Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          f2XlMWjD2cvv3+SGnmc2fvYIw/eA0vOdteUbmDnDdLs=
Subject key identifier:   9A:61:7F:99:43:41:19:FD:85:21:AA:E4:7A:50:7E:89:92:87:97:96
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       019359C0F7554C30E5EBEA9D3749D6EBC68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          02E1
Signing time:             Sat 23 Nov 2024 16:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:38 +0000
Files and hashes:         1: 1-ridWpw_Cy8sFUzhPJ7gmkBOmBY.roa (hash: VAy0Rt1K0o6BE6vYTKpzn9eipOFvLzLMCHpr4jLpd60=)
                          2: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: tInneMcL3aOO8Aw2MrhpM0z9jS1boUG9WPlpKwaNUnM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:f7:55:4c:30:e5:eb:ea:9d:37:49:d6:eb:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Nov 23 16:00:38 2024 GMT
            Not After : Nov 24 16:00:38 2024 GMT
        Subject: CN=9a617f99434119fd8521aae47a507e8992879796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:d7:c3:3e:54:b9:a0:d5:af:35:0e:8f:9c:
                    d4:ed:8b:93:b0:eb:d9:47:f2:4f:c0:f5:eb:7d:53:
                    8d:7d:4c:1d:91:a8:ec:51:96:22:0b:bd:5f:aa:d4:
                    58:98:72:84:9c:e7:35:c3:68:d2:c9:9c:65:5a:93:
                    7b:d1:27:bf:6d:44:4a:64:81:5b:5c:97:5a:36:f3:
                    1c:3b:6f:f3:73:eb:16:a3:8e:9b:38:c7:b8:8a:89:
                    a5:c1:5e:76:81:5b:52:09:15:c4:c7:ec:f1:33:7b:
                    a4:bd:3c:c9:ee:a7:9a:c7:46:77:92:fa:a3:c5:7d:
                    8e:d9:fa:e2:68:b8:4f:50:1d:3d:3c:b4:1d:5e:97:
                    93:38:d0:9d:0a:9a:66:98:62:bf:d8:67:05:ab:2e:
                    80:b3:54:02:22:da:f1:91:30:84:30:1d:6e:1b:26:
                    e3:7b:10:15:10:84:2f:7c:40:a2:0a:4e:33:52:8b:
                    33:2d:25:cf:0f:4f:46:51:5c:cb:5f:9f:87:4a:72:
                    21:50:b4:76:c3:2e:a5:0f:0c:80:de:6f:12:38:98:
                    0f:44:7f:b3:ac:6f:05:38:66:74:c1:02:17:0c:62:
                    62:2f:93:08:e4:47:17:13:06:39:a7:89:eb:0b:38:
                    6e:35:ee:ab:65:ca:b1:67:02:2c:86:f2:49:94:27:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:61:7F:99:43:41:19:FD:85:21:AA:E4:7A:50:7E:89:92:87:97:96
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:58:25:39:be:a8:4a:41:5e:7b:b5:94:b8:86:f7:90:8a:21:
         e8:19:2e:3f:a8:39:bc:f5:e7:7c:3a:41:fb:c5:88:0f:84:51:
         c0:0d:33:e8:5b:f1:ca:2d:41:d4:d0:fa:24:4d:a0:d0:bb:8d:
         32:50:2c:47:d6:1b:01:fe:29:f0:74:79:0a:2d:b2:bb:8b:d2:
         9d:75:e5:c4:b8:49:d2:ec:9d:39:df:a6:7e:24:72:27:fc:66:
         02:c9:3b:40:6a:e1:b3:ed:0e:b5:7f:4b:97:b3:30:e0:e5:4c:
         89:ae:43:53:81:57:ab:23:25:45:67:0c:dc:8e:8f:7f:c1:64:
         5d:13:b4:9f:58:ee:a9:19:76:01:70:61:30:e5:cb:6e:0d:c0:
         ce:29:18:ca:ec:2f:d3:78:9a:25:7c:43:ab:a0:f8:89:bb:18:
         d9:c0:9e:20:a9:08:f3:16:ef:78:ea:e8:e7:09:ef:88:3f:e2:
         93:76:7d:db:25:47:19:46:2e:5d:54:2c:74:3b:7d:56:8d:84:
         ad:11:f3:44:a6:07:37:c8:9d:fa:4f:20:b2:c4:19:0c:bc:f8:
         1b:14:cf:cb:b0:52:57:db:ac:23:c1:50:9a:6d:b0:5d:48:1c:
         74:a8:ca:07:ad:d0:b2:f2:2d:a7:08:16:43:2d:c2:22:ee:20:
         c4:70:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:55:00 2024 by rpki-client on console-fra.rpki-client.org