Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File:                     63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier:          JgWno5KGyDvzDspr12gyLhXO5uJ0fOh2hBWfBO3HWAI=
Subject key identifier:   36:F6:A3:35:4B:63:C5:F6:4E:C2:53:72:88:0B:83:08:38:1E:BB:2C
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer:       /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial:       019358790BCAA04CC1DFD665232727BFB256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 10:02:28 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:28 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:28 +0000
Files and hashes:         1: 4vlGnuTu7lpVXBznQ1F96T-ppIM.roa (hash: t46ztZulq7uJOoiooEbAuDY8c4VtlkfVkVj24NmShSs=)
                          2: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: jCKKE7m1CjivVXA9OpX/g1wnCPPy8ac2WUDbXCKxGOY=)
                          3: IroBev8T8jW8vUNVdXPRxyv-fw8.roa (hash: YORFm7o3SSfIxew+tggJQLs4Q0rg+GSj6B8yUHp+nJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:0b:ca:a0:4c:c1:df:d6:65:23:27:27:bf:b2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
        Validity
            Not Before: Nov 23 10:02:28 2024 GMT
            Not After : Nov 24 10:02:28 2024 GMT
        Subject: CN=36f6a3354b63c5f64ec25372880b8308381ebb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:6e:5e:c9:cc:9f:2c:c8:be:0c:e8:cd:ae:
                    fb:10:cd:82:30:27:56:fc:53:ee:0f:d4:38:87:6b:
                    7b:b8:67:8f:0a:9d:48:72:9d:7d:45:17:e3:a8:e5:
                    f9:95:0e:fa:78:f5:56:56:61:fe:f6:7c:f2:65:10:
                    02:58:78:78:be:06:6f:d4:f6:f0:cb:c4:ea:d4:2e:
                    2b:fe:36:64:ad:83:e9:f7:88:df:3d:90:73:f8:fa:
                    69:7a:61:af:95:17:a3:e0:3f:2e:85:ac:83:a9:9f:
                    5b:61:b2:3a:eb:c5:7e:4a:a6:ef:60:a6:60:4b:ce:
                    54:1d:c7:0a:b8:b5:e6:a5:ab:49:3a:c8:f6:37:93:
                    59:99:cc:40:ec:b9:d9:54:30:13:46:36:02:6a:aa:
                    44:e5:71:a3:06:32:61:68:b1:36:3d:ea:4c:b5:c9:
                    21:6a:65:5e:73:37:94:21:fe:64:b1:a7:95:43:62:
                    5a:02:e9:30:46:78:6e:b2:8d:c9:17:a8:95:33:b1:
                    0f:1f:c0:b4:dd:21:b1:ae:b3:62:34:e9:e3:72:9f:
                    f2:b7:40:1e:f6:04:91:8c:bc:8e:23:54:78:1c:dd:
                    a1:87:3e:e4:30:1a:c6:dd:ee:c6:c9:be:e1:59:12:
                    12:a2:2f:82:ea:d6:26:e1:3e:9d:fd:f2:dc:f9:0d:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:A3:35:4B:63:C5:F6:4E:C2:53:72:88:0B:83:08:38:1E:BB:2C
            X509v3 Authority Key Identifier:
                keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:a6:73:1a:38:32:0e:42:f0:ca:88:a1:ea:9a:45:b7:cd:
         08:ea:d1:52:db:b5:af:aa:4b:b5:d5:a4:ec:85:25:25:b8:b0:
         2f:1a:7c:6a:cb:7d:95:37:d5:02:58:82:af:6a:b6:da:12:2d:
         a7:b3:ee:b5:90:93:07:b1:24:fa:39:1d:40:4a:58:df:3d:67:
         dd:cc:0a:40:b8:75:e1:23:d4:6c:45:bf:8d:b7:1e:98:92:46:
         05:0a:57:7e:fb:54:a9:5f:ba:5f:07:0c:29:89:8e:27:8c:94:
         56:01:43:2e:d2:aa:b7:f8:97:66:ce:e8:9d:22:10:c9:0b:97:
         17:4c:e8:50:7b:71:49:c2:b7:c1:38:02:fa:7d:b7:10:8f:78:
         d4:8c:ab:73:8e:b7:21:7c:5c:06:9d:0e:00:02:1e:56:ae:9b:
         30:2f:74:c3:cd:23:d5:b1:71:1a:14:d1:3e:03:87:c7:92:f9:
         71:9e:b4:ab:aa:e6:d3:2d:4c:b4:60:f3:c6:51:d7:f5:4a:90:
         07:71:a9:6f:35:d8:4c:6a:4e:5a:70:9e:f0:30:0e:cb:fd:6f:
         08:49:a7:51:de:6e:64:32:87:a8:37:f2:e7:94:d3:64:df:01:
         f9:0e:fa:e8:54:69:af:18:6e:af:b3:c2:5f:30:ec:2f:56:3f:
         4c:10:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:20 2024 by rpki-client on console-fra.rpki-client.org