Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File:                     McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier:          J9CwFP1IMMSEE5yMGA6RPWQHtyYac637oDpEk84rmwA=
Subject key identifier:   1D:BC:0C:5A:EA:EC:6F:5C:02:38:73:35:47:E6:A3:EB:17:2F:E9:F8
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer:       /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial:       0193572DF16D9CA34EDB275EBC7DCE9CDDD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number:          02F4
Signing time:             Sat 23 Nov 2024 04:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:48 +0000
Files and hashes:         1: 3QOE9YqRcm4z3U15xcdpaBv3BKg.roa (hash: DfV9rOpA76F8vdA8l3mWlC/XvEGC/PkfMxezFIhTV1A=)
                          2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: y36F/LR/NtWlwvKYRHkPOSkgWiQxEyqyhC0PD9AbjRg=)
                          3: Wu4ZjQNwCguoOSFe6U6xElaLUcI.roa (hash: zycLtPSuexOm8dfk3Cl/LEOroWRG6+HyAW/EmTJ/2nc=)
                          4: eVJEK86h0Ctz4Xqh6oTspJ9K_dk.roa (hash: vdnF5T2H7GhhYD+PrtRMCutXZ24r+nVOaFLiaS16mak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:f1:6d:9c:a3:4e:db:27:5e:bc:7d:ce:9c:dd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
        Validity
            Not Before: Nov 23 04:00:48 2024 GMT
            Not After : Nov 24 04:00:48 2024 GMT
        Subject: CN=1dbc0c5aeaec6f5c0238733547e6a3eb172fe9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:ef:17:c0:8b:12:a3:8c:ff:be:1f:33:a6:
                    28:59:3c:9b:e7:4b:18:3f:7f:d0:5d:a6:13:93:6f:
                    36:90:81:49:65:43:a8:bb:e9:d1:45:e4:0e:a3:04:
                    87:06:b8:ee:21:7c:44:e0:53:f1:82:07:48:08:8d:
                    d1:7e:55:e6:c1:82:43:1e:fb:4e:b7:55:eb:f3:d1:
                    b5:2a:65:7c:d2:b8:00:8c:39:14:0d:d9:a8:58:ca:
                    7e:b5:85:cf:43:13:0d:52:b6:a9:3d:17:2c:38:13:
                    ce:82:53:42:28:27:25:2e:04:21:09:e7:fa:d9:bf:
                    85:88:1d:ba:01:59:19:88:8d:ce:ee:57:ac:5d:f4:
                    e5:43:72:76:f7:b6:0b:3d:b9:1f:d4:04:b7:e5:87:
                    ea:4a:ea:c5:37:9b:77:7c:59:7a:52:15:8f:79:21:
                    81:e7:93:c7:8e:51:cd:72:0c:63:93:58:a5:bd:78:
                    7a:41:cb:de:2f:d7:a0:00:1c:18:ee:b2:44:3b:59:
                    9d:75:8a:7d:fa:85:26:ce:34:1d:fa:8d:b4:2f:94:
                    9b:6a:64:29:52:71:65:4a:93:a7:4d:13:dd:02:c5:
                    0c:8f:48:64:bc:a4:26:c3:4d:3f:02:d5:56:35:00:
                    e5:19:46:62:56:45:8e:dc:6c:b2:34:43:79:c0:4e:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BC:0C:5A:EA:EC:6F:5C:02:38:73:35:47:E6:A3:EB:17:2F:E9:F8
            X509v3 Authority Key Identifier:
                keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:e0:ee:5d:19:e8:56:e4:e4:3e:fb:49:d6:d1:26:4b:6f:
         64:f9:a4:6e:17:0d:98:a2:5b:1b:00:dc:b5:49:39:71:17:e9:
         28:c3:a7:99:47:c1:cb:43:d0:e0:f3:a8:27:a4:d7:18:33:6d:
         ac:93:47:d1:80:c8:54:91:fa:5e:58:c5:0c:ce:06:d3:96:89:
         a3:d7:bd:ed:37:e7:8b:1f:39:b4:dc:28:3d:71:a5:5f:4d:5f:
         77:0e:f7:b2:9c:59:8a:e8:1e:c4:5e:82:61:2e:49:90:61:e1:
         db:68:a0:8b:d2:48:5f:61:b0:1a:5b:69:58:b1:2b:93:74:1a:
         14:f2:f7:55:3b:ab:6a:3b:ca:33:3a:95:68:e2:05:1a:a3:99:
         6f:ed:e7:7c:03:0b:3a:0a:36:ab:6e:25:3a:2e:72:9b:26:ea:
         d5:c6:ea:40:15:27:67:dd:a7:f4:17:7d:38:62:4a:3a:6c:50:
         3d:af:d2:5c:14:24:de:01:05:d8:c2:39:17:b4:25:9d:03:76:
         4d:cd:d6:a6:df:c5:a2:a7:e6:0d:e2:d3:50:06:12:6f:d2:9e:
         e4:5c:aa:7e:2e:8b:e4:e3:7c:40:bc:a7:d0:87:02:73:ea:66:
         02:79:f1:8e:5d:c2:48:3e:db:60:da:45:de:be:c5:ea:61:bc:
         83:ca:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:26 2024 by rpki-client on console-fra.rpki-client.org