Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
File:                     eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json)
Hash identifier:          NO90Q4uK/IZJzluKTwyiYkeGprKdlxlyIqbfwOm05Uc=
Subject key identifier:   37:6D:D2:51:EB:D9:43:8F:4F:9D:26:CD:81:BF:1F:1A:75:B4:64:3C
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Certificate issuer:       /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial:       01936A7DADCCF67F641D7086CF2E6BC40C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 22:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:41 +0000
Files and hashes:         1: AWTNoxrF_vNQY2Oa1FGKS8HSU6g.roa (hash: a9CWKfwc9hy6R+fU/mi8/f0xb/mub1fpPevUTp8v2B0=)
                          2: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: W6ln78wcjVsmYlFaRgIC2p/TC0aHi5CRCeX9s/9+MsQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:ad:cc:f6:7f:64:1d:70:86:cf:2e:6b:c4:0c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
        Validity
            Not Before: Nov 26 22:00:41 2024 GMT
            Not After : Nov 27 22:00:41 2024 GMT
        Subject: CN=376dd251ebd9438f4f9d26cd81bf1f1a75b4643c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:fc:c9:63:54:79:93:17:fc:54:8f:09:91:
                    85:6a:48:28:36:66:e6:a6:ce:db:7c:c5:c0:39:46:
                    3b:30:0f:ed:2f:5e:b3:49:51:f4:2f:30:55:01:e3:
                    4f:cf:e0:6f:3e:12:d4:49:08:30:ea:35:6b:b9:ee:
                    e5:df:01:10:c3:9e:7c:1f:67:56:4e:78:af:0f:fc:
                    a6:6a:02:07:dd:7a:df:6c:f5:f4:f3:51:f8:3d:84:
                    9e:6e:89:bc:cf:6d:be:1a:e5:45:af:ab:6d:3b:ab:
                    31:1b:73:b2:a2:60:6a:93:69:93:c2:96:2b:95:20:
                    09:91:2a:b2:20:f8:0e:ad:6e:a6:26:9f:c3:15:89:
                    02:28:fe:ef:a4:87:32:db:7d:91:a6:a5:41:37:0a:
                    ce:48:d1:e4:b1:f6:fb:b3:13:74:05:ea:8f:41:f8:
                    41:84:43:32:fc:ce:e0:0a:57:33:01:4c:04:ff:b6:
                    5d:f0:a7:c6:bc:d7:92:3c:f0:31:d3:1c:54:36:15:
                    19:a4:0c:01:56:36:70:24:b3:7d:67:9b:7e:1a:c1:
                    02:ae:ba:4e:03:74:87:e3:c6:05:33:eb:4f:23:ae:
                    25:e1:7e:9e:0b:e1:7a:da:b4:3a:77:54:89:8b:d1:
                    49:fa:39:41:2e:ed:a8:ff:55:db:4d:3a:58:8c:ea:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:D2:51:EB:D9:43:8F:4F:9D:26:CD:81:BF:1F:1A:75:B4:64:3C
            X509v3 Authority Key Identifier:
                keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:52:13:8c:01:61:25:d1:ad:b7:55:05:c3:72:82:c7:f1:50:
         5e:63:ce:56:bb:4b:ed:9c:34:58:d2:69:fb:60:ca:3c:4d:5a:
         82:48:c1:50:4c:7f:10:a0:e9:3a:28:1d:eb:51:8f:f1:12:a5:
         89:8c:e1:fc:1a:fe:27:eb:72:bb:7a:30:df:b1:4b:8e:ef:1a:
         a5:7b:69:2c:e6:04:32:54:dd:01:2c:92:5d:95:c7:1c:9b:99:
         5f:78:e5:fe:cb:e7:d0:ba:76:1f:65:37:50:4f:e5:79:50:1d:
         85:6e:c5:c8:14:1e:66:73:ef:14:5d:01:37:a0:b0:e1:74:b0:
         6c:c8:d2:a4:62:e9:10:04:a4:19:69:a4:28:34:59:ff:dc:2c:
         dd:7a:6c:39:a2:63:24:1c:dc:31:35:8a:37:d1:f8:ea:53:e5:
         9e:fe:a0:61:57:32:e4:9c:94:c9:33:c3:cd:82:fc:80:f8:5d:
         e6:d9:dc:50:91:e7:27:24:5b:e6:8a:b5:4b:9f:74:7c:ba:35:
         94:c0:3b:7f:4c:a5:f1:0c:23:5b:2b:1b:af:52:60:6d:e6:dc:
         b2:99:fd:05:3a:6f:53:33:b9:dc:25:63:70:c5:d2:e0:e6:7c:
         7a:f8:4a:8b:7f:ca:86:bc:ee:ae:be:23:a5:8d:11:98:6c:7c:
         e0:17:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:33 2024 by rpki-client on console-ams.rpki-client.org