Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File:                     2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier:          vTsl7qhlSGWVqRtCjGykhJfRtblpioYZBgG1qNZhu3c=
Subject key identifier:   7E:13:97:94:01:2A:1E:EC:61:A9:90:CE:ED:F7:C5:F9:3A:98:9C:59
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer:       /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial:       01936BC7F12F905888C673ECB691C0E5C32B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number:          1378
Signing time:             Wed 27 Nov 2024 04:01:25 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:25 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:25 +0000
Files and hashes:         1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: TEgE52HyG1RGFS+UGiTfQ9GRKss7cxuLGUsUvrkp7Nk=)
                          2: tlt3xCB-nNMWv5uEHH-LzxfJzd8.roa (hash: jz99xs3SRIlWJkPYBQHw+peQcplkS8yGEnVMhjHEcxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:f1:2f:90:58:88:c6:73:ec:b6:91:c0:e5:c3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
        Validity
            Not Before: Nov 27 04:01:25 2024 GMT
            Not After : Nov 28 04:01:25 2024 GMT
        Subject: CN=7e139794012a1eec61a990ceedf7c5f93a989c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:c4:a4:d1:12:4b:c0:67:b4:b6:af:f8:3f:
                    ab:9f:e8:44:80:6f:89:6f:36:3e:b8:5e:bb:4b:ea:
                    9d:b1:af:66:f2:df:49:a7:ed:38:0e:b2:31:e6:02:
                    b5:2e:aa:ef:65:35:3f:d8:a0:90:a1:b8:6d:16:72:
                    b7:e6:70:0d:d8:cc:36:ce:04:34:32:63:ad:e6:ef:
                    32:19:b2:ba:48:fe:1e:92:cc:13:1f:4f:76:ee:34:
                    92:51:44:ca:24:94:53:c2:4e:dc:40:81:90:30:9e:
                    bd:99:1e:88:c5:f8:e6:e5:2c:14:49:42:84:66:a6:
                    d6:86:52:5c:3f:8a:60:77:9d:7f:30:46:ee:2d:bc:
                    03:c4:4f:bd:3c:0b:14:a0:26:a8:a5:80:e7:d0:6a:
                    08:58:9b:b9:b1:68:1a:ed:8e:79:48:58:45:1e:f4:
                    8e:51:33:be:7b:24:13:22:68:62:9e:3a:2f:54:98:
                    15:b8:76:28:ed:8e:a0:03:ba:bf:96:49:a4:0a:57:
                    20:c0:3c:14:ca:03:ef:db:c5:70:0b:45:ab:48:b9:
                    2d:69:bb:33:54:97:aa:cd:ef:de:65:99:86:31:5b:
                    24:fe:97:53:8f:e7:1e:d8:c1:49:4c:13:7b:38:12:
                    85:1e:8c:d0:4f:12:53:21:33:84:97:2e:cb:5c:29:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:13:97:94:01:2A:1E:EC:61:A9:90:CE:ED:F7:C5:F9:3A:98:9C:59
            X509v3 Authority Key Identifier:
                keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1f:24:b3:4a:cd:3c:92:b8:19:27:20:6d:9f:05:0b:d5:20:
         14:96:f4:86:a7:46:ae:55:47:af:c7:5d:72:4b:e1:f6:8a:93:
         1f:85:c6:41:16:ea:0f:0b:42:56:f4:99:80:46:85:58:31:99:
         9d:bc:59:c6:3c:69:0b:5f:59:98:ed:f1:84:e6:c7:3c:44:44:
         ab:d4:35:b2:b9:e1:95:d6:0f:06:6c:e5:8f:51:67:83:c4:d7:
         dd:72:a6:28:7e:30:71:9e:43:fb:e7:b3:67:52:21:5a:0b:7d:
         e9:af:14:ea:4f:8e:d3:23:53:cd:f2:96:93:8b:7c:70:f6:ea:
         22:cf:66:8c:cb:a9:02:16:2a:7c:8b:6d:35:ed:81:70:fc:da:
         c0:56:24:f3:79:8f:fb:5a:39:8f:85:3f:0f:fd:e0:5d:37:3b:
         88:03:41:99:ef:23:53:28:18:31:5e:e3:bd:41:60:23:1c:da:
         f5:ce:98:af:b0:2f:1e:da:99:fe:11:5b:3d:5a:27:d9:8a:29:
         8a:c6:79:24:5b:ce:f4:7f:88:76:89:a8:a0:32:31:71:6a:44:
         cc:a0:14:9e:48:c1:74:cf:38:c9:90:af:dd:67:e5:79:d9:63:
         3c:aa:68:d1:0e:4a:59:c0:06:cd:0f:be:2d:97:a4:19:45:e0:
         95:fd:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:04:30 2024 by rpki-client on console-fra.rpki-client.org