Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          J16SynQFf9yN6pA1XUQtKb7LGK61uZ6joT446+b2Z+Y=
Subject key identifier:   CC:16:29:EE:0F:C0:C6:2A:6C:B9:03:A3:79:33:5B:39:6F:F0:FF:69
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       0193553F0C01D813B21BAC03ABEA10EC8FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          125C
Signing time:             Fri 22 Nov 2024 19:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:15 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: zr0ueubAas6bdFrlPkOKJtj4E0a5dW5oydRAVQXnSvo=)
                          2: 9OO9W41Ro068xNQMyl7Ur9RmilI.roa (hash: xUjzPp8VHBH4P5c1kTGUxY4WAR/K2lKYKpF9N6ok+60=)
                          3: PZ-7eTlAk8e5-lsISM1Mg71Mrqc.roa (hash: 1oxx/t9m5sSGLdNtlpqQfj9Z5Xaprm8d3LC74wRLjFY=)
                          4: jqf9MZFJg4Au93XqV1Tej6pb44A.roa (hash: oL1hfa5Vt0J1FJi/5m8kWqCmF1OVMXgrLkAkPcLlMc4=)
                          5: pfDazX5dqtI9dLKqzbEgZmI-Ksw.roa (hash: 6KGY2PyTQSIjBTERVdh9P9V0pdGpYlABWUEbV0hiaOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:0c:01:d8:13:b2:1b:ac:03:ab:ea:10:ec:8f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: Nov 22 19:00:15 2024 GMT
            Not After : Nov 23 19:00:15 2024 GMT
        Subject: CN=cc1629ee0fc0c62a6cb903a379335b396ff0ff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:a3:69:83:e9:00:3a:ab:7d:c3:36:2d:33:
                    15:10:74:fc:06:5e:80:ec:40:75:d8:46:f6:e4:95:
                    f2:ed:d1:72:10:9e:2b:6d:15:8b:55:d0:99:80:7a:
                    97:2b:42:0e:fd:a0:52:b7:31:45:0f:92:7f:0c:ca:
                    b6:ac:c9:38:44:20:f0:8b:ae:df:51:e9:54:45:ed:
                    6a:3e:68:2a:8c:41:db:2a:f7:59:49:19:d8:3c:85:
                    cf:2e:a3:99:85:4b:75:2f:7c:65:d0:b2:f3:1f:63:
                    ef:d3:e1:26:20:01:23:85:ac:de:47:dc:d9:67:52:
                    9e:70:fa:11:e0:20:a4:1e:d1:b6:39:84:4f:8a:01:
                    e2:5b:e4:a6:5e:dd:a7:ae:91:f1:4d:cc:b3:fd:7f:
                    2e:ab:1a:a3:01:5c:51:44:3b:b1:60:9a:da:8b:bc:
                    d1:2b:f0:67:33:b4:f1:39:71:3d:38:75:30:2f:b1:
                    45:c8:d8:4b:2f:8b:ea:1c:f1:0c:98:48:da:f4:d6:
                    1b:ca:e9:41:ca:1a:87:e8:8c:84:42:6d:3a:00:1c:
                    c6:60:a4:63:56:e7:4a:04:72:ed:5e:49:12:42:f0:
                    3c:9c:da:9a:66:6a:ec:77:c1:d8:4f:ec:69:13:35:
                    95:fa:86:ff:1b:89:b5:b6:00:c2:15:69:1b:5a:74:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:29:EE:0F:C0:C6:2A:6C:B9:03:A3:79:33:5B:39:6F:F0:FF:69
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:25:cd:c6:bb:e7:a6:ef:a9:21:c7:4a:73:1a:f4:18:68:
         24:e7:a0:3d:59:a6:c8:a1:5f:65:31:08:ee:88:bc:97:62:fe:
         ff:04:90:46:d8:1a:c8:42:4e:a8:4c:8d:ba:f0:1b:7a:c2:15:
         1b:a8:91:18:b2:ed:ee:bf:ab:16:23:ae:86:68:e7:67:a9:14:
         a7:cd:f4:23:c3:dd:88:ef:e6:6f:a4:c4:b1:cb:d9:6a:84:5c:
         77:fa:32:10:4e:05:48:52:81:80:b9:7b:95:f0:8b:d2:f4:5d:
         2d:fa:2b:2d:ce:29:4e:33:0d:ab:5f:67:8e:93:ef:02:99:ab:
         20:3d:cd:da:5a:38:bb:a4:ad:8b:c7:59:33:92:99:33:d8:24:
         67:62:1d:67:2c:e3:f2:66:a7:23:5a:93:de:e8:9f:97:09:a8:
         6f:40:d5:6a:ba:f7:ac:61:3d:dd:b9:63:36:2e:c1:d4:4a:6d:
         21:9f:71:cf:a0:02:c3:ed:9b:43:e4:07:57:ab:e7:c8:7b:ef:
         63:65:0c:f6:57:3d:5d:2c:40:17:ae:3a:bb:73:76:d3:2a:2c:
         a3:65:0d:16:0c:11:0b:17:e2:2f:5a:11:51:58:ba:48:b0:a4:
         1b:47:fa:17:8c:3c:23:1a:ab:86:4b:61:e1:68:2f:c0:d6:d4:
         8b:eb:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:17 2024 by rpki-client on console-ams.rpki-client.org