Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File:                     2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier:          vFn08hNPvCh8CEUBzgU0kmPASVv4YXWdUIr7ScE7/yM=
Subject key identifier:   B0:E5:AA:97:F8:6E:9B:DC:95:7D:D2:3F:20:3B:83:3F:E0:A6:05:94
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer:       /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial:       019355082273405691BBC5764919F923C34A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number:          AE
Signing time:             Fri 22 Nov 2024 18:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:16 +0000
Files and hashes:         1: 0EpccPhq7xpAst0WoCz6ULZuC8w.roa (hash: ++SdK5sUy5ks9QWHCHaUs1hk7t8vrZFU/bLn3D1nR7o=)
                          2: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: DCSBSWjfz+NOHI1dCdl/kt7hZRqK+RddbUZaE6Gzj68=)
                          3: nLJslEycJ5aeXZMBhi-Yw4IYrBA.roa (hash: Grs7WhCWKbVhrbLZtE/0e+7GrR+8zGOHSWBobEGugeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:22:73:40:56:91:bb:c5:76:49:19:f9:23:c3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
        Validity
            Not Before: Nov 22 18:00:16 2024 GMT
            Not After : Nov 23 18:00:16 2024 GMT
        Subject: CN=b0e5aa97f86e9bdc957dd23f203b833fe0a60594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:8d:88:98:54:61:b3:be:9f:60:92:7d:9f:
                    b8:9f:d2:9e:5c:8b:69:95:1b:45:3e:03:ba:98:70:
                    33:f7:5b:af:97:bf:bc:25:c3:40:e6:87:d4:c2:24:
                    3d:f3:fa:5a:df:c8:79:a1:54:b0:b2:b5:e8:a7:67:
                    ed:25:fd:13:29:3b:b0:9b:dd:6f:57:3e:d4:bd:69:
                    85:32:c1:d7:d0:04:10:ce:69:b4:da:bc:e6:06:f3:
                    28:dd:53:ba:c1:57:53:94:8f:26:58:fe:1b:7b:c1:
                    ad:97:5e:c8:6d:00:4c:d5:46:cd:ad:65:8e:86:ca:
                    7a:7d:6c:f1:41:4f:58:8c:82:2b:7b:05:4a:6e:9e:
                    22:8a:9d:d2:f3:c0:a0:65:ca:64:1b:81:03:06:3f:
                    63:eb:88:bf:79:f2:f8:ce:a0:d0:97:54:72:ad:49:
                    69:21:ab:3a:42:8b:13:51:cc:2d:51:05:22:31:95:
                    2f:3a:de:d0:48:58:9b:12:c0:a1:69:af:f0:c8:c4:
                    bd:ee:0d:b2:c2:f7:0a:2a:a9:df:4d:b4:8d:6c:96:
                    8d:ea:28:33:ad:06:e2:6e:fb:34:52:1b:12:6a:48:
                    7e:07:d5:67:a5:e7:81:32:7d:13:fd:bd:6d:e1:76:
                    96:4a:66:05:72:ba:d2:cb:1c:8c:d5:09:75:19:df:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E5:AA:97:F8:6E:9B:DC:95:7D:D2:3F:20:3B:83:3F:E0:A6:05:94
            X509v3 Authority Key Identifier:
                keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:f0:ab:c0:4a:c1:04:2c:f6:2d:db:8e:e7:7f:ee:88:b3:
         28:39:a5:4b:78:b0:f9:5c:65:06:a3:5d:83:b8:3a:a0:19:87:
         65:1e:87:dd:8c:b6:2e:20:31:3f:34:16:fe:08:44:21:78:10:
         c6:96:bc:f5:f5:9c:af:6b:79:71:dc:10:89:b0:b5:e9:39:2c:
         97:00:48:fe:bc:e8:13:65:c2:7c:ec:cf:06:d1:68:b2:4e:89:
         89:6f:ac:60:ff:28:8e:2b:e1:d3:7c:42:fb:6f:2d:56:7d:7a:
         4b:ca:58:69:53:42:67:4b:8c:17:95:7f:fc:1c:bf:f0:ad:d0:
         15:52:5f:28:ad:79:4a:04:97:ea:bf:f2:2b:49:d6:cb:db:e0:
         45:64:87:01:29:fb:e5:5e:e6:c3:ce:49:bd:9d:ed:4a:8a:48:
         19:d3:41:5a:af:4b:a4:4b:29:a8:71:d7:5c:16:77:6f:ed:53:
         26:7b:cd:74:ca:29:d9:68:08:6c:4c:92:5d:dc:47:45:5d:43:
         e3:4b:3a:75:d0:9a:32:c5:1e:dc:70:ee:f3:85:6f:ff:10:a4:
         88:45:96:9f:1c:87:84:d3:ca:df:41:f5:de:e2:9f:87:28:41:
         1f:6c:51:c3:3d:82:e4:33:9d:54:26:11:20:78:a2:f0:9e:d4:
         63:c6:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:54 2024 by rpki-client on console-fra.rpki-client.org