Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File:                     2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier:          fWvUecRCErxTHTERDXdhTcrsXyvpJTRFaqZXSvLizqs=
Subject key identifier:   E1:4D:9D:50:12:14:71:15:D1:C8:12:DD:D8:6C:0E:C5:57:47:C4:30
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer:       /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial:       0193568A16C9F9C246808640C001DFD08A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number:          0E4D
Signing time:             Sat 23 Nov 2024 01:01:50 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:50 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:50 +0000
Files and hashes:         1: 0uPcW7iKdBzyIjJJqDBuGrEPoRQ.roa (hash: rYSmdZGMC01yUDQwwC/0Sd+9g9zimFWnAanv3V668GA=)
                          2: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: T/0RwiPpJ0e+RyE55+XZZQcMlqDjK+9YNp+zBTtipNc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:16:c9:f9:c2:46:80:86:40:c0:01:df:d0:8a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
        Validity
            Not Before: Nov 23 01:01:50 2024 GMT
            Not After : Nov 24 01:01:50 2024 GMT
        Subject: CN=e14d9d5012147115d1c812ddd86c0ec55747c430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:a6:65:f3:3b:55:64:a4:b4:ca:93:d4:ed:
                    e3:aa:12:2d:1e:4a:7a:91:8f:28:24:03:57:7d:c8:
                    b9:38:67:b7:d7:0f:f6:06:54:5c:69:fe:1d:81:26:
                    64:cb:eb:48:ea:a6:bc:b9:40:41:66:cb:1c:54:8d:
                    9d:5b:44:f3:84:b4:8c:99:f7:a0:ee:1b:61:65:38:
                    b8:8c:8c:f7:55:55:b5:6b:ca:bb:c8:79:5d:49:2b:
                    31:25:19:b6:af:97:e8:03:86:ac:c1:60:d1:a7:38:
                    73:ba:0d:df:62:86:67:fa:8e:3a:9b:de:c1:2e:2c:
                    6c:70:ae:71:a5:75:3e:ba:41:b2:a4:47:6f:3a:85:
                    95:ba:e7:9e:3b:30:91:4e:d1:0c:47:a8:eb:cd:64:
                    12:ff:f6:65:c1:eb:64:10:d0:75:71:b1:af:3d:3e:
                    45:99:ff:64:b9:62:f9:ce:05:00:ea:d5:af:a1:b1:
                    06:51:4a:94:b9:1a:5c:24:2c:3c:a8:5b:65:c5:bd:
                    d3:f7:aa:61:20:fe:f6:0a:04:0e:55:1d:84:30:a5:
                    10:e1:3c:a3:7d:ab:c2:39:d9:3b:86:4c:d3:cf:2f:
                    8c:9e:e6:32:8b:ea:c3:03:4f:97:4c:3d:09:ae:12:
                    36:6b:39:93:b3:a5:d1:42:55:8e:63:b5:25:df:79:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4D:9D:50:12:14:71:15:D1:C8:12:DD:D8:6C:0E:C5:57:47:C4:30
            X509v3 Authority Key Identifier:
                keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fe:fd:d2:4f:29:f7:ba:32:53:49:6c:ef:15:0a:0e:4e:f7:
         2a:39:ae:4e:1b:3b:60:7d:f1:03:df:d6:16:81:5a:9c:bb:b0:
         26:29:ad:ea:86:e9:52:6c:47:98:91:97:58:f7:dd:20:8a:0d:
         d9:d4:e5:51:c5:59:b4:30:3d:94:3e:90:d7:12:de:7d:a9:a3:
         6c:97:49:08:71:0c:4d:77:ed:99:f4:13:69:cc:25:44:69:40:
         7f:9b:a6:88:a3:00:c9:e7:4d:0b:63:4d:fc:f9:2c:7a:f6:06:
         03:fa:3d:3d:72:c9:ad:16:7c:72:a6:c0:d9:8a:ed:fb:42:31:
         4d:4e:18:10:57:4f:df:e2:b0:9e:d9:cc:78:b7:48:ae:8d:32:
         d4:56:4b:f1:1f:be:4a:35:f6:3f:06:80:7a:a1:7e:ff:c8:bb:
         fe:48:d2:ce:33:c5:95:3c:a2:3d:1b:b4:f3:32:9c:df:34:c4:
         25:3d:80:9c:7a:37:c8:61:e9:92:b3:c9:d8:fb:e2:5d:c4:11:
         96:b7:cb:94:7d:da:d0:9a:2d:6b:ab:10:31:c6:be:f6:1e:54:
         08:f2:3d:9f:61:40:0c:57:8a:e9:39:a5:71:2e:57:0e:17:fb:
         a2:7d:97:6d:b1:d1:56:72:39:ca:5b:bf:05:95:2b:fb:2c:2b:
         27:d1:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:46 2024 by rpki-client on console-ams.rpki-client.org