Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File:                     G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier:          FngQF8lZ5LKY2d3NGZzZMulUg+ksIakS4vxNoiU7Tho=
Subject key identifier:   39:8D:49:E1:D5:86:09:EA:70:00:74:3F:07:AA:AB:3C:4B:8E:8F:E1
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer:       /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial:       01936AB4644CB6905902371CED9E4813B9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 23:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:27 +0000
Files and hashes:         1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: TnXTKJWQK+f3NGS6E1+ju0a7O06KD4pwhcFitNjmkKc=)
                          2: YnQVXFSEtcGKj1ySWNPnigrh_Gc.roa (hash: VlFeFiluJIvfKSFDOZfcweQlAbqR/4Z279IH3fV7Yp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:64:4c:b6:90:59:02:37:1c:ed:9e:48:13:b9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
        Validity
            Not Before: Nov 26 23:00:27 2024 GMT
            Not After : Nov 27 23:00:27 2024 GMT
        Subject: CN=398d49e1d58609ea7000743f07aaab3c4b8e8fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:72:f0:fb:86:84:33:30:92:cf:70:58:16:
                    bc:e1:0d:5b:44:d5:1b:9b:ce:a4:6e:b7:b8:e2:c1:
                    08:64:d8:16:b0:42:3a:6a:e9:90:25:76:1a:d6:1e:
                    29:3d:99:79:a3:02:06:c8:81:12:bb:a0:25:66:bc:
                    c9:2a:7a:e7:29:98:34:86:bd:4e:1f:b6:a5:98:fb:
                    8d:66:8b:5d:0d:b0:1d:9a:49:e5:3d:53:ad:19:02:
                    a8:4c:7c:77:15:79:76:3c:34:76:1e:79:d6:93:67:
                    3b:48:48:0f:7e:27:44:b3:9e:ba:7a:18:63:38:61:
                    3f:2d:be:f6:01:b8:46:f0:4a:33:90:eb:ad:68:01:
                    ce:f4:b9:eb:f0:c2:1d:db:39:bf:b1:fd:42:71:bb:
                    29:26:9b:60:69:ce:ec:00:8a:db:fb:f9:1b:c4:f1:
                    db:1a:be:85:ac:c3:cd:a5:28:ea:00:c5:5f:97:5a:
                    c2:4b:98:c7:94:9f:e3:51:2a:92:f1:ed:4d:39:82:
                    42:00:e6:09:2d:f4:b3:93:93:18:7f:c7:f3:41:1c:
                    41:50:b6:cb:e7:41:e3:5c:7b:9f:3a:59:90:65:50:
                    2a:51:9a:21:eb:91:19:df:46:6f:0c:c5:72:84:2e:
                    59:ab:b2:01:95:27:ef:b6:54:45:9b:07:4c:ce:3f:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:49:E1:D5:86:09:EA:70:00:74:3F:07:AA:AB:3C:4B:8E:8F:E1
            X509v3 Authority Key Identifier:
                keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:65:7f:5f:c7:8a:8c:2e:d0:0c:e2:f3:fb:4b:c5:3a:27:00:
         a3:1e:40:11:03:9f:60:7f:c3:ce:bd:14:fd:f8:d2:37:89:20:
         57:9f:d0:72:17:2d:d5:74:8e:a1:74:4d:48:2d:45:52:e7:30:
         c8:bf:39:87:b6:b2:19:77:6e:4c:21:11:a3:02:5c:14:07:08:
         5c:e9:e8:50:ca:b6:0e:67:52:31:6a:df:d4:15:d4:fe:39:b3:
         ba:e4:3f:5b:d1:ef:63:a1:32:2f:55:16:b2:63:3d:06:fc:39:
         c7:18:a4:16:f6:cf:ee:d5:08:44:68:34:04:c3:33:42:c4:88:
         7b:62:13:be:68:5d:a4:68:d9:65:49:c7:f7:26:57:60:f2:e3:
         4b:f5:0d:47:74:5e:78:a8:a2:6c:9f:a9:dc:fc:0e:06:b0:3d:
         cf:84:bb:dc:37:4b:ac:57:75:1b:76:5c:e4:ed:d7:e9:4b:c8:
         47:ba:43:55:32:28:46:b0:7a:90:bd:93:46:2d:46:a8:92:dd:
         7b:b4:69:16:cc:cd:25:4d:40:14:47:ab:8e:d3:d2:e0:c5:2c:
         98:fb:88:c4:fd:a7:49:a7:64:d7:db:5f:6b:67:cf:ab:48:a6:
         02:df:eb:66:59:9b:e4:03:6b:43:85:3b:6c:6c:0f:9e:0e:b3:
         ff:d6:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:59 2024 by rpki-client on console-ams.rpki-client.org