Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File:                     bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier:          mOjhUVMfhivGsX56fcnCevFCqb+QrW6RnKmsQ6oyNJ0=
Subject key identifier:   19:D7:B2:0F:73:DB:A8:5D:E3:01:14:AB:D1:F9:6E:AA:06:EB:F7:5A
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer:       /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial:       019369DA22FEE147AC53C335A0604AEF300C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:02:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:03 +0000
Files and hashes:         1: LjUmwrYWnN-ggpEDA6rhcRJ27LY.roa (hash: k4k7soZrIj0pLqHfgg0bbN20nR7zKxSiVAxgutLsxe8=)
                          2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: DCht3GbqXSrh9f68h0sEsZWCjI8RbiExCfjiETDAgjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:22:fe:e1:47:ac:53:c3:35:a0:60:4a:ef:30:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
        Validity
            Not Before: Nov 26 19:02:03 2024 GMT
            Not After : Nov 27 19:02:03 2024 GMT
        Subject: CN=19d7b20f73dba85de30114abd1f96eaa06ebf75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:97:b2:1a:38:27:b7:6c:36:8f:1a:32:b1:
                    39:cc:44:d7:bc:01:40:e7:f8:51:0c:1c:52:9f:ca:
                    a8:bf:00:80:9b:cd:21:12:37:f9:93:40:a0:bb:61:
                    68:c6:80:ef:f1:6e:ae:82:ac:1e:89:9c:11:39:50:
                    2d:d1:46:d2:e8:27:4c:ad:8e:7c:7f:41:a7:52:1d:
                    1b:eb:5b:52:a3:f7:ff:a6:aa:03:c6:9f:16:87:85:
                    a1:80:32:e6:9c:54:57:a4:62:78:30:f7:17:83:d5:
                    df:4b:65:4b:ff:a3:ed:96:a6:c5:b7:29:6f:ed:3b:
                    29:88:68:9e:3e:50:a2:b1:6d:c6:b7:9f:d9:f1:8c:
                    67:73:ef:bd:55:7b:31:f5:4b:c2:45:97:56:09:5d:
                    37:04:23:27:29:99:61:f3:1a:df:14:a0:22:cc:bf:
                    67:f2:6f:82:51:9d:de:05:dc:f5:8d:ba:2a:04:06:
                    10:67:90:99:fb:6b:0e:5a:e7:78:31:0f:ac:03:8a:
                    99:26:02:71:f6:e3:c5:7f:0d:d0:1f:c0:88:87:3c:
                    bd:aa:7f:f0:60:76:66:59:48:07:df:84:39:f9:ff:
                    53:f5:f2:17:61:61:f1:23:f8:e0:4d:fb:0f:ad:73:
                    fc:90:10:68:ac:6c:b9:b6:33:c8:cf:f4:9c:ce:2e:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D7:B2:0F:73:DB:A8:5D:E3:01:14:AB:D1:F9:6E:AA:06:EB:F7:5A
            X509v3 Authority Key Identifier:
                keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8f:3c:44:ea:58:0e:7b:f8:17:f0:93:88:6a:33:ab:66:df:
         0e:ad:86:dd:99:91:e4:cd:35:5c:0a:f9:9c:49:f1:0e:ba:fc:
         37:eb:78:c5:4b:b3:59:8b:33:90:c3:af:b3:35:1e:19:b3:f5:
         09:fb:ea:d7:a8:f5:19:a1:c4:31:e2:d4:10:d3:e2:27:8c:7c:
         30:15:16:a8:18:82:fe:ec:24:1d:d9:8d:86:bf:ae:ad:ca:fe:
         22:77:78:fa:66:ad:11:46:a4:31:0d:de:ce:aa:dd:e1:bd:6b:
         c5:7e:33:9f:f3:c4:1f:b0:25:eb:59:23:fe:e9:13:0e:17:c4:
         c4:8a:a6:27:c7:36:8c:59:91:2e:f2:48:8d:7a:9b:51:08:19:
         b9:52:ea:45:1e:4a:1f:d4:e1:52:7a:29:f9:b6:94:32:26:8c:
         ab:5f:84:66:a9:b3:7f:53:0f:07:1f:48:b9:94:00:0a:b1:9e:
         44:9e:99:59:5a:44:b1:60:fa:7b:a2:49:af:40:5a:2b:66:4c:
         4e:dd:78:83:83:1f:52:53:d8:3c:38:3a:55:db:5d:3a:ca:01:
         f4:c8:e2:2c:e4:86:b6:e5:ad:d8:7e:01:6d:35:c9:12:25:18:
         43:b7:df:bd:c6:0c:5a:9b:75:f7:fd:37:f0:3b:3b:33:e4:00:
         7e:1c:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:06 2024 by rpki-client on console-ams.rpki-client.org