Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File:                     2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier:          HzfupLCAvO6zIrZUgrwlkyq9OyQhST5crBiRJCvFac0=
Subject key identifier:   76:D9:A8:68:D4:6C:7B:7E:CA:3F:05:CA:CA:AF:FE:27:6C:0F:7E:21
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer:       /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial:       0194064669BD55CB8BC79D9221C4EAD88A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number:          0E42
Signing time:             Fri 27 Dec 2024 04:01:05 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:05 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:05 +0000
Files and hashes:         1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: xPyiM1vwe+Uaryr2yrVQufh9JC3N8fDvENDIYIVjLwc=)
                          2: SeV31ysTQ2GVdmQ8W2IE7SbyoNQ.roa (hash: zmedeHVKN5K1l+n7b9RXspy9gi+P1MDE1bMe/qnkPtc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:69:bd:55:cb:8b:c7:9d:92:21:c4:ea:d8:8a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
        Validity
            Not Before: Dec 27 04:01:05 2024 GMT
            Not After : Dec 28 04:01:05 2024 GMT
        Subject: CN=76d9a868d46c7b7eca3f05cacaaffe276c0f7e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:87:a5:4d:1e:02:01:47:38:16:19:52:2c:
                    26:3c:d5:e6:21:8e:5d:81:85:40:c2:1f:37:d1:0a:
                    c9:54:3c:e0:4e:dd:6c:b0:29:7f:8a:e6:1c:08:6d:
                    a5:39:f4:1a:19:ab:47:12:2d:b0:24:f5:63:85:18:
                    6f:81:f6:1a:48:60:13:b1:50:18:a1:8b:7b:24:e3:
                    9a:e9:77:ba:aa:c7:7b:2d:f0:62:46:26:95:cf:a5:
                    9c:f8:39:88:47:a7:5d:7a:c1:e2:fe:69:06:db:7f:
                    8d:49:bb:40:51:a9:61:ec:94:03:21:e2:af:c9:58:
                    3f:57:b3:97:84:f4:e7:7c:57:36:d9:49:de:65:f3:
                    8d:24:50:6c:31:5e:b9:e9:09:70:88:f6:b7:f6:65:
                    e7:17:95:82:f5:c0:ae:b7:1d:d3:1f:49:3f:52:a7:
                    ac:10:fe:f6:c5:13:c6:76:f7:94:d1:92:b6:b4:f7:
                    e8:27:73:ca:69:da:86:da:65:72:be:b6:fa:2f:7a:
                    68:08:82:3b:dd:59:34:52:ef:f9:19:84:fc:a1:9f:
                    06:e6:a8:8f:77:a8:36:b3:f5:08:85:b3:47:ff:31:
                    ad:fc:33:c6:d0:91:9b:37:45:ec:83:ac:0d:18:73:
                    5b:b8:a8:16:b7:be:d1:98:36:a3:bd:de:68:37:00:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D9:A8:68:D4:6C:7B:7E:CA:3F:05:CA:CA:AF:FE:27:6C:0F:7E:21
            X509v3 Authority Key Identifier:
                keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:43:75:7c:02:73:94:58:37:77:ed:8b:6c:b0:6b:04:32:07:
         83:76:99:58:45:58:41:8e:84:95:a2:c7:c8:f1:93:89:af:3f:
         6a:61:4d:8c:c7:34:ce:64:23:33:a1:73:d5:90:e4:07:be:c6:
         c6:e3:60:b7:f3:ab:86:41:4c:8f:c0:b6:0c:90:3c:14:18:e2:
         a2:07:f3:9e:1a:4b:28:de:26:a7:02:f8:57:23:49:f8:77:84:
         db:2a:99:d2:66:bf:70:c6:11:dc:84:fd:b5:0d:82:c9:52:3d:
         e6:da:5e:fa:18:4d:97:e7:39:39:b7:e8:db:7d:1c:24:03:18:
         0d:ab:9f:b0:00:5f:30:24:67:87:f3:53:70:86:6b:9e:97:dc:
         d6:28:83:ac:73:d0:7f:37:ae:aa:d6:89:a9:f4:7e:d8:43:53:
         d1:70:45:ac:47:38:e0:4d:c0:1b:27:b1:41:97:a8:0f:f5:14:
         58:8d:12:8d:61:2f:5e:43:99:3e:37:c4:9e:18:18:ef:0e:3c:
         49:f2:7f:eb:43:f7:74:42:a5:95:76:9e:c9:f1:bb:67:68:eb:
         4f:99:3a:ae:a4:72:97:79:4c:8d:03:e7:7c:9c:be:29:e4:7b:
         25:89:14:cf:b5:36:ce:ff:9e:a7:2f:a4:48:c5:8a:56:4d:b3:
         8f:ee:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:02:37 2024 by rpki-client on console-ams.rpki-client.org