Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          b5pvNNAAZJRUUBvGaeF4BBm5JJ0x1wyE/QxgVWIc3qE=
Subject key identifier:   B2:91:EF:F3:0E:65:A0:1E:2B:E6:A7:0D:03:E7:1D:F8:7F:6B:C6:EB
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019352AE50DA7ADF9841E60D963008A5D12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          12DB
Signing time:             Fri 22 Nov 2024 07:02:55 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:55 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:55 +0000
Files and hashes:         1: MnRoEQdXZai1kPK79cLFZsSc1YI.roa (hash: vT8xkKjN82mqvIUR5Hxa89HhaLskUCwEEIcPYxnHHc4=)
                          2: My9GGVMb3nsRJK_wwRkR3BjurGk.roa (hash: JaoMHcJuNzmxHQGSLg/S4RXUVcStrIlSWyx8j34lrGc=)
                          3: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: +AJc5Z21Mc8WqOueGulLb+zfRG5x+ew+8faTifAc7p8=)
                          4: W1FSZVVHuNAFS1MPVML2o4sSYgg.roa (hash: DPFsng72tMTuRMwEWtUf24BXNSaRg9itP7rMRCg70P4=)
                          5: _5OV7Balrz66uhUswws9fG8M2DU.roa (hash: MByHNzelCCbyYvTI2j1wadVKiWo9jT7cXV+sLU1W5Wc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:50:da:7a:df:98:41:e6:0d:96:30:08:a5:d1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Nov 22 07:02:55 2024 GMT
            Not After : Nov 23 07:02:55 2024 GMT
        Subject: CN=b291eff30e65a01e2be6a70d03e71df87f6bc6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:52:d9:59:de:ec:e3:69:fc:3e:30:4b:04:
                    ee:45:21:62:7e:1d:dc:a4:05:91:db:ea:03:27:75:
                    d8:39:20:64:e1:2e:b2:8c:92:37:8e:bb:62:c6:08:
                    e3:62:50:62:42:77:85:12:b1:5d:d2:2d:96:92:45:
                    57:82:d6:33:be:9e:eb:f4:03:e5:b6:7a:b8:10:84:
                    6c:a0:a7:21:ef:8b:e3:c4:f6:fc:69:66:9b:6e:77:
                    0f:e5:e1:5e:ba:4b:98:c9:a2:d6:aa:c3:bd:1f:a9:
                    09:8f:51:2d:0e:10:75:17:aa:07:30:9a:88:b8:9d:
                    4f:10:49:15:e4:fb:09:de:36:c2:00:a3:bf:61:59:
                    01:8a:70:db:22:49:ff:cd:6e:21:25:a9:d1:10:b2:
                    f8:1b:e2:dc:ff:04:f4:c1:70:f5:0b:42:b0:30:6c:
                    28:5e:e9:bc:f5:4c:02:e8:19:db:b2:d7:9f:bc:8c:
                    33:84:44:da:7a:ad:0d:71:03:02:7b:15:09:38:ef:
                    5a:be:8e:03:b5:31:71:04:a0:ff:10:7d:27:f7:82:
                    2d:72:9d:05:33:bf:e3:76:a5:e4:70:19:3a:66:57:
                    09:da:51:cc:9d:c5:2d:d9:87:2b:1d:00:34:63:b9:
                    6b:ee:9d:53:35:b5:69:29:06:0c:02:71:6c:f0:ac:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:91:EF:F3:0E:65:A0:1E:2B:E6:A7:0D:03:E7:1D:F8:7F:6B:C6:EB
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:bf:80:61:bf:de:ed:77:00:1b:28:63:d3:e7:12:b5:11:
         35:c0:eb:5c:d2:77:e8:c6:5f:90:bb:22:f0:84:ee:2e:45:a5:
         07:33:07:8a:f5:df:9b:cb:22:be:8b:90:26:5e:af:c0:2e:62:
         b0:61:5d:2d:a9:2f:7f:5c:bc:09:ac:57:ab:0d:d3:c2:a4:5a:
         5e:67:3a:eb:3d:f8:1e:88:38:bd:fc:f1:72:f3:76:44:28:4b:
         e7:57:7b:10:c1:fa:02:70:c7:98:2e:ae:c1:2e:1e:7a:89:a8:
         12:ed:2b:3d:c8:b9:85:6c:65:24:62:dd:26:20:04:26:63:2f:
         9d:be:c5:f0:b6:2a:72:d2:72:7f:9f:58:90:0b:ea:0a:6e:23:
         0e:ea:fb:58:dd:55:59:fa:76:19:3c:11:f1:e1:00:54:d2:63:
         77:4a:1f:d4:10:07:52:3b:fa:da:c8:24:2d:db:76:60:4e:84:
         54:22:f3:26:ab:61:04:0f:ec:ea:bb:2b:03:64:14:a5:70:e2:
         fa:f8:b2:a3:c1:36:6e:50:21:63:56:da:18:83:84:41:66:ce:
         6f:58:2c:59:76:46:d2:7b:62:42:cc:7c:f3:76:6a:7f:f5:11:
         40:6f:cf:59:0c:b0:0a:ff:56:66:9f:cb:f5:ec:9c:a9:bf:d3:
         f0:65:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:58 2024 by rpki-client on console-fra.rpki-client.org