Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File:                     gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier:          tezOkuv/mtYTeW/OrZzzQaJE6qal/dhsYbCJ7JBjEPY=
Subject key identifier:   20:F0:AB:3F:DF:08:16:F7:BB:F7:78:7C:25:95:71:0E:D6:06:E2:E8
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer:       /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial:       019357648D6B905FEC4B7435E1DD9DE970D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number:          0A1A
Signing time:             Sat 23 Nov 2024 05:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:27 +0000
Files and hashes:         1: FWZJlAdFFd_NBYx7XVqFeLeY8eQ.roa (hash: AOB0YemXCxX8wv+B0ju4cjpgZgQxVLXFuD733FJhD8c=)
                          2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: m5r85GdXaXnvyj0oPsGb1+mod1tcRxMdW1wRFeAAuIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:8d:6b:90:5f:ec:4b:74:35:e1:dd:9d:e9:70:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
        Validity
            Not Before: Nov 23 05:00:27 2024 GMT
            Not After : Nov 24 05:00:27 2024 GMT
        Subject: CN=20f0ab3fdf0816f7bbf7787c2595710ed606e2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:b7:dc:48:be:31:c9:4b:55:3b:a3:a9:ac:
                    ee:c8:9b:f6:24:7b:fa:2e:8b:63:86:81:1e:44:e5:
                    6a:e8:37:60:9b:5c:52:81:45:65:26:f0:4c:e1:9f:
                    8f:0f:6d:f0:a0:eb:5f:66:a6:72:1f:ad:6d:6f:85:
                    f9:5a:98:24:35:0f:c1:63:89:72:7f:e6:f1:39:6e:
                    97:cc:82:e8:b5:20:ac:e6:f3:ee:b8:ba:71:48:89:
                    a8:af:74:43:46:fa:1f:0d:3d:4f:d2:01:fd:09:2a:
                    7b:d9:5b:08:14:ff:89:c1:d9:3a:08:b5:69:08:7a:
                    cf:cb:6d:e5:0f:fd:58:4f:a3:b2:e3:b9:84:1e:75:
                    61:2f:e7:30:4e:98:e5:69:e9:34:12:bb:96:0d:a8:
                    b1:df:38:80:43:e1:f5:12:a7:2a:60:e8:d2:d0:ea:
                    62:3d:04:94:07:c9:27:ce:e6:c9:bd:01:dc:f4:b2:
                    c2:61:20:09:d6:e5:d1:66:83:5f:c9:fe:c8:e0:02:
                    1d:ad:66:eb:3d:7a:f9:46:2e:9e:22:a3:92:fd:a9:
                    1d:0e:58:35:e6:8b:d2:5f:ec:1c:dc:85:85:db:6d:
                    0e:e6:7f:30:b4:b3:d5:f8:07:11:fa:4a:3b:5b:26:
                    64:79:22:5c:d1:34:f1:6b:0c:b5:a4:a0:d3:ab:7c:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F0:AB:3F:DF:08:16:F7:BB:F7:78:7C:25:95:71:0E:D6:06:E2:E8
            X509v3 Authority Key Identifier:
                keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f1:da:09:f1:34:54:9f:f1:6d:98:77:bd:cb:d9:71:95:26:
         06:5d:39:05:f2:16:b5:21:a3:e7:56:ce:7a:44:c5:4b:25:21:
         8a:68:4f:cb:3f:81:2e:c9:bc:b7:5d:45:e4:a6:b8:3a:2a:30:
         38:f6:1b:42:15:4c:cf:21:24:b5:1b:90:77:4d:36:3b:5e:d4:
         7b:2b:b9:69:6c:34:00:04:cf:54:cd:99:c2:b1:74:5b:36:83:
         14:15:64:c8:f9:31:2a:fa:82:49:95:0f:a7:c2:99:03:a0:a2:
         79:94:38:fb:3f:c6:a8:a9:61:0b:03:b3:77:45:94:b7:9c:c0:
         1f:1a:11:54:d8:0f:65:22:21:21:40:65:96:0b:fd:3f:be:3c:
         ff:33:95:0b:5d:d3:e0:e9:c9:26:2d:4e:dc:e7:d2:e8:f3:f4:
         ab:f4:1c:d0:a8:17:8f:fd:f2:67:ad:fe:fc:fb:f7:83:e5:91:
         8a:81:cf:da:5a:45:4b:1c:a0:6e:2a:00:27:e2:08:d8:1b:da:
         ba:4c:25:31:48:77:75:cf:20:0a:1f:a5:41:17:2e:55:0c:fb:
         51:12:ef:d0:50:2c:7a:da:4e:1d:eb:6b:61:b4:f1:31:a8:07:
         2d:9e:e9:2c:a3:e6:4d:3f:80:53:88:58:4e:a1:30:63:e9:54:
         cd:35:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:12 2024 by rpki-client on console-fra.rpki-client.org