Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File:                     2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier:          hj6AeUnlhQuwolH3QcHv9qvWN1yY6x13HG8NuBCbh2o=
Subject key identifier:   E7:3E:D9:D7:02:53:2C:6A:7C:66:25:14:93:CA:B6:24:EF:72:8D:0C
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer:       /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial:       01936B8FDB773F3110F2B5EB8794715B3FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number:          022C
Signing time:             Wed 27 Nov 2024 03:00:10 +0000
Manifest this update:     Wed 27 Nov 2024 03:00:10 +0000
Manifest next update:     Thu 28 Nov 2024 03:00:10 +0000
Files and hashes:         1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: GvglDrGLP63PwYLRsDz0uR0mNLUcbxwNXztljEBx1BM=)
                          2: nehY5u1WSId5EG2uWu7zhlJLP_w.roa (hash: fdiHKCLqXOxheAO9NierOZz6t03euUV38D/8KsGJMcc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:8f:db:77:3f:31:10:f2:b5:eb:87:94:71:5b:3f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
        Validity
            Not Before: Nov 27 03:00:10 2024 GMT
            Not After : Nov 28 03:00:10 2024 GMT
        Subject: CN=e73ed9d702532c6a7c66251493cab624ef728d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:81:0c:f8:91:19:68:23:63:a7:19:67:16:
                    da:e9:16:bd:e2:78:d6:4a:50:f3:93:fd:61:41:6e:
                    db:03:f4:9b:f8:4b:55:44:3b:03:02:cc:e4:12:5d:
                    90:a2:9a:59:e2:47:c2:af:ca:2f:a1:01:91:97:5b:
                    c8:ac:da:a1:d3:44:72:46:32:9d:c6:e9:4a:09:bb:
                    b9:76:b5:82:1f:07:4a:9c:ab:53:3b:e5:9f:7b:04:
                    c6:da:44:6a:c8:43:22:cc:8e:27:3b:5a:4a:b5:1b:
                    a0:75:3d:e4:b6:37:af:5a:37:88:92:b0:45:dc:cf:
                    30:ef:7e:97:f0:b2:99:1b:6b:92:e2:5b:49:d8:07:
                    fe:f3:6a:0c:80:7a:7b:fb:88:18:f0:95:5a:5b:cd:
                    ad:82:47:f8:be:71:9b:25:cb:38:d9:c0:ef:40:eb:
                    d8:89:0d:c3:0d:42:24:0d:23:46:e6:c8:84:8c:a5:
                    d2:79:6b:ec:3f:6a:1e:c8:23:a3:57:ab:9b:a3:8f:
                    9f:eb:6d:4a:b5:ff:7a:ca:2c:dd:db:19:08:02:25:
                    35:82:60:df:62:97:46:0b:25:b7:52:75:48:aa:b3:
                    04:a8:91:36:68:a7:a7:5b:85:41:23:a1:4e:75:af:
                    55:8c:06:3a:15:54:4e:c1:3f:c6:02:2c:54:52:72:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3E:D9:D7:02:53:2C:6A:7C:66:25:14:93:CA:B6:24:EF:72:8D:0C
            X509v3 Authority Key Identifier:
                keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:9f:f3:4a:8d:30:1d:7e:84:7b:e7:4c:cb:44:86:be:4e:
         b6:24:8b:fe:27:20:73:b5:0f:7f:a7:43:2e:ae:65:23:b4:62:
         d4:16:dd:f0:c7:d7:19:0e:55:8a:90:fd:08:96:e5:30:c3:0c:
         9c:ed:13:8f:35:6a:dc:56:db:47:08:0b:36:3b:98:31:86:3d:
         8f:9e:c7:19:cc:d2:ba:dd:40:ff:e9:05:24:d2:b6:26:45:90:
         28:05:12:e8:d0:39:ce:2e:e3:6c:d0:86:31:0d:1a:16:6b:24:
         eb:64:05:03:01:9e:f5:ab:21:2d:0a:13:cd:94:0c:ee:ad:33:
         71:6f:8e:d1:ad:a0:f2:5a:ad:77:ef:e6:84:a0:f8:3d:6a:05:
         1e:c9:d3:95:d2:aa:ca:b6:05:42:3b:75:1e:00:5b:9e:d0:59:
         38:9e:63:4c:43:c6:96:50:29:ef:f3:16:80:80:45:56:31:da:
         5a:a3:41:f9:de:59:45:b9:d3:ce:55:c3:93:4f:fc:87:9f:c2:
         4e:9e:51:0e:bb:b2:2c:c1:53:82:11:9e:48:0a:17:00:02:85:
         f7:20:69:83:69:06:c9:c1:2f:75:f2:93:27:e5:9a:79:49:8d:
         a3:98:dd:2d:af:25:91:28:b6:7a:77:95:ba:d3:2f:d1:95:62:
         a3:2e:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:12:42 2024 by rpki-client on console-ams.rpki-client.org