Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File:                     IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier:          nRcHrlNAgyWryD6yF6KUaJLKF9RnHdzXBhhLFFctl1I=
Subject key identifier:   4F:E4:43:CA:19:42:C3:5B:46:AB:A0:C6:F2:C1:74:7D:C9:4C:37:F6
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer:       /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial:       01936A7DF1E2F77BF952B79C6588F7E1DE94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number:          0DE2
Signing time:             Tue 26 Nov 2024 22:00:59 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:59 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:59 +0000
Files and hashes:         1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: 1klUHZwRBc8Z53CYzHA0d2s3qad3T/+1nQ7O09qzHys=)
                          2: wsI3xhQeYAq9xttTrrVPJvHR5uk.roa (hash: vNyoBLaC8atmoI9XxAZeWo8JumNZ22NZpT9pohh8PQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:f1:e2:f7:7b:f9:52:b7:9c:65:88:f7:e1:de:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
        Validity
            Not Before: Nov 26 22:00:59 2024 GMT
            Not After : Nov 27 22:00:59 2024 GMT
        Subject: CN=4fe443ca1942c35b46aba0c6f2c1747dc94c37f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:50:03:a0:c7:cb:62:7e:12:e9:4a:a9:0d:47:
                    69:12:f0:04:b6:eb:63:28:b7:86:0f:79:13:b9:3a:
                    c9:89:46:50:db:1a:e4:fc:5d:d0:f1:4e:c3:5c:dd:
                    cd:20:2a:d1:44:f2:db:cd:0d:00:cb:f6:f2:18:43:
                    40:d1:36:68:4d:a7:ee:b7:a1:73:c0:94:79:6f:fb:
                    65:46:c1:46:6e:b5:44:d3:0d:ac:e1:cd:c4:8f:66:
                    e1:bb:64:5f:6d:39:5a:42:44:73:0c:c1:85:18:8c:
                    f2:4b:13:37:b5:19:a0:78:92:58:ef:9a:15:da:7d:
                    2d:cd:4a:d5:95:67:97:3a:68:69:a2:23:0e:e2:9f:
                    c6:19:46:19:9d:13:f3:38:da:65:0a:ee:25:b2:35:
                    c1:03:3c:b7:8d:c2:7a:84:aa:51:75:a9:3a:67:97:
                    cd:9b:24:69:a1:d4:94:e1:3d:71:e3:47:34:ff:f0:
                    a1:6e:d2:8e:2d:2f:24:b6:0a:e1:88:1b:bc:be:e8:
                    0e:fe:76:c8:07:f5:f6:97:2d:80:bd:06:22:75:d2:
                    1d:43:04:2d:8f:42:73:10:1d:23:0a:c0:e9:30:e6:
                    fc:70:83:23:6c:c4:fc:30:43:20:7a:6d:22:21:f4:
                    d1:c2:d5:63:28:6f:c3:9e:d2:0e:1c:61:22:22:6d:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:43:CA:19:42:C3:5B:46:AB:A0:C6:F2:C1:74:7D:C9:4C:37:F6
            X509v3 Authority Key Identifier:
                keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:d9:c0:fe:4d:7c:93:fd:c7:4c:25:1f:24:8c:b4:47:0c:e6:
         e2:48:2e:f2:e9:b2:7d:40:39:19:cb:b4:e5:2e:18:6a:1f:94:
         42:8b:2f:a7:cb:45:89:ff:ae:b1:46:32:60:22:d1:d6:32:eb:
         89:26:99:ce:eb:e7:f8:14:7b:49:ae:b7:d4:f9:37:9a:e5:22:
         ba:bb:96:ac:2d:48:09:20:70:b9:a1:d2:b3:16:0b:dc:51:88:
         df:1b:b4:ca:c6:c2:ed:73:76:9a:45:19:e0:13:d3:8a:55:da:
         ae:83:16:b5:5d:e1:8d:ed:ed:40:ba:41:4b:72:40:30:74:6b:
         bf:35:3c:ab:ca:5a:58:38:3b:3f:14:95:01:00:ef:b2:59:05:
         ca:14:9e:18:49:21:a4:aa:7f:4a:d6:00:05:08:8f:ca:08:dc:
         92:15:81:4f:41:5b:01:34:81:9d:6d:bc:3c:10:24:4e:00:b7:
         16:3c:ad:65:6f:10:e3:36:ce:f3:05:d7:bb:ca:6a:3f:5c:9c:
         f2:02:e1:98:b8:0b:a1:84:b2:97:03:e5:c7:e4:cc:e0:75:e4:
         64:34:22:b2:37:8b:d3:8e:d6:f7:e6:79:27:7d:0a:b9:97:e0:
         19:0e:8b:6c:fc:c9:52:f5:4c:3c:7c:56:11:1e:1a:0f:f0:25:
         09:14:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:38 2024 by rpki-client on console-fra.rpki-client.org