Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File:                     2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier:          DR6L+EwBcKxZyfX1/CgZDRVgBxK/XV5eQmXL90YYBsw=
Subject key identifier:   1E:F4:1F:76:6D:08:2C:89:6D:94:92:87:00:DF:0C:76:1B:90:5A:1E
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer:       /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial:       019356F70B1D5F9AF60EA29C5EABA15BA630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 03:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:50 +0000
Files and hashes:         1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: /m7AD8KMKI2irjZhfvw62ncRiY3lVJZzXtFPfB/9HNY=)
                          2: JP50Y_Jpxj-310DOWIK4ZTwy5e4.roa (hash: Aevjz0MI+mVzR7vUTeC9NS4OAq9+kdZDTT9zQNrFiZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:0b:1d:5f:9a:f6:0e:a2:9c:5e:ab:a1:5b:a6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
        Validity
            Not Before: Nov 23 03:00:50 2024 GMT
            Not After : Nov 24 03:00:50 2024 GMT
        Subject: CN=1ef41f766d082c896d94928700df0c761b905a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:88:a8:e8:1f:9a:15:5d:4a:10:20:31:17:
                    0e:de:dd:b4:07:e6:f7:c3:40:24:89:1d:fa:ba:78:
                    d1:23:50:bb:54:ca:6b:93:a4:b6:7c:06:e3:65:11:
                    c4:34:2d:d1:0e:c6:16:7b:d3:93:7b:ec:85:f8:3c:
                    31:66:2c:1b:5a:98:f5:9e:74:74:6e:24:3f:ff:4e:
                    48:6d:5a:0a:ec:fe:13:2b:db:7b:a0:41:05:5a:f1:
                    2e:eb:57:87:a2:a6:60:d9:81:5a:3b:25:e9:77:94:
                    1c:9c:b4:38:12:02:05:3a:fc:8b:77:a4:43:dd:21:
                    8d:d1:62:73:6d:69:3e:76:8f:cd:55:0c:ac:1d:87:
                    50:c9:51:88:6e:61:0d:85:f7:80:be:2c:7d:86:76:
                    d6:db:7b:04:a8:8c:bd:a3:dd:01:c0:0a:12:01:e2:
                    6b:02:84:23:94:b8:73:00:ee:fb:75:1f:ed:e2:88:
                    a7:33:c2:0f:6d:0c:27:7f:d5:63:21:58:09:66:2c:
                    a5:96:b6:bb:c3:12:2a:1d:cb:fb:cd:ce:67:12:f5:
                    a6:4e:f4:97:f8:89:d8:e3:7a:4f:62:bf:02:98:ee:
                    86:91:79:e8:aa:9c:41:44:33:a5:fb:6e:98:e3:81:
                    95:0a:fb:04:ac:87:1a:de:ad:eb:29:26:b5:24:6d:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:1F:76:6D:08:2C:89:6D:94:92:87:00:DF:0C:76:1B:90:5A:1E
            X509v3 Authority Key Identifier:
                keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:9b:fb:a4:a9:5d:c7:c7:fa:7a:10:27:fa:28:61:93:56:
         6a:dc:e7:8c:eb:c3:04:c6:02:e7:96:ae:75:bd:d1:c8:8a:6c:
         93:4f:b0:d1:22:be:6c:63:21:86:69:8a:5a:44:41:d2:8a:bd:
         14:04:5e:ba:c5:ce:e5:04:71:a0:d7:f4:1b:eb:16:0b:aa:26:
         3f:78:00:57:c7:48:06:6d:7a:37:5a:78:cc:1b:dd:ce:10:b8:
         d1:2b:8e:51:a4:f1:9b:e7:75:28:30:dd:a2:41:5f:99:97:74:
         a9:0e:57:bf:28:95:0a:46:54:ed:98:26:a4:87:cb:c2:e7:5e:
         3a:1d:f6:59:4d:d1:17:fb:4a:48:5d:f9:ff:56:b9:c1:d7:f2:
         96:e3:de:7e:f7:f9:47:d4:51:e6:bf:6c:89:9c:eb:11:2a:f1:
         6a:87:e5:9d:05:b6:44:77:fa:53:d3:05:0a:b5:e5:7f:32:f0:
         88:79:6e:a8:bf:81:88:48:e3:7c:fc:b3:df:5b:5e:57:0a:19:
         a8:b9:07:30:50:f5:a8:b1:79:ce:44:f0:96:35:21:f3:2b:97:
         d6:23:e0:a8:82:76:11:19:5a:d6:c2:5a:5e:7f:4c:55:35:4e:
         d7:21:e9:30:c1:f8:25:c9:c1:64:5d:80:e8:9e:a8:54:fc:d6:
         43:9e:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:41 2024 by rpki-client on console-fra.rpki-client.org