Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File:                     2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier:          +2YQgyxS+iYnRXBBwkfAKkdro5cEJFvvRnsFay+TVVc=
Subject key identifier:   43:39:AB:C2:B7:56:18:6A:3B:50:8F:E7:61:B6:6C:9F:DD:15:B9:87
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer:       /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial:       019357D2F51947B4B0459C2A38A1A38F36FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number:          0FD8
Signing time:             Sat 23 Nov 2024 07:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:03 +0000
Files and hashes:         1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: HSKvddSqS7DE1WxcTip/YfYqwMLVwPk5ICCkyFSVQNc=)
                          2: uUGkeNUXxSrHbMc5BCFPMSyfOVs.roa (hash: ONoJc7p1QRejrrzOSomdnxIfEta0+6vyJgJdLqRjfNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:f5:19:47:b4:b0:45:9c:2a:38:a1:a3:8f:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
        Validity
            Not Before: Nov 23 07:01:03 2024 GMT
            Not After : Nov 24 07:01:03 2024 GMT
        Subject: CN=4339abc2b756186a3b508fe761b66c9fdd15b987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:7f:6c:f7:4c:24:6a:ec:99:2c:32:5c:79:
                    df:03:5a:3d:11:c6:a1:4f:ba:59:99:cc:a9:9e:cb:
                    18:74:bc:64:f0:09:f0:d8:8e:8f:e7:fd:e6:2b:90:
                    1c:03:7d:7a:e9:22:d9:ee:da:8b:87:46:8e:17:82:
                    09:bb:f7:33:2b:87:38:d7:ef:b8:f7:87:00:42:64:
                    96:e9:38:1d:44:82:ca:ed:9c:c8:4f:8f:7e:f9:e7:
                    a5:5a:8f:6b:a6:7e:d0:9c:de:ea:37:20:4a:2f:11:
                    8a:e5:8b:0f:ba:3a:f7:d2:36:4a:8e:b9:fc:c4:3d:
                    20:df:28:9d:f8:65:9d:17:5f:74:2c:36:2e:71:f3:
                    07:81:ab:14:93:b7:b2:dd:06:ff:59:fb:48:73:df:
                    f3:d2:cd:1d:9f:5e:63:d1:f7:e1:0f:58:2c:49:20:
                    5e:ef:d2:f5:0b:99:b7:76:0c:90:12:dd:fb:a3:85:
                    5f:da:58:6b:86:2c:1f:62:e4:5e:e9:c8:de:a5:f9:
                    81:32:d9:97:01:d7:f7:43:b6:d7:a5:62:90:d3:76:
                    1f:09:c4:ef:ac:0e:32:1e:43:ac:26:2f:13:10:cb:
                    0e:5f:cb:07:e1:72:e0:12:92:57:fc:20:de:36:04:
                    ba:c7:c3:8f:ed:37:74:a6:5f:1d:98:77:16:5d:eb:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:39:AB:C2:B7:56:18:6A:3B:50:8F:E7:61:B6:6C:9F:DD:15:B9:87
            X509v3 Authority Key Identifier:
                keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:04:3a:15:36:33:c9:27:10:ab:ca:20:de:cf:0e:08:b0:df:
         8b:35:f0:36:66:d3:df:7c:a4:7e:1a:ce:66:ab:4b:3d:47:10:
         a9:1d:3c:11:df:9b:f5:af:03:60:7a:d3:f8:86:b3:ae:df:b3:
         5b:61:37:dc:99:af:78:e8:b0:2a:31:fd:1a:68:79:e2:ca:34:
         8e:5e:2a:1e:61:ad:b4:18:ea:af:7c:ef:79:92:75:0a:80:42:
         d7:1d:6d:2a:80:cc:3e:96:86:ea:f3:60:2d:c5:d3:fc:65:77:
         05:38:12:2e:94:f5:29:fb:c0:fa:1f:0f:08:03:f2:5f:cf:b6:
         e7:c6:80:73:a4:27:c5:ac:bd:bc:99:c7:86:05:ba:0c:41:14:
         bf:c4:da:d1:18:ab:79:fc:27:73:7e:e9:dd:93:6f:ac:b2:12:
         33:1d:d1:b9:2f:f0:b8:7d:c9:f0:9a:0f:9b:5f:31:64:67:fc:
         5f:7c:3f:7d:a4:42:01:e0:64:21:08:45:15:99:c2:12:3c:c6:
         84:19:31:cb:f4:4b:37:46:11:c6:12:d1:3b:0e:fb:5f:11:e4:
         8f:d2:e3:12:78:23:7e:bd:5c:9a:1b:d3:cf:0f:fa:2b:ad:bb:
         c8:ec:d3:54:df:40:2a:0d:1f:e7:0b:6f:33:79:cf:de:74:2e:
         f3:75:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:42 2024 by rpki-client on console-fra.rpki-client.org