Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File:                     ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier:          rjfCYssi2K1Q2dr+FnpUi1G9uhS6C74+jwqlOzTvVGA=
Subject key identifier:   52:50:C4:20:DF:25:E2:50:0C:DA:56:68:CA:30:20:73:B2:C5:08:E2
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer:       /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial:       0193549A9D676E4C819B2786A0F72CEA179E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:39 +0000
Files and hashes:         1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: ApERahbgsvFYDs5kc+kuM4KkphZ/pE215fOc01mhTxc=)
                          2: Vz0-bunSPYqG6Y1fldcfQCTTU5k.roa (hash: UOJRqIip9Oc8TooeCQSRNQ9QxXyVO8ufhcQAAbPfyI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:9d:67:6e:4c:81:9b:27:86:a0:f7:2c:ea:17:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
        Validity
            Not Before: Nov 22 16:00:39 2024 GMT
            Not After : Nov 23 16:00:39 2024 GMT
        Subject: CN=5250c420df25e2500cda5668ca302073b2c508e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:55:14:9c:79:4f:20:cf:fa:6e:21:32:f3:
                    02:9d:8d:f5:a1:a7:73:1d:a5:24:66:98:6d:59:b4:
                    7c:e8:a4:51:c0:9e:64:83:8f:07:63:7b:03:41:ae:
                    17:54:f7:cf:e6:a6:27:60:59:d9:ff:29:1e:ba:95:
                    ed:af:97:e6:ee:86:ad:68:19:8a:88:91:e8:8f:5b:
                    36:1a:52:ab:c7:dd:b2:65:f4:54:36:81:23:77:c9:
                    10:fc:f2:bc:6e:c3:12:c1:04:42:19:8d:ae:84:c4:
                    fe:d3:46:83:38:68:88:52:9b:c7:71:b5:a8:7b:5b:
                    5d:6f:91:67:bd:1e:e4:06:f3:54:b8:af:ba:a3:a9:
                    f1:57:2a:b7:51:14:e0:32:df:93:6f:57:41:fc:d0:
                    0b:b8:e4:50:b1:5e:7b:27:2c:be:bd:91:38:f1:cb:
                    fd:9c:42:7a:92:04:1b:6b:9c:dc:af:d0:08:eb:14:
                    72:8a:dd:ae:cc:ab:4d:00:3b:f2:b7:25:bb:0b:30:
                    46:e5:52:ef:5e:f4:31:aa:50:61:f0:56:60:04:61:
                    4c:f7:c7:3a:52:7a:d5:27:a1:11:e6:e9:f7:90:c4:
                    9d:fe:49:38:cc:51:c9:64:86:a1:be:48:49:ce:82:
                    20:fa:dc:75:39:fa:fe:97:29:00:c4:26:c1:83:d1:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:50:C4:20:DF:25:E2:50:0C:DA:56:68:CA:30:20:73:B2:C5:08:E2
            X509v3 Authority Key Identifier:
                keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:87:4f:39:6b:8a:44:cd:0f:dc:c0:54:d2:43:d5:d6:66:
         3d:f6:51:10:54:b0:d6:e8:d3:3a:d9:28:80:9c:09:60:1a:5a:
         ae:37:eb:fd:fe:5b:3e:29:d1:7a:fb:04:dc:8c:f7:1a:5c:30:
         1c:52:b9:f3:55:d8:c4:86:38:3f:10:91:60:4e:a1:11:88:2c:
         d1:f5:1d:71:ca:a0:22:1c:d8:fa:8f:02:0b:ee:a1:ad:cb:bd:
         89:fe:cc:31:fc:4f:ef:8c:03:83:5b:3b:9f:e3:25:7b:79:57:
         2f:04:50:7b:ac:06:cd:fd:60:aa:72:04:94:35:f0:e6:67:13:
         1b:df:b1:92:4a:46:aa:76:cb:46:19:ef:a7:39:04:fc:cc:d0:
         30:cf:71:f2:96:d5:30:53:81:72:b4:f1:8f:3d:94:09:c9:c6:
         52:d2:33:8e:b8:63:70:d3:13:4d:72:11:ad:09:92:4c:f9:ec:
         2b:d2:fe:4c:21:76:ed:cd:13:b5:e5:16:7c:bb:b2:4d:05:ae:
         af:c5:2a:cb:5d:13:81:31:cd:c0:0f:12:24:b4:26:c4:06:ac:
         64:4e:fb:5a:51:59:48:94:53:9d:0a:e7:91:d0:14:6d:25:c0:
         56:2e:37:b1:85:06:87:03:3b:36:2a:62:bd:ec:0a:82:9b:41:
         77:de:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:47 2024 by rpki-client on console-fra.rpki-client.org