Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
File:                     2jqEPf4emgiI_5tbQWQnRQvWjcE.mft (raw, json)
Hash identifier:          WvEaExMlNXG0Q0UOQUrz6onZ7vO9icm9z+n939ohqOo=
Subject key identifier:   79:8D:8E:AE:89:A7:04:9A:37:35:96:D6:F9:47:F8:D7:D9:91:93:FC
Authority key identifier: DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
Certificate issuer:       /CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Certificate serial:       019357645F43444AF91305C51C30B8B67DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
Manifest number:          0728
Signing time:             Sat 23 Nov 2024 05:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:15 +0000
Files and hashes:         1: 2jqEPf4emgiI_5tbQWQnRQvWjcE.crl (hash: 4yE0hBg8DczeddZ2pRtrsVNOUgXEfKea8tmxFqVuEXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:5f:43:44:4a:f9:13:05:c5:1c:30:b8:b6:7d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
        Validity
            Not Before: Nov 23 05:00:15 2024 GMT
            Not After : Nov 24 05:00:15 2024 GMT
        Subject: CN=798d8eae89a7049a373596d6f947f8d7d99193fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:2a:60:b4:68:39:aa:f2:3e:e6:0a:32:42:
                    8c:b6:c9:05:09:69:2c:a0:86:4d:29:23:72:cc:96:
                    eb:5d:52:7e:d0:a5:7e:96:23:8f:2e:6f:15:6a:92:
                    07:73:d4:ec:9e:49:e4:78:bd:9d:ca:0e:81:f9:08:
                    54:1f:d6:a5:2f:e2:64:6d:fc:63:ee:12:19:e1:22:
                    87:dc:13:80:96:1f:e2:f6:74:be:94:04:0a:2e:42:
                    05:bb:b5:cb:a6:fe:12:a9:c9:34:35:9f:7e:43:ab:
                    20:1c:d3:4e:7d:c9:d8:a9:8d:c9:e2:b7:e3:d3:61:
                    12:92:3d:3d:c1:da:41:ba:1a:46:2d:24:2e:8b:18:
                    a9:06:02:d2:79:55:c4:fc:c9:a6:84:cf:13:80:ce:
                    70:27:d3:f6:ac:5f:db:42:bb:d1:88:85:a5:ed:b8:
                    1b:f2:5b:f3:b5:2f:ac:d1:84:75:2b:74:26:63:d4:
                    1a:0d:0d:f2:ce:63:cf:61:50:a3:3f:88:7c:e2:1b:
                    10:60:d7:f2:47:e9:6c:23:75:e4:12:0d:70:7d:3c:
                    68:0c:f4:65:4a:d4:87:22:a9:94:e8:4e:30:59:3d:
                    4f:b7:a5:0f:f1:02:c3:a6:fa:fc:9b:7d:b4:d4:bf:
                    c9:93:6b:66:12:82:b0:d2:e4:76:24:9c:7c:cf:84:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8D:8E:AE:89:A7:04:9A:37:35:96:D6:F9:47:F8:D7:D9:91:93:FC
            X509v3 Authority Key Identifier:
                keyid:DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:61:48:74:5e:5c:de:dc:ad:00:6d:37:0c:72:50:be:eb:69:
         20:00:b5:00:2f:e8:a4:ed:f4:5e:b5:85:04:9e:8d:21:fd:c3:
         03:17:18:b2:8a:ad:5e:da:34:5a:70:12:39:97:d2:e8:c2:d7:
         ca:12:28:cb:94:c5:96:7b:89:26:77:ca:9e:2f:b2:3e:07:b9:
         3e:a6:7d:35:68:c3:e1:8e:f4:5f:7d:fe:94:f2:8b:ca:bd:8b:
         0b:7f:58:93:ae:5d:2e:e3:3c:4b:09:56:8f:30:6f:20:3d:56:
         69:ee:2b:1e:42:c3:2f:0a:58:85:6a:48:79:9e:73:b8:72:1a:
         14:75:75:5e:e1:39:b9:fb:57:fd:81:58:f3:7d:4c:ff:f7:b8:
         81:0a:9c:ef:1f:7f:83:c8:aa:43:33:fb:71:96:2c:8a:d8:b9:
         aa:a1:e8:8e:7e:f9:80:43:fe:a3:09:e7:d6:23:12:d8:6a:63:
         49:24:f0:7c:94:93:74:ee:90:dd:78:50:d9:7f:6a:b3:2f:80:
         86:24:c7:fe:3d:e1:bb:1b:25:05:a0:a3:f9:c0:dc:47:5e:5d:
         e2:57:80:d2:de:38:91:e8:d3:16:48:24:df:61:c2:4f:7c:2c:
         1f:0b:b0:cf:01:c9:a8:4b:34:ea:c8:ac:fb:34:6b:cd:09:73:
         9d:01:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:01 2024 by rpki-client on console-fra.rpki-client.org