b6:c5:
         3a:e0:e7:39:46:f9:53:f5:51:07:1c:04:03:fd:7b:05:94:24:
         0a:90:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:59 2024 by rpki-client on console-ams.rpki-client.org