Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File:                     2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier:          3lPTVODmIZBZYAi1JzI34leoSDnpBH01U2hhgYqqT0Q=
Subject key identifier:   18:D7:54:F0:6B:24:D2:0F:E0:E9:32:6C:46:FE:63:6B:83:CF:95:AC
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer:       /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial:       0194064810214236C132091472BB3F02CA00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number:          0465
Signing time:             Fri 27 Dec 2024 04:02:53 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:53 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:53 +0000
Files and hashes:         1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: dJE/qBtljHN+mtRc2H5ZPJOvR54bbLYTvFfmQA0u8to=)
                          2: 5hA8kd9A9pN3TQ0nkImH2Aq4oi0.roa (hash: dihsiU13P/DirodUsfGTs4Gndka9S2LI+thqbvpM1qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:10:21:42:36:c1:32:09:14:72:bb:3f:02:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
        Validity
            Not Before: Dec 27 04:02:53 2024 GMT
            Not After : Dec 28 04:02:53 2024 GMT
        Subject: CN=18d754f06b24d20fe0e9326c46fe636b83cf95ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:0f:0e:a5:bf:bb:9c:3b:d8:be:ed:cb:e3:
                    3b:eb:5e:5a:25:50:2b:2b:5d:61:47:04:3d:94:3f:
                    90:69:56:8f:59:e6:e6:2e:14:2f:eb:30:a4:8b:bd:
                    b8:73:e7:53:b5:56:ce:66:4b:f8:50:f6:10:8f:23:
                    20:ba:41:55:70:59:56:6b:57:12:fe:ca:83:d9:04:
                    d5:b0:51:7b:08:c5:7b:68:64:f4:5a:8b:37:49:39:
                    00:4b:ea:1f:0f:bf:2e:62:19:71:ad:e1:03:89:8f:
                    c8:b9:73:87:2f:ad:cb:c2:8e:39:1d:1c:b9:02:80:
                    bb:12:01:98:d0:2f:ea:2a:99:f7:7b:35:fe:b8:79:
                    56:4e:6b:ab:4a:42:08:09:3f:32:7b:a1:a9:6d:9b:
                    0c:0d:7a:5f:4a:87:2b:9e:6b:ac:ea:a9:2e:fa:85:
                    86:57:6c:4d:d0:a2:8d:3e:96:69:d7:2e:9c:79:c6:
                    7b:86:33:9d:6f:9c:60:93:0a:5e:8d:11:bf:e9:36:
                    d6:57:07:15:85:2d:f2:58:90:dc:7b:d4:03:7f:eb:
                    b2:92:df:68:c2:93:b0:0c:c0:35:b8:35:7f:cb:87:
                    fa:e4:3c:4a:26:79:e6:ba:a3:76:13:81:cf:00:34:
                    75:e9:88:59:1d:18:7b:bd:f2:6a:b7:1f:04:98:49:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:54:F0:6B:24:D2:0F:E0:E9:32:6C:46:FE:63:6B:83:CF:95:AC
            X509v3 Authority Key Identifier:
                keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:92:d9:07:91:ac:77:05:71:39:0d:be:5b:cc:ff:76:42:94:
         b8:6a:7f:09:4e:77:a8:e3:a1:1d:4d:b1:35:4e:57:7c:7b:79:
         07:54:13:7b:fe:3e:60:65:b2:63:3f:0f:f7:48:0e:d6:96:0c:
         ad:fe:f5:b4:28:dd:5a:29:aa:33:68:15:49:62:06:59:5a:d8:
         3a:e2:01:f7:ec:ec:c8:0e:62:38:73:18:ab:6b:7d:d3:de:32:
         ae:1f:71:c6:01:7d:86:50:fc:6d:d8:c2:18:3e:c4:16:23:14:
         e5:73:67:55:e0:a9:89:db:a5:dc:78:60:f2:0d:e2:7b:ff:ea:
         0b:2e:04:73:7d:5a:03:85:82:16:df:ca:18:c8:ed:51:f0:56:
         d0:91:14:c7:64:5d:15:90:6b:85:20:da:21:c1:09:66:78:3a:
         8c:dd:5c:6b:da:f1:61:31:1c:8f:99:df:9f:02:75:34:ed:80:
         dd:51:ed:ac:9a:ff:39:5e:a4:67:2c:b8:a7:bc:01:4d:bd:d0:
         4a:b0:d8:ab:fd:2b:46:00:5a:fa:32:1b:1f:d8:ba:eb:24:25:
         1d:0d:74:d1:41:49:32:5c:db:b3:54:a4:7e:88:4f:3a:5a:88:
         2c:82:0e:45:95:4e:23:bd:bd:fc:b0:23:1b:20:6f:07:23:70:
         5e:8a:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:38:58 2024 by rpki-client on console-ams.rpki-client.org