Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File:                     gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier:          eNpk1IHjvWOUV2qvUjCJ0M1YEJfoYvV3+gHFanchmtM=
Subject key identifier:   FD:4F:7D:A5:59:1F:6E:21:71:66:76:50:FD:A8:87:12:77:65:A2:69
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer:       /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial:       019365C4F892282FB65A99A3E27F827E9462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number:          02C9
Signing time:             Tue 26 Nov 2024 00:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 00:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 00:00:27 +0000
Files and hashes:         1: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: 6Cu7VOvbsOjtHb9zOh+zlo4XSDKxgdks9BIPpsTDlEg=)
                          2: gun04pxMvbbc0fJRQ5QpbGzkmmc.roa (hash: gVx7DHMQRfF9mcNg127k/i0xrfQFJ+e3sNqiixVY2ck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:c4:f8:92:28:2f:b6:5a:99:a3:e2:7f:82:7e:94:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
        Validity
            Not Before: Nov 26 00:00:27 2024 GMT
            Not After : Nov 27 00:00:27 2024 GMT
        Subject: CN=fd4f7da5591f6e2171667650fda887127765a269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:c0:40:63:8e:94:73:07:c8:47:a0:a4:a7:
                    34:b4:6b:f3:c3:53:fd:35:f1:45:4b:00:5d:7c:c3:
                    94:9e:5c:63:cd:e3:50:11:16:7e:94:b2:11:91:71:
                    ea:9a:57:ca:70:15:47:37:12:9d:d9:d8:ab:d3:1f:
                    b4:1a:35:4b:74:76:a8:bf:56:e9:6b:ee:f1:18:fb:
                    55:93:af:32:1d:28:a8:11:36:a6:39:13:9f:b9:26:
                    be:de:1b:f7:ce:6c:ca:fc:84:41:eb:b8:f1:c3:d9:
                    b0:ed:5c:d4:41:29:b1:d7:5b:90:35:da:43:ef:a7:
                    ee:78:91:96:a2:d5:c6:64:33:29:01:55:58:6e:91:
                    a2:b3:14:8e:87:67:06:66:16:33:a1:cf:7a:72:71:
                    ac:d9:bb:74:09:a2:1d:a3:ad:0e:9e:17:0e:16:9c:
                    bb:c5:c2:1b:73:b7:f2:f9:29:1b:9b:e0:3e:b7:c0:
                    81:d4:d4:38:64:80:ee:4e:11:13:84:52:33:66:2c:
                    b9:75:6f:76:7d:60:ee:20:52:4b:23:ad:9a:fc:2b:
                    0f:50:81:18:1b:14:7f:dd:3a:53:98:83:52:8a:4b:
                    77:51:d4:ef:28:73:eb:88:63:65:74:09:88:98:65:
                    09:46:61:b6:f4:7f:77:bd:50:5a:72:3f:6f:22:65:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:7D:A5:59:1F:6E:21:71:66:76:50:FD:A8:87:12:77:65:A2:69
            X509v3 Authority Key Identifier:
                keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:b9:b6:b3:ec:8f:4d:a9:aa:7e:36:3c:0e:de:af:7b:c4:
         3f:92:6f:f6:e5:de:dd:ec:1a:61:5b:02:8d:f8:78:e4:77:69:
         d4:33:fd:91:80:a8:e2:93:57:56:43:ef:59:af:1e:13:a2:38:
         f5:24:0f:20:90:2d:61:48:4a:9a:1b:d9:ff:45:ed:2a:61:76:
         e2:b4:3f:aa:4e:a7:3f:57:bb:cb:bd:14:b8:ee:84:78:49:98:
         8b:9f:c0:fb:11:26:d1:78:22:ef:8d:07:cf:dd:b0:27:46:4e:
         1f:b6:2c:c3:8e:49:66:16:56:80:71:49:63:b2:9e:bb:f5:fd:
         98:9f:9a:a6:c2:ac:b1:bb:b8:2f:df:cf:49:22:00:58:bf:19:
         d9:3c:6e:4b:9a:b7:d8:4e:13:3c:14:d5:09:38:cd:93:b3:58:
         e0:a0:63:21:b5:a8:f7:3b:1a:9b:93:47:7c:dd:9a:f7:df:10:
         1d:7d:0b:b2:ca:e4:8e:c0:af:f2:c1:db:26:90:41:de:51:2e:
         21:73:43:d4:e2:53:7e:a4:df:d1:11:d6:b0:1b:b8:77:45:aa:
         a8:ea:9a:aa:7b:59:f4:e6:8e:e4:f8:4a:66:6e:7a:b3:10:4c:
         93:33:74:4e:da:8e:2c:f9:a6:be:b0:4d:65:6c:34:f0:71:cc:
         d3:17:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:57:11 2024 by rpki-client on console-fra.rpki-client.org