Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File:                     BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier:          rri2v9TJt2dhsTKttpV+fCEMawNyI/u5nq+yXhqWU4I=
Subject key identifier:   3C:87:27:4B:6A:C4:51:EC:01:EC:09:A6:87:55:03:B3:BC:97:DD:BC
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer:       /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial:       019356F6BAB15827C07824D1EA17D18302EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 03:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:30 +0000
Files and hashes:         1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: ZAG5snxQ0BxhUfaf0i6pNEq4KbZf8Nmx6Rpb22PmIkU=)
                          2: F9iz-KXdQUPii9Qc__n905BfpZc.roa (hash: nQIkpOzG6tSBZLGWRJBqGn+YG5dy8qABeTowzZ9vtFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ba:b1:58:27:c0:78:24:d1:ea:17:d1:83:02:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
        Validity
            Not Before: Nov 23 03:00:30 2024 GMT
            Not After : Nov 24 03:00:30 2024 GMT
        Subject: CN=3c87274b6ac451ec01ec09a6875503b3bc97ddbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:8c:0c:21:74:0e:88:e3:75:cf:74:c0:99:
                    4d:fe:a4:36:23:70:06:71:64:d4:7f:da:6f:22:43:
                    8e:3d:13:88:a6:c1:28:65:fe:c8:a3:13:14:3b:2d:
                    da:4e:75:c5:f0:2c:bf:1e:44:3b:05:a6:3d:56:9b:
                    7c:9c:30:17:13:33:27:21:71:97:ad:e7:f6:b2:b7:
                    07:d7:25:4f:6f:70:0a:f5:55:c3:96:b2:f5:1a:e8:
                    5f:8b:de:f9:e7:d0:de:fa:37:e8:f5:cc:64:1e:22:
                    e8:27:78:90:82:57:9a:0d:e1:45:cd:7e:7c:f2:bf:
                    c1:37:1c:dc:49:6a:94:08:6b:0e:30:c9:19:c9:fb:
                    ca:9a:5b:0d:e1:3c:b5:f2:65:d3:4b:f8:7b:58:f7:
                    87:13:d0:c1:5a:6d:cd:46:84:f9:82:0f:38:71:81:
                    c3:c5:79:6e:aa:4f:0e:c4:b3:b0:b5:e6:2a:57:48:
                    ae:0a:3f:68:13:a4:1b:40:e4:e5:ad:eb:38:fb:27:
                    10:bd:6a:06:b8:8e:5e:4b:ae:63:fa:cf:2d:90:4f:
                    5c:c9:b2:e4:ba:19:50:3f:76:39:59:bf:f9:e2:8f:
                    6f:1a:9f:87:2a:81:49:63:64:46:f5:82:7a:57:a9:
                    fb:7e:77:6c:f9:08:37:78:85:c6:b0:66:b5:9c:22:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:87:27:4B:6A:C4:51:EC:01:EC:09:A6:87:55:03:B3:BC:97:DD:BC
            X509v3 Authority Key Identifier:
                keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:0a:bc:33:50:bf:11:52:ec:21:8c:e4:e2:c7:61:68:ae:
         6b:ee:54:03:9a:b6:a9:a2:1e:66:13:a7:e0:d4:85:1e:c1:7b:
         ef:24:80:e7:34:df:93:6c:b2:c0:fa:3b:23:3c:eb:11:0b:4e:
         8b:52:e7:5f:02:e9:01:9c:cf:d3:f6:78:c2:1f:10:91:6c:80:
         77:e2:d9:40:75:97:e1:54:7e:d7:c9:bf:b0:5a:22:dd:2a:dc:
         f3:cb:51:7d:7a:06:8c:73:10:22:6c:09:ac:46:50:fb:26:1d:
         32:41:30:c0:8d:45:a4:f3:78:7f:5a:5c:1f:ad:d3:9e:ef:ce:
         11:39:62:d8:58:36:36:a2:01:d7:30:90:ee:91:2d:54:29:ce:
         88:60:3d:ce:83:c9:58:1e:ee:42:dc:89:03:cf:6e:20:98:a0:
         d1:07:0c:47:9e:73:d5:14:2d:ae:46:53:ae:ad:3b:8e:07:de:
         68:2e:b7:d7:ba:57:81:6c:d2:9b:2a:e1:98:8c:e9:fe:8b:b4:
         da:fc:78:11:38:e1:d2:d8:b8:57:3b:d0:19:e9:ab:16:27:32:
         53:b8:0c:6c:ef:1d:26:0a:bc:3c:ef:b7:06:16:57:7b:35:90:
         2e:bc:8b:d6:db:d7:e0:15:ff:bf:7d:e1:a1:f4:5f:b0:73:35:
         7f:b5:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:34 2024 by rpki-client on console-fra.rpki-client.org