Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File:                     KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier:          hS0695uzFiAK2PqtEu+3YqO6vNsYhVSfnZAtyxahkJU=
Subject key identifier:   EA:5D:EC:8E:CA:1A:CF:22:83:7B:FE:34:2D:81:2E:59:C7:5D:A1:D9
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer:       /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial:       019352ADDD3DF5F45137386EADB37F593E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number:          0D8F
Signing time:             Fri 22 Nov 2024 07:02:26 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:26 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:26 +0000
Files and hashes:         1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: 5dz/uJ67WdONWrru0Aeg52khl1eppndbVg8GpYDJ9pQ=)
                          2: vX83YQ5vkwYraUg8VxFXDRWyhpo.roa (hash: 1AYjgK9Zm4xI2RYHcK0pubrtB3/FxzWGObHJwFaWCKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:dd:3d:f5:f4:51:37:38:6e:ad:b3:7f:59:3e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
        Validity
            Not Before: Nov 22 07:02:26 2024 GMT
            Not After : Nov 23 07:02:26 2024 GMT
        Subject: CN=ea5dec8eca1acf22837bfe342d812e59c75da1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:6b:d5:91:65:2b:ce:4b:5d:85:85:6f:92:
                    f5:53:d4:43:2f:8c:6b:85:f6:da:be:4d:d0:e1:01:
                    6e:63:a2:e3:3d:b5:97:5f:b5:f0:5e:a4:90:b8:a9:
                    fd:ed:5a:ef:ff:27:75:52:f2:17:4d:d8:31:fc:9b:
                    3b:33:c8:30:3b:f3:12:a2:b9:df:0b:db:69:a1:f8:
                    2f:bd:35:06:2a:b0:9a:3d:47:1c:06:28:12:fc:ad:
                    53:78:97:f3:82:26:f2:32:25:6a:f8:39:57:4c:37:
                    2e:5b:2d:85:c3:43:b4:e5:31:06:a2:c0:2d:1b:fd:
                    73:b0:64:65:b0:ae:9e:c1:d4:c7:33:1b:a4:8a:6c:
                    58:89:9f:ff:30:5a:2b:b9:4c:66:fa:fb:f9:51:27:
                    e0:42:b9:e0:be:44:be:2c:b5:ad:d6:e9:bf:c6:a9:
                    85:54:81:61:b6:ee:d9:85:db:83:0e:aa:df:5e:81:
                    05:fb:db:ad:7f:bc:8b:ba:12:a6:52:98:84:3f:d5:
                    bc:74:58:6c:1e:8b:48:d4:e3:d3:4b:e1:fb:b8:f7:
                    86:b2:19:05:74:81:fc:ae:af:06:a7:7c:06:ba:06:
                    45:10:e0:eb:1b:5d:93:af:ef:fb:08:5a:78:c2:32:
                    d9:14:f0:c5:a7:02:33:d8:97:81:82:7d:5c:61:16:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5D:EC:8E:CA:1A:CF:22:83:7B:FE:34:2D:81:2E:59:C7:5D:A1:D9
            X509v3 Authority Key Identifier:
                keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a3:2a:b7:64:63:ae:53:8d:dd:40:01:e3:0d:62:f9:d4:43:
         9d:63:bc:b7:c1:11:c7:81:8a:e3:d6:1d:a6:67:e4:de:28:14:
         60:33:41:1f:51:ca:52:05:78:14:f2:3e:6b:3b:56:d5:c3:79:
         f5:ca:e4:a1:9c:5a:20:04:29:91:c6:8a:ba:9f:a9:05:42:d7:
         0f:7f:54:b0:25:a7:4d:e3:98:4a:82:ab:3d:86:87:13:14:ec:
         af:b3:ba:91:9d:ad:69:f8:28:77:10:9f:b3:fb:41:d1:63:a3:
         18:55:ff:e7:5c:29:3b:bb:38:20:1e:17:02:e5:63:8e:63:66:
         24:25:37:e6:7d:ee:32:dc:de:4c:e8:36:24:29:1d:af:c2:e4:
         ed:da:4d:e5:c0:0c:eb:89:77:77:cb:76:ac:0e:49:2a:a8:0e:
         ea:9b:63:5d:62:af:99:05:45:fa:93:ec:90:1b:bc:ec:77:b4:
         ca:81:68:7d:ca:72:03:fe:be:b0:06:69:44:e0:69:c1:17:2a:
         3a:c4:3f:13:dc:9e:49:9e:ef:3b:7e:57:f0:8d:9a:fe:fc:a0:
         e1:5b:68:27:ba:d6:92:f4:20:91:a6:24:be:39:fe:51:79:38:
         0d:57:14:ec:7c:9d:a7:0e:d5:df:b6:d2:cc:a6:56:1c:f7:98:
         77:44:4d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:18:13 2024 by rpki-client on console-fra.rpki-client.org