Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File:                     2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier:          ne6pMMVg4mLwdHGUS7wqjdUGF3iKzYvdeUdnruH8kzk=
Subject key identifier:   8E:9C:F9:AC:2D:4C:C0:F3:64:E4:31:69:47:5E:EF:EA:7B:80:CF:62
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer:       /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial:       019355AD1A9A32D077693873275536960595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number:          D0
Signing time:             Fri 22 Nov 2024 21:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:28 +0000
Files and hashes:         1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: InBJBLuZ85xi7WLh9zWr/vc9nUccEtz8G3BqFwTSKMY=)
                          2: sQXVys13s8mZmGc44vE3hPhwaaE.roa (hash: 3iOKJym1lDwo4Q94jnexAVx4E8FQ2c9rRzmaRkZPoy8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:1a:9a:32:d0:77:69:38:73:27:55:36:96:05:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
        Validity
            Not Before: Nov 22 21:00:28 2024 GMT
            Not After : Nov 23 21:00:28 2024 GMT
        Subject: CN=8e9cf9ac2d4cc0f364e43169475eefea7b80cf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:1b:9d:3e:ac:9d:d3:b0:91:ab:0c:35:37:
                    61:d1:a0:fc:5c:bd:36:21:d7:e2:c7:20:ed:47:52:
                    7e:e9:50:78:49:f6:5d:db:f2:86:d8:c8:34:e1:42:
                    62:c8:e8:81:11:5c:31:3e:cf:0f:e5:ac:7e:8f:d6:
                    42:af:e6:56:ec:df:c8:ad:b7:fb:4c:21:d8:a4:15:
                    ec:be:7a:fe:72:f0:89:08:83:08:e1:e6:3f:6c:10:
                    1c:4b:11:c6:af:ea:93:4a:b5:7a:e8:60:a4:1b:8d:
                    aa:00:93:5f:f4:bd:3b:9c:ed:78:f2:35:7b:51:78:
                    cb:49:d3:8e:76:45:2d:b6:30:fa:41:8b:95:98:9b:
                    35:02:0e:a3:8e:17:01:40:4c:9d:c0:67:6b:88:07:
                    8d:3a:8e:fc:04:36:82:05:1c:1e:90:85:ac:5e:e2:
                    e6:69:ce:0d:97:55:f7:b9:dc:de:1a:83:e4:db:b2:
                    a3:84:0e:ca:32:47:91:2d:40:fa:5c:95:b9:13:6c:
                    73:4b:ae:47:26:2b:a9:c2:df:70:29:51:57:c5:4b:
                    11:74:a6:7e:5c:c2:a1:fb:0e:61:ba:aa:81:8b:3e:
                    2d:b4:92:ec:41:d4:b5:a1:c9:5f:04:2e:68:a5:38:
                    c2:2f:f9:a3:53:07:32:be:7e:f7:06:92:51:6a:95:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:F9:AC:2D:4C:C0:F3:64:E4:31:69:47:5E:EF:EA:7B:80:CF:62
            X509v3 Authority Key Identifier:
                keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:7a:d5:fb:b5:bb:cb:f1:a4:3d:c9:27:1d:64:11:1d:5d:
         56:e4:6b:fc:12:cf:27:7a:d9:f7:45:6a:d8:ae:9c:9b:06:09:
         11:f8:51:f6:a7:f6:38:2e:8d:cb:1c:28:88:f8:08:80:c3:96:
         89:82:29:b2:6d:56:41:6a:6a:79:cb:96:dd:0e:63:5a:c3:52:
         1c:3e:87:f8:47:56:ca:d2:5b:fa:80:bd:00:b3:01:5c:21:92:
         3d:50:98:3d:d8:26:77:51:43:5c:a7:93:ff:1e:65:83:01:75:
         6c:05:1e:51:87:05:6c:c4:88:8f:b6:00:3e:6f:a4:52:57:72:
         81:f1:2a:d0:de:88:bb:71:a5:75:59:4a:50:71:f0:98:8e:fa:
         d9:c9:1b:3f:13:4c:85:a3:bf:ca:37:e4:b1:e3:03:da:fc:16:
         ff:16:a5:f6:63:0b:fd:79:67:dc:ac:98:8a:1c:c7:7b:c7:d4:
         fb:48:de:2d:31:ad:f0:3f:df:ab:3f:79:89:51:4b:b2:cb:d5:
         09:77:d8:47:37:21:d3:bc:a0:13:2b:01:22:d3:bd:43:36:c4:
         a7:d7:48:8f:11:ac:85:10:40:7c:c1:22:ca:da:cc:3d:c0:f2:
         77:00:5a:2d:37:a6:85:b0:7f:47:63:fd:d6:b8:9e:dd:65:24:
         59:ca:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:56 2024 by rpki-client on console-fra.rpki-client.org