Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File:                     MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier:          hhH+Ff0HZyp5TT/nmTCSQ/k3deJEeUssT7W4DqeSlL4=
Subject key identifier:   E5:EC:08:05:23:F3:51:D8:93:8D:97:3B:2E:DE:D7:C2:3C:48:94:8C
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer:       /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial:       0193579B6C220C915709D5B008CD8480AD95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number:          082D
Signing time:             Sat 23 Nov 2024 06:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:23 +0000
Files and hashes:         1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: fvggxziwPOWitzUTJdGL/JHLhLTMZJ57mIKlEfjjtOw=)
                          2: UAGrn-ASH9VRPm4IdO4mfPckYsM.roa (hash: 9mJNnOtyqcpY7HJZxLgk46IvcFqRdnDkKh2pqhDyir4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:6c:22:0c:91:57:09:d5:b0:08:cd:84:80:ad:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
        Validity
            Not Before: Nov 23 06:00:23 2024 GMT
            Not After : Nov 24 06:00:23 2024 GMT
        Subject: CN=e5ec080523f351d8938d973b2eded7c23c48948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:72:46:3f:7c:24:06:cf:a6:c6:ce:56:15:
                    8e:b0:47:ed:2a:28:43:e2:70:28:5a:ef:7b:51:db:
                    32:59:6c:3b:14:49:18:5c:8b:49:ef:c2:0c:db:9f:
                    32:06:61:68:0c:53:94:1c:a8:f6:37:9a:22:65:01:
                    61:89:39:1d:4b:0b:92:69:7b:d8:ae:b0:69:b3:23:
                    d7:3d:eb:8c:65:33:ac:22:35:4e:3d:f2:b6:7c:ba:
                    5c:19:d9:0c:bb:ba:88:ab:be:9e:5b:2e:77:0d:03:
                    30:5c:f1:0e:ca:b5:2a:f5:1b:ed:f3:3b:39:99:d1:
                    07:1e:dd:f9:b3:b1:05:63:30:bb:a1:6d:04:a4:47:
                    b6:b0:11:7a:d3:01:0f:e2:38:f8:6d:55:5d:28:c0:
                    c5:3b:a0:51:ff:57:96:45:1d:2c:44:5c:50:08:8b:
                    17:33:96:6c:12:80:5c:42:07:83:b4:fb:d3:c9:05:
                    ca:e5:19:be:3e:31:bc:5a:d0:c6:b1:e5:9c:0a:af:
                    d0:03:ed:de:fc:69:ec:9d:41:78:46:98:56:88:97:
                    76:c6:71:9d:81:8c:b8:c9:42:6c:be:79:e9:7f:e1:
                    29:e6:e9:67:de:18:a3:71:fe:ed:89:8f:65:a7:7e:
                    1a:b1:54:e7:30:c0:64:52:5b:0c:97:14:2e:81:2c:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:08:05:23:F3:51:D8:93:8D:97:3B:2E:DE:D7:C2:3C:48:94:8C
            X509v3 Authority Key Identifier:
                keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b2:a5:47:2b:c4:82:aa:2a:8e:aa:81:4a:4c:23:4e:84:e7:
         56:88:84:3f:80:21:b6:85:09:97:d2:f3:e7:9c:a2:39:a3:76:
         9c:8b:94:52:dd:a9:12:ec:bd:b0:ed:f6:bb:1d:23:e4:df:07:
         89:8b:b4:d6:12:a9:41:dd:7b:f2:36:1c:80:24:4c:97:ec:d1:
         71:76:b3:ba:74:11:e5:b5:ed:3e:fa:00:31:8c:f0:23:ff:1a:
         44:16:f6:1f:04:20:12:77:04:51:1c:17:67:3c:85:6f:83:c7:
         8a:60:17:df:60:50:27:f5:ee:66:91:9f:8a:78:d2:63:92:9f:
         58:8d:78:78:db:3b:f5:bd:e6:67:40:69:25:4d:61:3f:e7:b8:
         15:a8:17:2c:ec:5e:de:8d:fc:cc:f6:97:cf:78:a3:a6:c2:2e:
         2c:ed:24:3a:28:13:4a:7e:54:58:ad:fa:ae:2b:ca:bc:3e:be:
         f5:e0:25:43:a8:e2:42:a9:85:a7:3a:63:90:1c:56:db:4c:4a:
         16:48:0e:0f:b7:07:d8:59:2c:bf:df:c3:da:48:5e:e3:a4:43:
         c1:8a:a9:be:2e:63:80:f1:92:8d:89:68:0a:ca:05:02:f1:21:
         4d:ae:03:4d:98:21:3d:44:1d:7e:3c:79:8a:94:dd:10:bb:f2:
         89:2b:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:07 2024 by rpki-client on console-ams.rpki-client.org