Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File:                     74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier:          DTUIO9ksSE2GpNLN5J/Aeue+fsoT5uy6hHJNJSuE0Ts=
Subject key identifier:   27:14:15:66:4E:43:E6:1C:D6:FB:47:B9:D6:35:D1:FA:BE:19:E8:30
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer:       /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial:       019369D94481477013A3201F908D762CD50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:01:06 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:06 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:06 +0000
Files and hashes:         1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: wUbpkYHGmOF4T0J3EHGncIEA7U/pwXMf3/rBIdZVr6E=)
                          2: G_0tA5OD22bVcr55KwTK-UpHKGs.roa (hash: H8aamPJnJx24UU6vpVC1taFJ5tbTH8MhmA5RcIeiqD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:44:81:47:70:13:a3:20:1f:90:8d:76:2c:d5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
        Validity
            Not Before: Nov 26 19:01:06 2024 GMT
            Not After : Nov 27 19:01:06 2024 GMT
        Subject: CN=271415664e43e61cd6fb47b9d635d1fabe19e830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:21:b8:7a:e7:ea:92:77:8e:9c:7b:3f:e2:
                    c0:66:2a:0b:7b:81:2d:b1:2d:24:94:b5:3d:de:2f:
                    66:01:cd:c5:56:d9:f1:ae:58:d3:27:56:3c:57:46:
                    8c:95:a1:cb:5c:05:8c:6b:84:08:50:9a:92:30:7c:
                    ab:a8:e2:64:0c:1c:7e:61:78:4d:02:71:56:d7:08:
                    90:2c:8d:83:6a:ab:08:22:53:09:34:bd:f5:eb:ec:
                    73:b5:c8:c4:e8:25:20:cd:89:ce:77:03:11:fb:70:
                    f6:94:a8:9b:13:fd:74:32:52:f0:41:a3:6e:5e:f3:
                    d8:ba:94:9e:c7:cf:b8:2d:0d:c2:aa:d0:fe:6a:16:
                    85:21:85:e1:8f:99:56:a5:a6:c3:d7:a0:f4:1a:0b:
                    07:a3:0f:25:37:f5:ce:e0:ce:fd:ab:8b:23:72:6a:
                    c5:e0:12:ed:2c:d6:79:53:72:2a:6d:97:bb:66:55:
                    81:e0:32:d6:c7:da:53:fe:2f:b7:10:c9:8e:3f:02:
                    fd:a7:55:96:7b:e8:69:a9:ea:cb:08:f8:5b:f9:80:
                    22:25:ba:dd:22:06:05:a2:a4:db:06:6c:91:29:40:
                    8f:9a:43:be:c7:5b:fe:f0:0b:3e:06:62:06:dd:66:
                    ed:a0:0d:56:7b:bc:f3:d6:2b:66:cf:0b:8c:fd:d1:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:14:15:66:4E:43:E6:1C:D6:FB:47:B9:D6:35:D1:FA:BE:19:E8:30
            X509v3 Authority Key Identifier:
                keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:19:0e:d1:92:21:fa:8b:71:a5:05:4a:8f:5b:cf:47:67:dd:
         57:9e:49:ed:88:b9:59:d9:11:81:a8:32:42:47:37:46:ee:da:
         e4:19:14:4f:26:18:08:0c:8a:33:8b:d2:20:e0:f3:b5:e4:5c:
         ac:27:68:dd:90:01:74:d5:16:4b:70:dd:28:16:b0:10:36:8f:
         d6:cd:85:33:aa:45:27:93:93:d7:71:04:04:c3:da:f6:21:e8:
         00:68:64:7c:79:20:d7:08:89:dd:69:48:7b:8f:b9:3c:a3:f5:
         fa:65:6c:38:12:18:d7:03:d9:48:bf:68:9b:5d:f5:53:a2:23:
         36:d4:03:19:0f:b5:48:c3:23:97:3b:a8:95:df:af:96:db:56:
         f7:7d:10:39:e9:66:66:dd:db:db:2f:f4:ce:e1:77:2e:e1:13:
         8a:88:c2:a3:32:61:17:cb:a9:75:4c:23:f6:2a:16:a9:c4:e1:
         bb:28:0f:e4:bc:3a:01:43:78:02:6b:51:86:29:d6:57:fd:e2:
         8a:55:a1:b1:1c:de:89:a5:6a:a9:c0:5c:7f:24:87:30:d4:18:
         59:23:96:d7:02:b4:9d:7d:83:59:87:85:2c:2b:4b:8a:9c:61:
         fc:4e:b1:12:4e:5f:e0:0c:01:e7:91:18:50:0d:04:10:3d:ad:
         e7:de:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:16 2024 by rpki-client on console-fra.rpki-client.org