Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File:                     2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier:          jQkiEkSAWE250sktGxNM35ddlSudyLh7kHZab3cTiYI=
Subject key identifier:   F7:37:20:5C:65:D7:A7:D0:3E:15:8A:BF:F2:BA:93:F9:C2:EC:87:B1
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer:       /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial:       0194060ED127409C469320CBE12D41151572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number:          CB
Signing time:             Fri 27 Dec 2024 03:00:21 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:21 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:21 +0000
Files and hashes:         1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: Y7f3ANQvh3HS5+jK0B8xWTO97dMYj6GENyZgRLtzm04=)
                          2: pnScRFEVYRbJCnEJIGuLU6jaj4c.roa (hash: i2PxGDGThB/0z7KdwvZ+W21/w+pvRLd2hKJkXZ3GH+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0e:d1:27:40:9c:46:93:20:cb:e1:2d:41:15:15:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
        Validity
            Not Before: Dec 27 03:00:21 2024 GMT
            Not After : Dec 28 03:00:21 2024 GMT
        Subject: CN=f737205c65d7a7d03e158abff2ba93f9c2ec87b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:55:49:b8:01:d2:cd:95:b1:af:05:03:b4:
                    d4:a3:5c:f0:52:df:35:13:5d:d9:f2:56:4f:31:ba:
                    42:f0:17:c0:28:00:40:45:8e:19:c9:58:a4:41:75:
                    02:1c:e1:24:d4:2a:f3:b6:12:99:67:70:23:31:41:
                    f7:89:72:ba:d4:33:99:20:2a:e0:ee:73:06:85:dc:
                    78:75:0f:a3:b0:0e:da:4d:40:c1:4d:fc:cc:5e:cf:
                    37:1c:3c:da:c4:d8:8f:fe:76:11:94:3f:ae:62:b2:
                    0d:01:86:79:86:52:03:7e:22:56:84:61:65:a0:9f:
                    99:80:c1:fa:68:cf:ad:1b:3d:fb:bc:dd:de:ab:5f:
                    bf:dc:59:63:93:c4:2b:8f:12:e2:16:f1:f6:68:6f:
                    c1:23:5b:36:42:c1:3e:08:96:75:be:ea:0a:5f:68:
                    63:50:9d:f9:07:94:63:df:9b:96:14:b8:b3:68:46:
                    3a:2e:b9:90:4d:f6:de:a0:4f:2c:c6:3f:11:72:89:
                    f7:bf:7b:a5:b0:de:6d:8a:b9:8a:8a:35:98:59:44:
                    ee:3e:11:08:ec:31:1c:d9:57:74:de:2a:37:10:60:
                    65:6c:32:32:0d:1e:ea:bc:87:5b:bc:e0:91:78:80:
                    a9:8e:fd:5e:7c:a0:88:79:2c:90:1e:c7:df:db:01:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:37:20:5C:65:D7:A7:D0:3E:15:8A:BF:F2:BA:93:F9:C2:EC:87:B1
            X509v3 Authority Key Identifier:
                keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:87:e0:02:43:ce:8f:d0:f8:61:1f:37:40:73:21:01:2b:6f:
         83:ea:bc:e9:57:93:c1:e1:14:31:de:82:57:c1:f1:8f:49:7e:
         b3:98:e9:b2:d4:3b:e4:8f:c6:3d:1a:f0:12:3d:9a:9d:c0:71:
         2e:59:a2:5e:e5:f5:22:26:b9:e9:a0:90:00:d0:77:12:67:18:
         f7:81:3c:0b:c7:37:5e:96:0a:4b:e3:88:69:7c:1a:22:90:7c:
         2f:98:73:4b:b4:96:20:f2:f0:25:91:1b:ba:57:b5:8d:9b:34:
         a8:46:9d:cf:ec:95:16:58:ce:de:98:22:66:d6:7e:d2:ac:64:
         77:99:a8:b4:ab:d4:15:c0:cd:09:be:50:13:3a:f1:43:48:c0:
         b7:5b:17:a8:52:60:fc:4a:52:a3:88:97:b9:a7:7b:23:7e:1a:
         37:4e:86:69:fe:e6:6a:67:c5:e0:8e:6b:fc:50:db:af:44:ba:
         08:1f:26:d7:26:3a:7f:dd:ef:2c:a2:74:5d:70:50:f3:13:ec:
         ab:c2:06:79:81:24:6e:98:a7:f6:48:e8:cc:e0:7b:6d:0c:17:
         26:bd:7c:af:57:c0:14:a0:d3:f9:62:5a:5b:9a:3a:b1:8c:9c:
         7d:8c:e2:ef:31:d0:f4:ec:87:22:82:97:0c:1a:31:fe:35:38:
         b8:20:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:43:51 2024 by rpki-client on console-ams.rpki-client.org