Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          I5OBByEEAPlFgkGX4ZBEQsFvj/5Z7yg3WINFpOHt9is=
Subject key identifier:   68:ED:1F:5F:73:41:00:55:35:B8:F6:80:57:29:1C:E7:DC:B9:37:DF
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       01936AB447712FC4E8D5BF6962B59E0711C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 23:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:19 +0000
Files and hashes:         1: QL_KeCgc6L7nNMWqrrVTmrUtuxQ.roa (hash: 8exqosG6JSfYr1xoTOsG2ajTUFo1emdWD+CgxG4gY5U=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: scUVakS0QtLo8e/VM1HRTcPx5DILgQvf9AMhZn6GPNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:47:71:2f:c4:e8:d5:bf:69:62:b5:9e:07:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Nov 26 23:00:19 2024 GMT
            Not After : Nov 27 23:00:19 2024 GMT
        Subject: CN=68ed1f5f7341005535b8f68057291ce7dcb937df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:ca:89:ea:c5:d4:8e:08:33:ee:d9:cc:61:
                    0d:d0:3a:fc:c1:97:05:45:c7:5f:2f:61:09:79:16:
                    70:72:44:f7:50:a1:4d:ef:7e:b4:76:b4:16:2d:65:
                    77:99:3d:f4:6e:84:76:b0:d1:ae:63:48:1a:a7:06:
                    bf:c7:3b:f1:2f:5d:67:db:db:e2:b4:84:6b:bf:7c:
                    bf:16:cd:7c:eb:ec:6e:0a:a1:e2:51:f8:36:a5:63:
                    0e:75:cb:4e:d1:e6:13:9b:c0:23:ab:7b:19:29:95:
                    46:05:c6:eb:49:09:f9:ec:6c:db:f1:a3:3b:db:55:
                    de:03:c3:ee:9f:2c:99:09:d3:35:59:73:2e:5c:16:
                    a2:22:7a:e3:c3:97:09:15:fa:cf:f2:39:2a:f1:4c:
                    9c:08:61:2a:c4:7e:98:f9:da:3a:25:fa:09:81:09:
                    06:84:ee:14:d0:fc:10:1f:6b:09:09:16:b7:a0:2b:
                    5c:0f:94:70:45:d9:8c:8d:f0:7e:76:66:7e:d8:c2:
                    20:d4:91:9d:cb:47:c8:c1:74:ff:0f:c8:48:d5:2b:
                    f4:51:b4:e0:3a:a7:96:17:bc:ab:40:4a:fe:8c:28:
                    c1:0e:7b:3d:28:0a:a4:80:dd:5a:b2:2c:63:2c:22:
                    f6:eb:c3:ce:ba:58:67:fe:61:e8:42:bc:f2:39:be:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:ED:1F:5F:73:41:00:55:35:B8:F6:80:57:29:1C:E7:DC:B9:37:DF
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7a:3b:c5:0a:1f:6f:95:9d:d6:df:54:47:ff:2d:08:d9:1a:
         72:f1:6b:f5:95:57:12:e0:87:a7:a8:54:f0:bc:24:0f:02:f6:
         29:5d:3d:39:79:bb:34:4d:43:71:c9:25:f0:e5:88:6b:09:1e:
         d2:39:14:38:6d:d1:bf:a2:8e:01:82:1e:44:58:ac:e5:7e:b2:
         97:9e:fa:fc:59:70:9c:b1:bd:e7:16:11:ee:ce:42:3b:15:bb:
         f5:8d:a5:f5:6a:da:a9:73:40:47:f1:38:ee:6c:bc:8b:e6:c8:
         be:64:f7:87:90:fe:c8:b6:4a:56:b7:28:05:15:b6:39:6f:7c:
         91:37:41:12:66:f0:b7:15:10:65:c7:6f:80:8d:e6:0a:a7:e2:
         eb:d5:9c:a5:0b:84:69:50:2b:2a:61:dd:44:09:3c:12:5a:bb:
         b4:af:4a:9b:88:95:02:a5:60:5f:ee:cb:35:a5:51:76:dc:f4:
         4e:ad:22:15:e6:76:df:28:a4:52:50:7b:92:69:ed:bc:c0:01:
         d4:dc:28:3a:42:9e:fa:8c:00:9c:9f:20:97:55:e4:8a:91:59:
         7b:a0:43:dd:8b:0d:16:67:7e:0a:aa:59:92:bc:c4:56:d1:75:
         ff:c1:27:dd:51:07:3e:8a:d1:33:ea:86:19:20:8c:a0:c0:98:
         7e:d0:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:27 2024 by rpki-client on console-fra.rpki-client.org