Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File:                     dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier:          R0erJN/uRVbQbMoiFTSbytFRMwFB4WqfB3mmnwv9zGU=
Subject key identifier:   79:C4:17:EF:73:3D:86:8A:E8:3D:52:C2:3E:9B:17:A8:AA:9A:FB:06
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer:       /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial:       0193553F2EF54E6A74FF9FBBC9ED6E8F2BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 19:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:24 +0000
Files and hashes:         1: XWMwgNVvuSvdELsB9LlOwEf9_dk.roa (hash: M3uEnZ6HmEv9Ia5W1jvY+FRqYILuox8Kc1qGz9C//4E=)
                          2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: GMEAM/qayapX/dUCMRECKRwwoCh0mU2NIJ8LoWmV/8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:2e:f5:4e:6a:74:ff:9f:bb:c9:ed:6e:8f:2b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
        Validity
            Not Before: Nov 22 19:00:24 2024 GMT
            Not After : Nov 23 19:00:24 2024 GMT
        Subject: CN=79c417ef733d868ae83d52c23e9b17a8aa9afb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:a2:ec:27:94:ca:db:51:69:21:fa:7c:9d:
                    64:bf:5a:da:f3:7a:41:2a:fc:76:5b:c4:33:ae:54:
                    c6:3f:aa:b9:28:ef:49:f1:af:86:b9:5e:6a:39:fa:
                    4d:ee:e9:a6:72:6d:52:a2:21:56:fa:be:4c:15:0e:
                    d7:0e:a5:58:53:04:cc:0f:dc:b5:3d:20:00:41:d4:
                    aa:60:6d:8d:7b:24:98:7f:50:15:07:ad:65:ff:86:
                    22:7e:37:c1:11:8b:96:a0:3a:f5:e7:63:35:08:3b:
                    e9:b4:b2:ef:d5:ee:7f:7d:0b:0f:52:eb:ff:1f:b3:
                    97:68:36:0f:da:72:1d:64:d0:13:1f:52:58:48:0f:
                    62:23:e4:8a:d4:04:8d:30:03:73:20:29:2d:38:4b:
                    94:49:ab:18:48:dd:c6:dc:4b:1c:22:6c:17:92:3c:
                    ed:eb:d6:6d:2b:f0:7f:e7:37:f8:55:14:e7:0d:5e:
                    89:25:b2:11:4f:59:e3:ae:f4:a1:2f:cf:25:cf:72:
                    83:43:5e:59:de:0b:0c:80:b0:ab:3c:5c:12:65:52:
                    4a:b0:86:5c:e8:43:34:98:d0:d8:50:90:cb:56:67:
                    02:54:df:91:c2:79:e2:02:86:c5:5a:5c:f7:ea:d0:
                    71:21:5d:a6:49:a1:15:3f:8c:79:7a:21:70:78:ed:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:17:EF:73:3D:86:8A:E8:3D:52:C2:3E:9B:17:A8:AA:9A:FB:06
            X509v3 Authority Key Identifier:
                keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:c0:6a:b1:95:97:98:30:48:3e:8e:3a:36:64:bc:a4:6c:
         0d:69:dd:3d:7c:22:ea:17:1a:bf:94:8f:6e:a0:b3:7a:38:4b:
         6e:a6:df:d8:a4:fc:ad:c1:7d:fa:cc:65:20:84:02:33:68:e8:
         11:e6:1c:fd:43:ff:f2:2b:0a:02:6b:79:11:47:dc:6e:7b:3c:
         ed:1a:4e:db:45:c8:c2:ef:87:86:f8:71:c8:b2:72:13:80:4d:
         b6:1f:ba:48:e1:32:c0:b2:32:f8:67:7c:48:c0:ba:24:45:28:
         65:6a:de:d3:ab:36:50:0b:55:c2:17:e7:23:8d:3c:01:38:80:
         06:de:3c:89:a9:5e:70:39:b5:23:91:10:fd:88:85:f0:b1:23:
         e3:2a:98:b7:fe:55:34:fb:a8:3e:11:bc:ed:1e:aa:2b:dc:1d:
         ea:47:91:24:0d:cc:e5:19:a3:c1:15:31:69:cd:5d:48:8d:ec:
         d8:5f:51:8a:24:fe:6e:50:87:83:57:44:fa:a5:d3:c6:1b:0f:
         e6:ab:b4:50:98:c4:4a:9a:8a:cb:42:e4:88:03:a5:e9:c8:09:
         8f:85:53:a2:0a:86:da:ba:5c:67:5c:ef:5e:91:c7:3c:6e:fd:
         93:29:b8:2f:a9:13:97:3a:27:7a:0e:b5:15:fa:fd:c9:b6:80:
         24:8f:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:31 2024 by rpki-client on console-fra.rpki-client.org