Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File:                     rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier:          4rvxo6g1Z1qwQ8NN6sEgG74UDxxUE7n9q8tAIEojizU=
Subject key identifier:   3F:75:09:05:2B:8A:45:FA:28:C1:2C:AB:E4:09:70:B4:07:6C:5C:3C
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer:       /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial:       01936A46666AE07C171DE87EECC3D7C72ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number:          137F
Signing time:             Tue 26 Nov 2024 21:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:18 +0000
Files and hashes:         1: 1-m80xduprU6fxfYtti7YL65_zf4.roa (hash: u4C6PHJge6L6x81jNPlp5zB4P6zGQA3ThNuZxHL0+RA=)
                          2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: 2wPsEHTtBWS9JGQpNWdGP+GP5c3NXIsnnS4NzBFS5s8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:66:6a:e0:7c:17:1d:e8:7e:ec:c3:d7:c7:2a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
        Validity
            Not Before: Nov 26 21:00:18 2024 GMT
            Not After : Nov 27 21:00:18 2024 GMT
        Subject: CN=3f7509052b8a45fa28c12cabe40970b4076c5c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:03:ba:dc:0e:2f:5d:57:4e:97:41:9a:34:
                    66:91:89:77:49:69:26:16:c2:69:70:ed:68:d3:11:
                    6e:77:cc:d3:b1:3b:f1:6c:fa:b4:38:d9:ab:60:a5:
                    5e:c7:2d:29:1f:ec:08:ff:ed:a9:f7:96:75:a2:f6:
                    eb:15:5e:15:7e:36:40:64:cc:ac:14:3a:76:d5:a6:
                    39:d2:d3:a5:58:2b:02:9a:1a:20:62:1a:5b:df:b9:
                    90:dd:c5:4b:be:dd:72:bc:e4:e5:1f:d2:86:2a:f8:
                    bd:fb:6b:ec:fc:5c:74:04:31:99:21:fa:ee:da:2f:
                    2e:57:ab:3c:0a:c5:58:f0:59:3c:c2:a4:89:10:21:
                    34:4d:73:d1:0b:a5:c0:4d:48:fa:69:c6:e9:b6:fa:
                    a3:9e:86:cc:e8:9c:11:43:cd:3b:30:5e:3a:5b:42:
                    6e:b6:68:64:36:d2:01:c2:fc:02:34:a6:34:86:29:
                    66:08:e8:88:2f:2a:9b:7d:c9:98:35:6c:65:54:c2:
                    c4:18:21:9c:c1:01:41:50:68:d6:5d:fd:fc:ec:00:
                    f6:f1:33:20:78:1f:d5:00:66:2a:af:0f:9a:1a:77:
                    1c:b4:ef:97:55:69:02:8a:cd:5e:07:e0:47:5c:74:
                    83:76:ef:42:39:a4:13:01:43:37:a1:40:d9:5a:04:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:09:05:2B:8A:45:FA:28:C1:2C:AB:E4:09:70:B4:07:6C:5C:3C
            X509v3 Authority Key Identifier:
                keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:16:3a:cd:da:e2:bf:e7:b3:74:ac:c1:4f:a3:6b:24:3d:
         69:aa:c3:ef:c9:b4:8a:68:b6:a8:20:71:4a:77:26:ad:aa:b7:
         9c:cc:7a:5e:ab:e9:95:2c:8b:e9:04:62:f9:6a:e1:9c:d6:c0:
         5b:d4:08:d6:a9:69:5e:2b:e2:49:47:28:c6:b7:f2:2e:ea:14:
         98:fc:1f:3d:d3:99:86:dc:7b:36:07:3c:ea:fe:2e:5e:9f:fe:
         1b:52:19:9d:cf:f5:97:07:60:7f:bd:2e:8c:9e:48:55:86:b3:
         07:24:a0:f2:5b:41:f0:cc:8d:5c:bc:13:d0:e7:87:d7:51:53:
         69:d3:5a:f3:71:64:a3:ef:cb:f3:31:80:6b:32:fb:00:10:24:
         de:e0:0d:30:69:65:d5:15:29:dd:55:8b:c3:52:79:91:69:b3:
         b4:62:47:e1:dc:96:0e:c8:6f:df:92:b7:26:28:de:e5:b6:fb:
         7f:25:f6:64:13:0f:71:1c:2f:7d:5e:3d:eb:fa:61:ea:13:5d:
         74:1f:6a:6d:09:16:32:35:60:36:72:0f:bc:67:c0:c3:eb:0c:
         0d:3d:f8:0d:f1:c2:11:a2:0f:a8:0e:cd:dc:6b:0a:03:89:89:
         50:25:fb:62:02:85:6f:c6:0d:9f:60:a4:87:da:c8:71:83:30:
         11:91:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:44 2024 by rpki-client on console-ams.rpki-client.org