Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File:                     Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier:          lSncT3n3G1B1bgbc0naggkJEihfSkrsQxf9U1jQK2h8=
Subject key identifier:   FF:C2:C1:6D:DC:B7:4E:A3:57:3A:5B:90:FD:62:CA:69:E1:6E:43:41
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer:       /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial:       019356889BC246FFF09F12611ACFAA63CA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number:          04A1
Signing time:             Sat 23 Nov 2024 01:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:13 +0000
Files and hashes:         1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: HHoIUxI3sBHFvNpy5XIje8nR90C3kkRFTvRn7NnX1Fg=)
                          2: buTN79lM3bru4-udF4t8hJ5I0bo.roa (hash: 88JuiTRNbnT8uBQ4VAuuWNRFlIhiqkRcYJfY9ddIrhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:9b:c2:46:ff:f0:9f:12:61:1a:cf:aa:63:ca:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
        Validity
            Not Before: Nov 23 01:00:13 2024 GMT
            Not After : Nov 24 01:00:13 2024 GMT
        Subject: CN=ffc2c16ddcb74ea3573a5b90fd62ca69e16e4341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:c2:55:f5:22:f2:40:b2:41:ca:8b:83:15:
                    d0:5f:75:4f:d5:4a:cc:ac:f5:10:dc:22:d4:9b:aa:
                    6a:6d:b1:93:28:17:1d:18:7a:a5:41:d5:03:fd:50:
                    ed:74:3e:87:f6:d7:d1:0b:fc:c0:ad:a7:fc:b7:ee:
                    55:a8:3d:de:ae:fc:48:0d:ba:80:bc:0a:12:b2:d2:
                    c3:a0:be:ac:77:1b:2a:5e:01:6a:d6:12:a4:d6:f7:
                    1f:bb:29:b9:b3:b6:5e:40:a0:3e:03:70:3c:e8:92:
                    a8:9a:33:12:8c:0b:ef:8a:e6:29:cb:9c:ee:bf:b2:
                    43:7f:56:e9:94:53:16:08:f7:32:d0:be:94:8e:be:
                    fb:3d:ee:3b:43:b5:2b:67:98:f7:88:10:22:4c:0c:
                    2d:a2:01:bf:7c:75:3a:2c:30:03:b8:00:7c:35:24:
                    ff:16:39:e8:81:6d:61:3e:69:22:68:48:29:32:ce:
                    97:f2:a3:3c:16:c6:9b:02:84:0a:45:72:24:37:92:
                    4d:f9:1c:d4:f8:23:e2:9e:e3:df:66:8f:d4:5b:35:
                    36:c0:56:9c:3b:e9:d7:c5:c3:cb:4b:e0:dd:31:4b:
                    09:c8:c0:f5:e3:78:fa:39:ac:0f:e0:ec:82:66:87:
                    cf:b6:51:4e:a0:e6:46:68:19:b7:58:cd:46:70:af:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C2:C1:6D:DC:B7:4E:A3:57:3A:5B:90:FD:62:CA:69:E1:6E:43:41
            X509v3 Authority Key Identifier:
                keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ce:fe:36:33:38:8a:4f:a4:ff:35:5b:e7:a6:21:c6:fa:5d:
         81:6a:43:1d:05:24:f2:e1:c2:9a:34:2a:0a:8b:b3:28:f6:da:
         0b:df:0c:27:e2:a3:3c:50:81:01:d8:74:55:b3:1f:cf:8c:45:
         f4:30:83:cc:8f:63:d8:00:32:e6:1f:fe:18:f1:af:dd:20:4c:
         fd:b3:fa:b0:bb:e4:71:29:15:fa:71:56:d2:3d:2b:eb:1d:1f:
         35:92:6b:8e:69:6e:72:ec:ee:5f:e8:0e:8e:73:65:e6:81:d3:
         98:c1:f6:14:28:70:75:99:40:6e:2f:ad:65:47:53:f7:ba:0e:
         67:9f:f0:04:cf:25:9e:29:09:46:67:99:ee:58:3c:95:8a:bc:
         7b:9d:dc:f6:0a:72:7b:ca:1b:c7:b8:dc:ea:50:8b:e3:a8:76:
         8a:68:1a:ce:11:46:40:69:70:c5:e9:de:85:73:e2:1a:ab:f6:
         b2:35:20:60:02:1d:1b:a6:35:5d:21:4a:bb:38:41:c8:5f:d9:
         a9:d0:89:c3:d6:cc:4c:8c:0b:50:67:45:1f:34:f4:ad:1a:87:
         0a:23:5e:fa:7a:c0:5d:19:cd:b5:e1:4e:3c:64:d8:15:4c:33:
         4f:e0:d3:30:d3:61:55:ed:e4:55:72:f6:00:88:31:7c:09:40:
         44:27:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:55 2024 by rpki-client on console-fra.rpki-client.org