Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File:                     2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier:          o2HOIP1Wm25DoHBTbVc5ZSKQdNI3NChLSr/TS1IVkDM=
Subject key identifier:   38:AD:E2:7C:18:A0:E1:6B:15:55:6D:90:EB:AA:FF:CB:56:21:C7:20
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer:       /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial:       019355E479ADA1DB64A4D0529E3A94B5F04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number:          0DCE
Signing time:             Fri 22 Nov 2024 22:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:56 +0000
Files and hashes:         1: 1-wq3-R3TERL1t2bL6vQF0r7HQfU.roa (hash: I8tXyCkAvkpuLMXgHngDTdRtlMLHIlvtcPRRYfcHcak=)
                          2: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: 9he1D4lQLk22guJqEsxwXmHagQtXtjaz68r6O1C2FVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:79:ad:a1:db:64:a4:d0:52:9e:3a:94:b5:f0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
        Validity
            Not Before: Nov 22 22:00:56 2024 GMT
            Not After : Nov 23 22:00:56 2024 GMT
        Subject: CN=38ade27c18a0e16b15556d90ebaaffcb5621c720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:3e:57:77:80:8a:96:6e:d7:58:09:c1:d2:
                    75:f8:ad:8e:85:21:61:b2:8d:7f:7a:f0:f2:66:ea:
                    c2:42:62:eb:5a:08:03:77:df:f0:1b:f7:17:57:75:
                    2a:71:ae:7a:98:12:89:63:85:eb:27:ee:3d:19:ae:
                    18:b6:3b:f5:3b:c9:f8:26:87:5b:d9:bf:2a:f2:04:
                    3e:b3:89:ed:f4:ff:de:d7:0f:f8:ac:4e:89:bd:5b:
                    0c:43:90:b5:22:57:c0:5d:a3:5e:9c:b0:a4:5f:64:
                    13:ea:c9:04:87:f5:bb:4f:8b:3c:f5:db:67:81:98:
                    77:c5:dc:6e:f3:28:7c:06:c9:8c:58:73:57:1b:5a:
                    e1:72:5d:1d:b9:43:08:a1:f3:e0:33:b9:4d:08:c9:
                    42:fa:d6:7d:ab:8a:36:ea:bf:96:b1:14:93:5c:d6:
                    8f:2c:74:15:b7:74:ee:67:1f:12:e9:71:5d:34:31:
                    0c:c3:31:36:c2:3a:a5:fa:8c:e3:41:b5:60:ce:d1:
                    d2:25:47:ec:78:e4:6c:96:a6:fb:0c:20:c3:26:59:
                    ac:0c:c8:7a:a4:37:6c:97:aa:15:c7:e8:d2:ae:d3:
                    fd:30:ff:88:ac:c3:8d:7f:d7:17:ae:23:8b:c2:39:
                    36:e0:61:72:62:05:63:36:de:8f:25:35:37:d3:b5:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AD:E2:7C:18:A0:E1:6B:15:55:6D:90:EB:AA:FF:CB:56:21:C7:20
            X509v3 Authority Key Identifier:
                keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:01:c6:40:c6:2a:15:b4:68:2e:88:44:94:1c:b3:4d:f9:38:
         88:e6:bd:86:6e:8d:5e:30:52:5d:71:f4:21:25:e0:de:81:e8:
         28:f0:e2:83:73:42:fe:10:20:8f:03:0b:a7:77:d0:06:05:8a:
         f7:a3:16:60:49:2c:f0:16:2a:10:d6:62:50:dc:c8:a9:ad:9e:
         63:de:c9:34:62:85:2c:24:68:58:c3:2a:23:bd:e7:f9:23:2e:
         45:c9:ed:5d:4d:f7:bc:36:77:64:35:d0:bd:76:ff:6c:b7:49:
         dc:b1:24:67:73:ce:ec:44:32:41:85:1c:a8:0e:d8:e0:d5:96:
         8e:84:f8:c1:c9:04:b9:ce:7c:74:34:84:32:6e:d3:ba:c3:76:
         32:42:c5:43:12:e6:b7:00:59:74:f1:a7:94:e6:05:f7:28:e6:
         ca:5e:ed:ee:61:e2:ae:81:b4:05:ce:d5:51:2e:1e:44:ec:62:
         56:0d:04:a7:ad:18:15:61:41:a2:19:77:d8:a0:10:0b:86:0f:
         c9:8a:ca:7b:65:f9:7a:ea:d0:d1:b9:7d:0a:b3:a2:38:78:8a:
         aa:5c:97:38:73:8a:59:68:19:2d:73:e4:a1:c6:49:c3:12:d2:
         d9:f3:f6:6b:63:6a:b7:f3:7b:6e:b3:05:90:c2:48:45:c7:86:
         a7:fb:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:19 2024 by rpki-client on console-fra.rpki-client.org