Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File:                     shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier:          f1q12MPcQkWVdS9IajtbuaZHktet9W2PEspsmfct9DY=
Subject key identifier:   A1:CC:5E:80:7C:FB:D1:2C:8D:A7:E4:52:86:5D:59:C2:FD:B2:12:53
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer:       /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial:       01935764B98F909C6DB802113995E77C757D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number:          12D9
Signing time:             Sat 23 Nov 2024 05:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:38 +0000
Files and hashes:         1: 2dKilKmnrO047nsJYxv6pZukh6o.roa (hash: 9izQfIm7YEDH5xz6bUdkiunYBsfazKkmc2YsGvrgnFk=)
                          2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: 3dLLlxPIsZc3HY9cEGEGf/PB5/Ckelq/D5bvEMMDkmI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b9:8f:90:9c:6d:b8:02:11:39:95:e7:7c:75:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
        Validity
            Not Before: Nov 23 05:00:38 2024 GMT
            Not After : Nov 24 05:00:38 2024 GMT
        Subject: CN=a1cc5e807cfbd12c8da7e452865d59c2fdb21253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:6b:df:82:d2:64:a6:01:4a:bf:dd:e7:07:
                    fd:8b:86:f4:59:4c:61:08:ff:2c:38:12:db:e0:22:
                    5c:d0:7d:ed:2b:ea:1f:bd:08:79:ed:52:e6:fd:1f:
                    24:79:f3:20:91:9d:6c:cc:f5:cc:bf:1e:9d:34:12:
                    ca:b0:88:ee:28:98:7d:45:26:a0:69:4c:82:e2:95:
                    70:0d:97:b7:73:f2:33:70:e9:07:b3:9c:bf:fb:a4:
                    91:e7:48:60:2b:f4:44:42:fd:6a:1e:e8:46:03:70:
                    92:aa:31:79:72:d5:b7:7d:b1:7d:b5:6b:d3:8c:cf:
                    42:f2:15:16:52:d9:d1:2d:62:a7:3c:c8:04:b7:3d:
                    36:0a:b9:3d:24:29:0a:2d:bf:68:b2:ab:d2:4e:22:
                    91:e7:c1:35:13:01:5c:ff:b9:2c:28:c2:57:68:29:
                    88:18:1c:89:17:f6:00:b7:f9:d8:6d:f3:51:7f:bf:
                    84:37:b8:b5:b8:6c:e4:cd:e7:ae:39:fa:95:b0:94:
                    ad:2e:66:3b:14:83:c1:cd:90:cf:b5:21:89:3e:f4:
                    dd:d2:51:10:53:4e:8e:53:7f:c6:49:f7:cb:f0:da:
                    84:6c:c2:14:89:50:5e:91:8a:e8:57:fc:eb:cc:2b:
                    0c:a0:d7:54:63:69:e8:5e:45:17:1c:1b:c6:8b:7a:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:5E:80:7C:FB:D1:2C:8D:A7:E4:52:86:5D:59:C2:FD:B2:12:53
            X509v3 Authority Key Identifier:
                keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:e3:76:e4:ee:48:4c:65:5b:8d:b9:70:d4:1e:ae:b0:ca:
         47:36:7e:d5:f4:bc:f8:bc:8c:b1:23:b7:f9:a4:fe:e6:21:d6:
         2d:c7:db:0d:35:5c:12:42:41:53:ba:73:a1:d0:af:de:a5:66:
         8e:45:21:28:c7:c6:0d:17:39:1e:d4:ed:80:24:04:14:53:fa:
         95:41:80:b2:25:9d:c9:b8:1a:b8:30:a0:2e:09:f8:f6:44:e7:
         3f:61:26:89:e9:3a:36:bf:1c:6d:94:b8:c2:c9:c5:68:90:38:
         64:53:cd:ad:ca:8c:f8:af:ab:5f:40:69:26:de:5e:1a:8a:2f:
         33:6f:91:95:2c:37:83:d5:c1:51:14:f3:96:6b:6d:60:39:bd:
         cb:ca:9d:9b:3d:f8:1c:1e:c8:f6:d8:2b:9f:35:2a:bf:9f:09:
         72:5a:da:d0:c3:24:fd:b0:9c:ad:fd:75:39:08:f4:db:fd:44:
         98:12:c7:46:32:58:9c:d6:c1:c7:8c:a4:c9:04:9f:23:6b:7a:
         54:c5:ac:e5:02:8c:3b:c7:e2:05:f0:1e:36:a5:92:df:1e:13:
         9a:95:5a:33:0b:67:72:1e:82:a3:ad:51:25:0e:49:04:0d:63:
         4e:1f:65:4b:ba:6e:be:17:df:35:22:41:a9:2b:a7:cf:8f:e5:
         1c:d0:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:26 2024 by rpki-client on console-ams.rpki-client.org