Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File:                     2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier:          2EyS4JjP28OGsyJIufKUCO7JEGKv9JcU8hqlynVcwbs=
Subject key identifier:   68:81:02:95:89:5D:FD:3F:B9:80:DA:92:04:70:D9:C5:16:83:EB:C9
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       01940758FF1682B3090BF8B0E2038F5FD773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number:          13CF
Signing time:             Fri 27 Dec 2024 09:01:00 +0000
Manifest this update:     Fri 27 Dec 2024 09:01:00 +0000
Manifest next update:     Sat 28 Dec 2024 09:01:00 +0000
Files and hashes:         1: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: H7ceSTvfK0GfdAffHjtamoHAUPsD1ffDDJt/DcCQt8E=)
                          2: KPjKDyehv8RXqm4yfklp_DtrNQo.roa (hash: FVUQQG4RY+Baeg7lO7qa6BhauAr2vKHqbyJi7qMH2Co=)
                          3: Mks1HSSYuUHksWDWps2yS9v07KM.roa (hash: /KqNmLAoSleGTavSFMerfwHWAW0Gz3tg/8hMccDIMC4=)
                          4: P4emc_XwnRT7F5sXtkD9LH3poNQ.roa (hash: uCau8Yw+RZgHfp4IjXKQOeGNnd3wHLwel3cztqmGHR8=)
                          5: gD1DkC6WAsnGZjOArlBTrpSKjBU.roa (hash: NCKPC6GDJ/ySPuQR6xOb2esVC4ZQzsDcLmSU5jsJQis=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:58:ff:16:82:b3:09:0b:f8:b0:e2:03:8f:5f:d7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: Dec 27 09:01:00 2024 GMT
            Not After : Dec 28 09:01:00 2024 GMT
        Subject: CN=68810295895dfd3fb980da920470d9c51683ebc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:3c:d7:44:d3:ff:fb:20:ba:c9:06:07:b3:
                    72:4f:1f:04:b9:59:d1:d9:f1:d5:89:fa:fd:5b:09:
                    79:b8:52:94:65:95:3d:26:be:ac:84:38:2f:6e:fd:
                    f4:c1:a8:d3:95:64:b8:a0:8a:62:20:f7:1f:b8:c8:
                    0e:c3:b1:2f:f7:3f:cb:e8:94:c2:c5:09:31:12:72:
                    1f:c4:a9:94:43:3b:d4:64:e8:ef:f5:ac:5c:1a:85:
                    40:7f:38:dc:66:50:bd:44:76:65:49:48:f9:e7:ef:
                    f8:89:d8:f8:23:ac:89:71:1f:b6:79:af:d7:9d:25:
                    4a:04:49:fe:cc:10:ca:7b:1d:63:fb:4c:5a:86:fb:
                    85:ca:69:29:a7:8d:fa:97:66:a8:79:9d:58:13:e7:
                    6d:77:bc:7b:12:5a:d9:17:a8:17:d7:57:81:7e:29:
                    37:58:0b:bd:f1:08:90:79:d8:51:fe:da:81:53:de:
                    05:c7:0b:6c:ec:e0:be:8e:eb:00:12:1d:ff:bf:32:
                    54:a0:9e:02:50:5b:2c:70:00:c9:d8:71:f5:af:82:
                    06:83:f2:bc:fd:fa:36:4c:bf:ee:5c:dd:8a:3f:5f:
                    52:55:ac:d1:fd:b4:48:c8:aa:93:bc:13:ef:85:fd:
                    d0:17:f7:37:d8:e0:39:49:74:80:61:f3:70:35:d2:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:02:95:89:5D:FD:3F:B9:80:DA:92:04:70:D9:C5:16:83:EB:C9
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:59:45:8b:d4:37:9f:cb:18:ea:1c:47:0f:3d:49:7f:40:1a:
         27:13:dd:4f:f2:b4:45:32:59:28:fc:a0:99:cb:79:2b:4d:ea:
         37:85:bc:ba:64:7a:92:ab:1a:ce:c1:2b:3d:68:97:84:b2:33:
         7b:77:a6:b5:56:fd:31:e8:0c:a6:78:82:65:78:7b:36:60:da:
         36:87:1c:05:43:c8:6d:0b:66:2a:ac:0e:b6:7d:05:ff:a2:9e:
         b4:87:78:28:55:56:a3:7e:c0:94:2c:2f:f6:72:9c:cb:f7:65:
         93:21:98:65:44:df:5e:e7:ab:8c:26:f7:cb:22:ef:93:ce:19:
         f9:2f:d8:ff:73:b5:a8:09:c8:45:2d:88:a4:ba:21:af:d6:3d:
         d8:71:59:ef:3c:67:7a:56:16:04:e2:60:c9:ab:93:20:b1:a0:
         74:40:ae:f0:5e:84:0e:33:12:e0:60:7f:97:b8:0c:cb:49:ec:
         4f:8d:e0:f6:a8:35:3a:d7:af:7a:3e:49:c1:a7:65:48:eb:0a:
         51:42:fc:ea:04:cc:32:a7:aa:28:59:e1:5a:ec:45:eb:a9:ba:
         6a:6e:5e:c1:57:4d:91:a6:a0:17:b0:1d:f0:48:7f:4d:d6:8b:
         16:8f:84:08:c8:94:90:9f:71:c4:d5:3c:ce:c4:c1:46:4a:bb:
         57:e3:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:45:01 2024 by rpki-client on console-fra.rpki-client.org