Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File:                     2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier:          zofqVB2QeHW0N9N2dVVpAZ+lYd0z7K3gzA0WEQzJYgM=
Subject key identifier:   4C:87:80:70:43:64:F9:2B:AE:9B:CF:A3:31:96:F4:57:18:19:4F:10
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer:       /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial:       0193568952E837320F07540FE72D4AE40E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number:          1302
Signing time:             Sat 23 Nov 2024 01:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:00 +0000
Files and hashes:         1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: fDxlDmWWD0KC3cQAuxFmJ1avsu/iFyQx9JPLDzjeaW4=)
                          2: ssaz3VymfDw4ZNyPrJkJ14yKcMg.roa (hash: h5Jot6dU0NZxZ3TkiGd6dnhDx14TglzhrrApORoJXxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:52:e8:37:32:0f:07:54:0f:e7:2d:4a:e4:0e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
        Validity
            Not Before: Nov 23 01:01:00 2024 GMT
            Not After : Nov 24 01:01:00 2024 GMT
        Subject: CN=4c8780704364f92bae9bcfa33196f45718194f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:f2:61:bf:cc:71:54:83:d3:81:36:74:0c:
                    63:34:d7:4a:96:85:25:78:9b:6d:24:35:f6:5e:d4:
                    20:1a:b4:e2:01:22:70:9e:73:e1:31:fc:43:d4:85:
                    e1:56:50:dc:f1:a8:ad:eb:d7:9d:a5:d2:33:0b:9c:
                    80:b7:9e:11:22:e3:29:f9:02:e8:a9:22:fc:ba:ab:
                    d7:5a:2e:d8:6b:35:65:74:91:1e:cd:b0:64:4c:8d:
                    5d:d7:ad:00:41:d8:0b:b6:53:c9:e9:71:ef:54:6a:
                    42:72:97:92:92:b5:54:10:13:ec:06:08:c0:cb:e1:
                    2f:c9:9b:fe:cf:48:b0:2d:af:ef:59:fc:8f:bc:7c:
                    6c:67:a8:41:60:71:20:39:64:47:a5:e2:9f:0f:72:
                    aa:21:c6:b0:ba:13:03:8f:02:93:e9:a8:74:17:74:
                    28:ae:4f:36:f0:a1:4b:c5:21:26:ee:de:08:35:34:
                    ad:ec:0c:62:07:b3:6f:e6:99:d8:45:71:d8:36:8b:
                    ba:69:8c:95:d7:e3:ed:d9:72:fa:78:58:a9:f1:03:
                    47:0a:e3:29:32:63:d2:c5:2f:95:8b:37:1d:71:71:
                    c4:19:83:f5:cd:05:91:82:8f:d6:52:0d:d8:f0:0b:
                    be:15:d0:3a:75:ae:b8:f9:b0:d9:e6:77:47:42:72:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:87:80:70:43:64:F9:2B:AE:9B:CF:A3:31:96:F4:57:18:19:4F:10
            X509v3 Authority Key Identifier:
                keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:71:a1:7d:19:c4:3c:0b:c3:0e:aa:26:24:29:f9:a8:13:
         ad:ac:b7:e4:7f:e4:14:ec:9a:21:8c:eb:ec:d6:19:4f:8e:de:
         4d:c7:7c:a2:a8:20:0f:1f:21:37:33:64:d4:80:52:f2:c9:78:
         48:29:c3:60:67:49:70:0a:82:bb:d8:52:7f:12:71:50:e1:29:
         a4:e9:8c:81:d0:50:a8:e5:ca:93:fe:e1:f4:6e:48:a7:24:19:
         42:11:7f:41:78:85:ce:96:5e:be:d5:b0:d5:9a:18:fc:21:d7:
         59:a4:17:4a:a3:0e:d4:c2:33:17:9b:9b:50:f5:04:22:e6:bd:
         ad:57:65:44:9f:29:f2:f5:d4:a6:b9:ff:cd:a6:9c:b5:e2:1a:
         d4:d4:c8:fd:6a:ea:9d:1a:4c:62:55:13:97:69:51:8e:04:30:
         b4:3c:cd:ed:65:32:68:ca:ed:4e:24:44:43:07:d9:d6:14:2e:
         ce:a3:fc:c4:15:aa:bb:58:ee:c4:9c:0b:c5:51:7f:ff:05:51:
         b6:d3:91:80:e9:fc:dd:f0:69:48:8e:62:30:16:bb:ed:8e:51:
         41:1a:a0:f4:84:c1:ba:fa:48:f0:b0:1a:f9:fb:7e:31:63:17:
         88:7f:eb:c6:b3:69:37:48:66:da:83:ad:0c:3a:9d:2d:34:8f:
         9b:16:1f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:32 2024 by rpki-client on console-fra.rpki-client.org