Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
File:                     7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json)
Hash identifier:          ECX3R3BiB7GEC27D9GVvTd3Tbh/1tks14CEZfkPBgcI=
Subject key identifier:   56:81:D2:0F:B4:53:72:4B:97:E7:E6:27:37:EF:90:FA:A8:76:CE:28
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Certificate issuer:       /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial:       01936CA2C12263FF258B002DB408F2D868CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 08:00:25 +0000
Manifest this update:     Wed 27 Nov 2024 08:00:25 +0000
Manifest next update:     Thu 28 Nov 2024 08:00:25 +0000
Files and hashes:         1: 7HjCPOI4zQx8mF6sFEG3aVS1sWU.roa (hash: Xs7G4DD3zv5gc9GuPkkeL/nc1Pd0XoPfsNvHyBgYmUo=)
                          2: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: cLhuU21L8vItdKl1t1DhgJaTN3cNXxdFsCwMKdkTVjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:a2:c1:22:63:ff:25:8b:00:2d:b4:08:f2:d8:68:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
        Validity
            Not Before: Nov 27 08:00:25 2024 GMT
            Not After : Nov 28 08:00:25 2024 GMT
        Subject: CN=5681d20fb453724b97e7e62737ef90faa876ce28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:89:b5:ba:f6:81:18:22:9a:d7:3a:72:7d:
                    68:b9:ae:a9:be:08:60:ed:dd:4a:cb:7e:d4:8c:d8:
                    86:f8:f3:00:3b:dc:b1:a0:b9:ef:0a:c4:9a:37:2d:
                    36:ad:de:bd:10:c3:4d:c7:fd:4b:b0:d2:5c:8b:be:
                    53:d3:46:7c:14:d9:77:a4:86:d3:64:6d:8e:b4:22:
                    8d:15:b4:1c:2e:6d:2b:d3:c0:20:3e:82:2f:e3:bc:
                    35:d5:9a:ae:de:c3:18:d1:a1:42:75:f6:f6:01:54:
                    9f:49:7b:6d:27:d7:cf:7d:e3:44:86:50:53:af:b4:
                    01:75:bb:f8:71:35:f0:85:74:29:e7:a1:3c:5e:90:
                    7c:2d:c8:bd:1f:8d:da:0c:2a:1a:ad:57:2b:ff:1f:
                    10:b6:65:0b:6d:b3:23:88:8a:82:fe:ef:52:fe:b4:
                    37:86:cb:73:95:01:91:44:17:e7:4b:52:ea:88:9d:
                    b2:33:40:4d:4e:8e:48:6b:a1:5e:6c:c3:f1:84:32:
                    34:37:b4:ea:f9:72:52:31:b9:61:81:51:6a:d3:17:
                    ab:a4:2e:53:e2:4f:aa:03:84:90:7d:5a:58:df:bf:
                    11:5c:bb:6a:ea:00:38:a5:f1:72:3e:79:24:d3:65:
                    b9:6b:f2:83:44:03:20:ff:a8:28:44:b2:9d:b9:6a:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:81:D2:0F:B4:53:72:4B:97:E7:E6:27:37:EF:90:FA:A8:76:CE:28
            X509v3 Authority Key Identifier:
                keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4b:da:bf:fc:6c:3d:7a:08:a8:f7:2f:69:4e:15:17:5c:a5:
         f5:3c:25:6b:26:93:a5:bf:1c:ee:ba:fa:c7:3a:74:c6:35:06:
         14:31:cf:8b:be:8e:72:ef:ef:c8:57:e1:7e:7a:e0:79:3e:80:
         6f:24:0a:cb:14:8e:22:35:a5:bb:17:39:99:b8:fe:4c:55:9e:
         d4:6e:d2:c5:8b:07:c3:2a:aa:eb:ec:94:cf:97:14:0b:88:67:
         bc:c1:41:e9:5a:db:ac:b2:73:07:69:b8:00:ac:cc:f2:6d:1d:
         9f:fd:d0:b2:94:dd:a0:55:9c:af:51:91:f1:d2:a2:8e:91:5b:
         35:cd:c0:77:a7:e4:c2:45:e8:5d:33:49:5d:24:69:4d:3c:e1:
         15:fc:f6:52:69:fc:b7:ef:35:d3:af:ae:78:72:96:c7:46:2a:
         b5:9e:9c:1c:1a:5e:94:35:73:ff:d7:62:4e:1d:85:49:ad:3d:
         33:1b:d4:6f:ab:65:ef:d5:25:30:d1:bc:b7:b0:a1:2a:58:7b:
         4a:e0:34:3c:5d:5b:3d:18:73:6f:2b:47:08:6d:82:94:0a:8b:
         e8:a4:ed:49:e4:ba:c0:36:66:d0:13:f5:df:6a:4e:a5:13:60:
         e8:83:0b:9b:fb:68:5e:98:53:5d:e3:64:ef:2b:63:97:20:b4:
         89:dd:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:34:57 2024 by rpki-client on console-ams.rpki-client.org