Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File:                     rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier:          U6GOEAyI8xnQQZ2ktk9Bb9em5S1FfGuEETV75IIZeIE=
Subject key identifier:   97:E9:48:84:27:3A:75:14:D8:4D:FA:4A:76:B6:47:C1:57:AA:30:E0
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer:       /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial:       019352ACC8E7702BAFFBED96368FECB4462F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 07:01:15 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:15 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:15 +0000
Files and hashes:         1: IuZepCj7m26cglitlBkulMlSYFw.roa (hash: 91s/JFTHjtVKrlYQycfS3inR7u+EOIfUS6yKY2G4aYY=)
                          2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: xzHnOuY5xn+cZxQKwxGLFMRJWy2CSg4RUn7ZdhO3aXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:c8:e7:70:2b:af:fb:ed:96:36:8f:ec:b4:46:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
        Validity
            Not Before: Nov 22 07:01:15 2024 GMT
            Not After : Nov 23 07:01:15 2024 GMT
        Subject: CN=97e94884273a7514d84dfa4a76b647c157aa30e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:a9:46:6d:7b:eb:80:e8:40:7b:7c:9b:38:
                    be:69:d7:56:06:da:eb:63:29:ad:33:6f:46:6e:a0:
                    9f:0e:d6:cb:39:af:b6:a3:9c:c4:3d:0d:c2:ed:fe:
                    ce:9e:fd:96:68:22:65:43:5f:dc:84:df:4d:7e:a3:
                    81:f1:db:3f:40:7b:fd:f5:91:0c:cb:65:22:31:07:
                    01:02:9a:2a:95:ca:22:87:b2:3c:8b:2f:3d:90:3e:
                    ff:df:4c:d7:32:66:68:b7:aa:5a:f4:8f:e6:67:49:
                    25:f2:9d:9c:ab:de:1f:53:aa:9b:bb:13:97:02:3c:
                    13:a9:27:47:d1:f7:af:c9:cb:0e:ef:39:df:b6:ef:
                    5e:33:2d:41:b0:f0:42:2d:42:68:fe:52:fb:15:d9:
                    63:64:65:6d:cc:e8:15:ec:c3:63:1e:54:9a:56:e4:
                    4e:1c:a4:8f:0c:b8:7b:fa:90:1f:ef:81:df:03:5d:
                    8c:1e:79:a3:c7:a5:6d:13:a1:3a:0a:1c:0a:f4:84:
                    f1:a7:77:da:ab:83:0f:16:74:df:7f:44:da:8b:00:
                    ec:59:da:9f:93:75:84:6a:95:e4:79:ee:16:93:1f:
                    c3:62:7c:10:6f:d6:41:f5:13:35:62:c9:a5:12:bd:
                    3c:a2:85:99:72:93:0c:7d:dd:ea:99:ef:58:c5:55:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E9:48:84:27:3A:75:14:D8:4D:FA:4A:76:B6:47:C1:57:AA:30:E0
            X509v3 Authority Key Identifier:
                keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:38:55:09:e3:85:72:40:0a:9e:70:2b:83:c3:3a:a2:42:1d:
         12:bb:c4:23:43:74:a2:a2:8f:6d:25:30:e5:fe:7b:bb:0d:50:
         7f:1a:11:71:21:cb:10:3b:cc:80:fb:03:28:23:fb:61:40:a8:
         50:69:a1:f9:9c:d0:62:a6:d0:dd:d2:88:44:44:16:7d:f3:1e:
         fc:20:dc:84:38:32:72:f7:b2:8c:e9:30:ad:86:b7:16:9d:22:
         10:fb:36:33:f0:1d:04:73:8a:1c:5a:a0:53:c8:bb:45:f4:44:
         74:e6:43:94:bf:2c:cd:68:f3:e1:3c:33:36:c3:96:16:fe:2f:
         1b:90:c9:b8:68:c5:b7:12:b8:5c:3a:c1:f8:ed:ac:38:19:8f:
         e1:d1:a2:f7:77:bd:10:64:15:d9:26:82:bb:32:a6:76:96:70:
         ac:bc:f5:fe:ce:98:11:09:41:e4:62:5d:12:8c:c4:33:21:66:
         51:34:31:a5:bd:0a:46:d1:c1:20:fc:b7:4b:fa:0c:2e:02:99:
         08:a2:1b:23:00:7b:dd:b3:4d:d4:53:f1:40:bd:b9:7e:2c:4c:
         cf:9f:50:ab:12:5f:35:54:70:0a:c6:f3:05:b9:72:f8:45:5d:
         36:87:66:26:2f:63:0e:c1:db:2a:3e:d4:f8:db:90:a1:38:77:
         c5:88:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:13 2024 by rpki-client on console-fra.rpki-client.org