Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File:                     2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier:          2MhZ1ZchNvwubuXAl7Q+pwvFDW7vHwxInuZjD+34gms=
Subject key identifier:   A9:93:C7:88:19:89:47:3F:08:C4:EB:C4:7D:C5:E8:B8:8B:1D:7A:C7
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer:       /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial:       01935764F516C333FE8834A48CA22D64F4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number:          0651
Signing time:             Sat 23 Nov 2024 05:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:54 +0000
Files and hashes:         1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: 1iP3xBG3PrWgVY7x21d2Nc/Y3dHl492PpIW4liglhJs=)
                          2: hJXYHdb8l7pNOL2oF4BTrhjR6lk.roa (hash: OAJEsPRlHocVHwIIQ2mmrfFarFovfsjMGWY8FBw3yOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:f5:16:c3:33:fe:88:34:a4:8c:a2:2d:64:f4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
        Validity
            Not Before: Nov 23 05:00:54 2024 GMT
            Not After : Nov 24 05:00:54 2024 GMT
        Subject: CN=a993c7881989473f08c4ebc47dc5e8b88b1d7ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:a5:d4:e1:da:07:b8:31:76:75:68:40:69:
                    d2:14:03:6f:8c:df:4f:90:34:40:46:c6:83:7e:6c:
                    8d:82:95:53:f8:e1:5c:04:da:1d:06:85:cc:e5:70:
                    80:dc:98:86:84:45:71:90:e3:9a:62:da:27:ad:76:
                    54:07:98:c1:ed:1a:ba:6a:6d:53:06:aa:29:21:2b:
                    c7:39:9b:83:95:b6:b6:59:e9:02:6d:44:c5:da:07:
                    08:87:41:17:f2:14:fb:46:65:bf:c5:15:b8:00:ca:
                    f6:27:0e:60:1c:b9:b5:89:6c:43:10:88:0e:d6:53:
                    c0:29:80:10:49:d2:d1:59:75:9d:50:ab:5d:d0:06:
                    20:22:a2:05:dd:92:f0:54:03:7b:a7:8f:97:f5:61:
                    42:a0:cd:25:0f:12:44:a8:db:f2:8b:16:cd:70:5a:
                    10:9e:ec:ac:0b:65:5c:c3:c0:0d:f8:cb:4f:18:ea:
                    56:3f:e8:a5:c4:d2:71:5e:52:4d:56:9c:9c:b9:00:
                    e5:f1:59:a6:f3:5a:68:66:81:a3:5a:41:3c:be:ab:
                    74:13:f7:52:60:8d:e2:47:8e:b4:f0:82:8f:3a:94:
                    14:3f:d3:56:09:0c:59:e1:ad:30:11:31:20:11:1d:
                    20:aa:92:ff:2c:d3:12:ee:02:9e:5c:c1:75:65:c5:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:C7:88:19:89:47:3F:08:C4:EB:C4:7D:C5:E8:B8:8B:1D:7A:C7
            X509v3 Authority Key Identifier:
                keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:29:53:1d:b9:ee:94:8a:46:0a:49:fd:24:db:9a:b5:78:
         07:72:1d:4b:8b:43:68:e9:8c:3f:b7:36:46:51:ce:36:75:d5:
         52:88:8a:46:80:82:bb:24:93:8e:09:47:11:27:9e:1c:05:ae:
         0f:c2:6b:07:c0:f1:bc:ae:db:cb:ec:1c:da:6a:39:43:88:24:
         5e:d4:84:b8:e2:6b:78:51:0a:ac:78:36:f4:d0:10:6e:7b:a9:
         6b:ba:55:4c:0b:29:dc:75:be:ac:f0:f7:c5:49:b6:68:c3:6a:
         99:aa:b8:de:d1:05:1f:fd:5a:a8:05:7d:3a:29:6a:ac:3a:e0:
         d9:0f:5a:86:5e:79:3d:5d:04:67:30:3c:cf:c9:86:a3:26:cf:
         c1:bd:30:97:43:c7:a9:d2:f5:f2:89:41:40:6c:46:6b:fe:7a:
         9d:a2:83:2a:96:79:da:e4:c7:e9:d1:fd:28:9f:ab:4e:47:e1:
         5c:03:23:9a:98:d5:b8:9f:71:39:77:7f:75:8e:b5:52:11:0a:
         9c:90:26:61:ed:ee:18:8e:8e:db:e2:88:e6:4a:a9:2a:bf:14:
         b8:43:49:2b:04:5c:90:4f:c9:7e:34:b3:df:4a:3e:ee:e3:50:
         0d:9b:84:eb:53:80:bd:9b:12:72:29:ce:0a:26:b6:d0:05:4f:
         80:a1:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:09 2024 by rpki-client on console-fra.rpki-client.org