Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File:                     2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier:          4idOOahIV71IDJW5MNFtKOwRxK+Na8+C+2lk9r/K1cY=
Subject key identifier:   2F:36:55:82:D6:8F:A2:04:1B:FB:A1:D0:DA:8C:A2:13:A1:51:C9:02
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer:       /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial:       0194064710413256BCFA30B44BF212659070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number:          05D0
Signing time:             Fri 27 Dec 2024 04:01:48 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:48 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:48 +0000
Files and hashes:         1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: oAFZSGN6/ID6ker1u9CqDnXi6xz/jP6t/Wh50ZMWWFU=)
                          2: gQVERu1mDiOlAaYqDspaUhbcDYQ.roa (hash: Yp4vk+g55fF0GyXDoF9n7ld4PdMwc6WR3uDh2iXW+vs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:10:41:32:56:bc:fa:30:b4:4b:f2:12:65:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
        Validity
            Not Before: Dec 27 04:01:48 2024 GMT
            Not After : Dec 28 04:01:48 2024 GMT
        Subject: CN=2f365582d68fa2041bfba1d0da8ca213a151c902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:88:3b:21:67:8a:5d:7d:25:e9:40:a5:16:
                    87:45:0a:26:bf:86:35:52:65:86:70:75:8e:78:2f:
                    1d:fb:aa:a4:25:10:af:82:84:ea:7d:46:56:dc:3d:
                    f5:3e:b3:41:63:4f:44:f8:df:56:2c:18:99:92:b7:
                    13:91:f6:b9:8d:f0:0f:94:86:f4:c5:dc:92:29:36:
                    08:11:0f:42:84:b8:b1:77:cc:4a:e8:92:f3:90:d5:
                    56:1a:40:54:a6:b8:ab:c3:81:d3:54:bb:41:05:d4:
                    d6:3c:a7:18:30:43:65:75:06:5a:4c:23:32:c6:0c:
                    5f:61:94:0e:57:bb:7d:35:96:fe:1b:11:c5:f0:66:
                    9a:73:ff:6c:2a:70:5e:5d:c8:1f:f2:d0:01:1a:74:
                    a0:c1:af:89:c9:50:ad:ff:4b:31:57:ff:4a:0c:87:
                    d1:7c:50:31:90:79:37:cc:5d:1d:4a:0a:1c:d8:67:
                    22:94:8a:e5:e1:c3:76:0e:63:48:37:86:6f:27:c9:
                    a1:df:2a:ac:93:19:21:64:65:fd:20:37:4c:27:71:
                    07:61:0e:3a:b8:63:5e:c7:5b:e3:30:40:09:3f:cc:
                    ea:4a:99:8e:0e:f7:82:19:e9:38:bd:63:06:dd:17:
                    28:39:e0:21:69:df:fe:97:13:d2:72:27:10:50:0a:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:36:55:82:D6:8F:A2:04:1B:FB:A1:D0:DA:8C:A2:13:A1:51:C9:02
            X509v3 Authority Key Identifier:
                keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:af:54:76:6e:09:de:67:16:cf:28:2f:13:75:24:8a:c7:
         28:5d:7e:54:0f:ad:d3:3f:43:7b:cf:c5:4e:6b:5b:1a:ae:1d:
         b0:16:94:fa:d0:a0:39:0e:d9:de:ff:de:50:be:91:6c:9b:9d:
         0c:91:19:2c:5b:84:cb:ee:a7:cd:3e:ec:8f:35:8b:20:e7:f7:
         ba:6a:b9:bf:61:e5:e2:e7:e1:3e:17:04:96:52:b6:b5:08:72:
         c6:a7:a4:a1:fa:22:d1:e1:84:3f:dd:03:48:75:6d:b9:2a:34:
         f0:d3:67:ec:23:28:26:bf:c8:0e:19:70:ff:32:b2:e3:f1:e1:
         4f:a6:9d:ae:19:55:0b:62:f2:3a:0d:ca:05:c6:24:85:72:1c:
         7e:c1:ff:2c:b2:dc:68:f6:c5:40:49:09:f5:90:36:16:5e:53:
         51:59:59:b6:b7:f4:e1:ae:0a:e6:86:97:67:61:70:39:d9:07:
         0d:61:46:a1:c4:9a:2d:1d:28:72:58:56:be:ee:eb:9e:e4:87:
         34:5f:c5:fd:d4:73:ef:57:a4:a9:49:fc:64:62:fb:78:2e:50:
         97:07:e8:b1:b7:de:f0:1f:c3:c7:c1:61:aa:87:be:ea:df:0d:
         b8:96:52:f6:d0:ef:c7:2e:d6:45:5a:8a:25:b0:29:3e:6f:56:
         e0:8e:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:22:16 2024 by rpki-client on console-ams.rpki-client.org