Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File:                     d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier:          7nKT0btDQZjYniVuQYJjixm0aW/KcjOuGg9DV9MdjEQ=
Subject key identifier:   A1:EA:90:9A:E2:3B:E1:E8:83:2D:44:D6:9B:5E:29:6A:E8:DF:F2:F8
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer:       /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial:       019355E4858FAB128693F999FBB3F00B0DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 22:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:59 +0000
Files and hashes:         1: Hz2_vhRJs-pq6SMfUea-SOsNfkU.roa (hash: MXc3DyOC3bHqSGX5gG+PR+75Qu6vBHWACQCAOPYfxL4=)
                          2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: WypZ1wMufqf1L0rx46iAgSfIZu7Vjae0QvhR+tvaY9c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:85:8f:ab:12:86:93:f9:99:fb:b3:f0:0b:0d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
        Validity
            Not Before: Nov 22 22:00:59 2024 GMT
            Not After : Nov 23 22:00:59 2024 GMT
        Subject: CN=a1ea909ae23be1e8832d44d69b5e296ae8dff2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:cf:2a:72:99:7d:40:a2:33:5a:58:48:bc:
                    d5:5d:8a:0e:c9:7b:f6:26:2a:5c:4a:17:45:7a:bc:
                    0b:ab:ed:5c:d7:74:2e:cd:65:a9:df:8e:94:48:3f:
                    a6:0b:f7:87:0d:b3:9d:e7:e7:e4:84:1e:99:4f:72:
                    0a:ea:17:c3:56:24:8a:e1:52:5c:31:1e:eb:93:1a:
                    a5:20:4b:aa:f5:4f:bb:ee:58:44:07:22:87:4e:ab:
                    be:c4:10:51:b9:dd:35:d7:aa:90:fe:d8:2f:8b:af:
                    1f:cd:26:d2:fb:60:8b:c0:84:d3:dd:a9:59:25:e9:
                    a5:02:c9:34:13:ad:cb:03:c1:85:3f:b2:02:b3:d0:
                    78:b8:01:3d:6a:d7:64:63:90:bf:66:ab:10:ba:8f:
                    5d:d1:ec:fb:e4:84:81:6e:e5:34:21:6e:07:80:8b:
                    87:52:b3:f8:53:54:f3:2b:fe:33:0a:0f:52:02:81:
                    9f:80:eb:89:33:f1:b8:91:a9:46:d8:56:e7:a0:44:
                    28:5b:0c:fe:ba:9d:65:3e:4b:d0:10:db:3d:5d:02:
                    cc:c7:2d:b0:e9:e0:d3:8e:9a:a1:2b:ba:83:ef:b9:
                    2f:a1:17:b3:80:c8:f4:c0:ed:b7:20:bc:60:14:6b:
                    e7:f1:82:4c:7a:bb:d6:88:ae:59:d0:f7:01:84:0c:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EA:90:9A:E2:3B:E1:E8:83:2D:44:D6:9B:5E:29:6A:E8:DF:F2:F8
            X509v3 Authority Key Identifier:
                keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:29:91:31:4b:9c:57:5b:a4:68:44:96:9a:f7:c1:ac:d3:54:
         65:d8:67:74:8d:e0:1d:25:79:de:12:0e:3d:49:d6:7d:77:90:
         27:16:29:82:3c:e5:c9:81:9f:1a:80:4b:bc:87:df:f1:25:0e:
         9f:0f:84:2f:1a:1b:45:75:d3:26:4a:27:d7:b3:34:9d:e9:ac:
         d4:2c:7c:d7:52:e8:f0:2d:3e:00:88:9d:72:9f:86:6d:c7:28:
         08:ca:9b:52:81:44:26:47:41:2b:37:a1:3d:09:ea:0c:0b:28:
         85:53:78:c1:cf:6b:f7:b8:5d:6b:e8:ff:2a:e1:eb:1e:45:31:
         b2:db:b4:be:4e:6d:2e:ff:c0:12:44:60:a5:76:be:24:82:79:
         a4:ca:ff:40:1c:14:03:15:3e:7b:45:7a:85:98:56:b9:39:cd:
         22:e6:fc:65:ce:f7:ab:fd:0c:4e:2d:85:04:06:99:66:26:89:
         cb:67:d9:ce:39:45:be:d1:50:58:5b:02:7b:6d:4d:83:eb:b7:
         89:01:8e:0f:60:02:f5:7e:e1:2d:cb:f1:18:62:30:2f:88:03:
         42:d2:20:cb:0c:2d:ff:bd:04:21:cf:37:89:c1:02:d9:4c:f3:
         b6:43:02:00:38:5a:a8:db:76:23:e0:da:09:34:b8:55:b8:33:
         98:0c:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:54 2024 by rpki-client on console-ams.rpki-client.org