Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          n1YdVhHAgjyZ3h6LybQS5kJRoQKlhAgTxtuUz3Ii0mU=
Subject key identifier:   39:8E:1A:63:5D:AD:CA:27:C4:04:D4:51:02:68:D4:EF:A8:EB:AA:42
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       01935199DFA9A3A85203C76B45B61390D778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 02:00:58 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:58 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:58 +0000
Files and hashes:         1: CMrckiHBZeQCcTTNJSRUGdsmQuU.roa (hash: qUgJ24CJW0Ikub458wVsppnP5qVtzqMGF3VAIQtVn8k=)
                          2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: cVwyDDxWoAKYCFQWmOLPdjtzjnbIGuvzWUTKSkt2LKg=)
                          3: zkVnB8J6tboWxKXjMNgQQdq8WZ4.roa (hash: iahrD9l+DxAt/Lzni6pU5Oo/ZHCZJ/R8lB5qZ3xAYRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:df:a9:a3:a8:52:03:c7:6b:45:b6:13:90:d7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Nov 22 02:00:58 2024 GMT
            Not After : Nov 23 02:00:58 2024 GMT
        Subject: CN=398e1a635dadca27c404d4510268d4efa8ebaa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:6c:9e:7d:e2:bd:6d:b6:8a:73:1f:12:b6:
                    c0:5a:71:f1:be:36:12:be:f0:6c:10:fb:7e:ca:13:
                    5d:fd:af:fe:cc:7d:ee:bd:96:3f:10:1f:12:d4:88:
                    98:20:7d:04:0a:e8:09:6f:04:18:39:75:ce:b5:09:
                    37:95:72:89:9a:f9:e3:c1:23:df:23:aa:d0:cf:24:
                    e4:fe:b7:68:cc:a9:3b:b9:2d:b9:58:96:83:ff:67:
                    47:e9:31:b0:79:97:c3:6b:62:ae:0a:d8:07:3e:a4:
                    bd:bd:36:ec:1c:65:fd:cb:f9:99:49:d1:04:46:39:
                    ed:c4:0a:25:41:97:15:b1:8d:61:b2:85:69:03:c9:
                    ae:72:5f:40:26:a7:2f:67:9b:d8:ab:36:b5:6d:4e:
                    13:5a:bc:9d:12:dd:5b:e0:5c:c5:3c:a1:e1:74:41:
                    4d:ae:93:67:b1:47:06:ac:7a:a5:0f:92:ec:8a:fb:
                    74:dd:e6:94:07:bf:c6:05:dc:80:27:2c:f1:ad:7a:
                    d8:85:59:09:b7:df:6b:33:19:37:2e:29:e0:48:63:
                    b2:86:00:4b:b9:3f:c0:fe:fb:40:00:bf:26:66:98:
                    66:5f:e7:d9:72:b5:42:78:6f:80:37:26:00:f3:8e:
                    99:19:93:1e:a6:a2:dc:39:cc:d5:02:7e:90:42:6b:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:1A:63:5D:AD:CA:27:C4:04:D4:51:02:68:D4:EF:A8:EB:AA:42
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d4:db:c7:10:06:38:7c:eb:db:88:09:f6:1f:f5:e4:c9:25:
         d5:ee:56:d1:65:fa:70:86:ee:ad:d3:95:1c:a4:c7:53:4a:d9:
         3d:be:fb:b0:74:b6:63:75:ea:dd:c4:8b:a6:5e:78:27:14:18:
         9f:fe:ff:2b:ef:80:ff:20:53:bc:e3:39:5f:84:06:1e:03:e8:
         17:37:52:84:b2:cb:87:e2:73:5e:d5:ec:2e:76:76:38:4b:3b:
         f0:48:d4:4b:9a:24:fe:14:14:c0:39:52:44:80:1b:f5:a1:2e:
         70:80:6e:53:13:67:69:29:e0:f8:e5:7a:3b:bf:ff:11:7a:86:
         42:1b:8e:25:02:87:cf:f8:92:2f:0a:fe:5f:42:56:ce:93:50:
         83:83:b2:7b:1c:31:52:92:69:b2:83:f0:6e:bb:6e:40:a6:20:
         58:b2:20:4c:12:95:cf:77:9e:48:44:a6:0a:53:be:e3:ef:cc:
         a8:85:54:13:2d:0f:ab:44:03:a7:30:cb:86:ee:43:ad:e6:71:
         c5:dd:ca:2c:63:f2:c1:ef:6c:11:57:a3:5c:dd:17:01:e5:46:
         43:12:aa:d0:88:8e:0e:68:f9:ad:14:d7:3e:13:21:54:81:55:
         bd:07:9c:2e:b4:3d:6c:af:49:97:0c:44:66:f6:09:0e:d2:e8:
         63:a1:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:43 2024 by rpki-client on console-fra.rpki-client.org