Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File:                     M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier:          IdncEfQ1n3/J6hytvUhbDBD/E7ygFMkiQ4wqFdIsGEU=
Subject key identifier:   4C:A8:E2:72:65:56:27:62:8F:F2:ED:9D:31:F5:8A:CB:3A:4F:FF:4C
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer:       /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial:       0193572D5A5D31BCBA898E293871BA71A9E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number:          0393
Signing time:             Sat 23 Nov 2024 04:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:10 +0000
Files and hashes:         1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: 2tZG6+ZLLG9A8pIfxtAZ+HAc8hOMuMMhbdIVcYdIVF0=)
                          2: rEX2-eY8Bm7Hk_CiTR7dvOZTxgU.roa (hash: hgTsk5IEAmKEQ81FFF4XZGp/St6qogUUtfQ5wo1s7CM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:5a:5d:31:bc:ba:89:8e:29:38:71:ba:71:a9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
        Validity
            Not Before: Nov 23 04:00:10 2024 GMT
            Not After : Nov 24 04:00:10 2024 GMT
        Subject: CN=4ca8e272655627628ff2ed9d31f58acb3a4fff4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:36:14:98:5d:81:a1:fa:ca:04:3d:67:3b:
                    ef:c8:70:ce:be:98:07:9f:90:c6:64:45:70:9d:1a:
                    96:25:31:9a:10:b2:fe:dd:ad:34:f7:a7:5f:33:a9:
                    39:d8:a5:4a:b3:6e:7d:e3:8b:78:4b:b4:a1:03:1c:
                    a3:ef:35:c8:a3:a8:3e:17:7f:8f:be:76:cd:d2:56:
                    ce:0b:9e:6e:17:d5:0e:6d:ee:4f:c6:51:e8:87:63:
                    c4:0b:04:33:1a:d1:53:b7:c1:d4:04:62:3d:72:d8:
                    da:19:e1:44:37:57:74:03:78:75:c3:46:11:90:1b:
                    dc:6d:9d:75:fb:3f:fd:09:d1:ed:00:7c:36:7c:25:
                    b8:ab:de:54:11:3a:ac:c7:a5:3e:aa:f1:81:8f:ff:
                    47:4f:95:7f:3e:1d:3c:93:07:d2:b0:a3:5f:8f:9c:
                    8c:70:bd:a2:65:dd:a8:c2:88:1e:b6:d2:88:24:83:
                    bf:97:3f:02:75:2f:56:00:8a:2c:0f:2f:f6:b9:2a:
                    2e:07:ff:67:8a:c7:71:71:33:54:b1:86:96:02:f2:
                    cb:0d:46:cc:20:83:12:f4:6f:0f:29:eb:26:0c:e0:
                    f5:c8:6a:63:8d:04:63:c9:46:f6:f6:db:a8:4e:04:
                    ae:ca:df:6c:60:2b:2b:d1:b1:22:60:f5:11:89:e3:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A8:E2:72:65:56:27:62:8F:F2:ED:9D:31:F5:8A:CB:3A:4F:FF:4C
            X509v3 Authority Key Identifier:
                keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:03:82:cc:6b:ad:4c:79:63:55:b1:be:86:58:31:3a:42:
         ae:dd:5c:fd:5d:84:d2:04:ef:0c:05:be:00:4d:32:26:1a:d3:
         b6:44:46:64:26:db:1e:a8:8a:f9:49:aa:25:3d:07:f7:e8:b1:
         97:75:55:c5:4e:be:7c:a6:32:c4:e7:61:03:c6:a8:16:5f:18:
         44:60:16:4c:83:29:19:6f:cc:cb:ec:aa:2e:eb:ce:5f:17:8b:
         44:ec:3e:32:6a:aa:d5:16:ff:55:b0:d5:30:9e:97:cb:37:72:
         c2:ac:5a:5a:99:45:48:6b:2a:8c:2d:65:61:59:f3:79:66:10:
         35:1d:34:fa:9e:4e:05:f2:79:a3:a8:b1:0e:fa:fd:ee:6b:6a:
         3f:ae:7b:39:b1:e0:46:75:22:b7:8f:6b:d9:78:3f:c6:2c:df:
         99:4e:19:b2:12:98:86:07:c4:31:65:6a:25:c2:40:88:6f:0c:
         27:3b:89:b8:bd:60:7d:33:cb:27:b3:3e:cf:ae:55:33:0f:69:
         44:97:f2:dc:12:ca:63:31:d8:75:09:4a:66:55:cc:1b:2a:e5:
         8d:b5:8d:34:42:31:5c:7f:e6:21:4b:20:46:7b:a2:1f:9c:31:
         1d:ca:92:16:f7:b9:40:45:a7:e7:ac:8a:38:bd:2c:ba:1a:2e:
         83:c9:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:12 2024 by rpki-client on console-ams.rpki-client.org