Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File:                     Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier:          N82DB5qLaxVV0HARC+zgwCmkqaBfxEHG7Tz+J0FfVko=
Subject key identifier:   6D:05:78:CD:66:7E:A9:CD:C4:A7:E7:2D:40:0C:8B:30:63:31:67:7F
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer:       /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial:       019358094C499DB6C4588F1B7F95DBF2B09F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number:          0DBA
Signing time:             Sat 23 Nov 2024 08:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:24 +0000
Files and hashes:         1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: fUGNuTxyJhZ8wOT4O/4bOePDFopqurvf/8mlUL0+yms=)
                          2: yF5S6rLc47Y3fmG2xsGhpwzcN8s.roa (hash: dvdFBH+Q25mt0u9WeoTJ8e3zpfCJgdR0ZoZdwL/YLZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:4c:49:9d:b6:c4:58:8f:1b:7f:95:db:f2:b0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
        Validity
            Not Before: Nov 23 08:00:24 2024 GMT
            Not After : Nov 24 08:00:24 2024 GMT
        Subject: CN=6d0578cd667ea9cdc4a7e72d400c8b306331677f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:ef:4b:46:57:fe:c3:01:57:14:97:d8:1d:
                    04:90:57:e3:89:63:82:fe:6d:04:4e:79:10:85:4f:
                    dc:73:b0:d6:19:d6:df:a8:b1:9f:c2:38:97:6c:b9:
                    cb:c5:90:7d:9b:7a:ed:6c:b8:20:92:73:44:6d:63:
                    f4:6a:18:1e:d3:e1:52:79:9d:61:6a:c9:dd:bd:53:
                    83:30:01:c2:9d:3a:18:0a:00:61:a3:19:55:0f:e7:
                    c1:a7:f2:b8:a4:20:e6:ea:4a:e9:92:35:be:37:7a:
                    c2:36:4d:19:77:aa:d7:df:f8:9d:2a:c8:46:b2:93:
                    c8:21:71:0f:cf:73:4d:43:00:01:a6:e2:40:5d:7c:
                    59:1d:18:b4:d5:22:47:4e:67:63:09:62:ea:21:71:
                    a2:62:b7:e5:9c:d1:b2:d3:9c:02:d7:03:6a:a2:46:
                    42:d0:b3:6f:b5:62:66:72:83:56:51:ba:7e:4f:a5:
                    5f:cf:ae:06:84:37:81:a8:dc:85:73:ad:d9:92:5a:
                    32:46:54:90:7d:aa:38:a8:e8:a5:cd:45:0b:c1:0e:
                    13:20:79:b2:a0:f3:f4:de:37:85:b2:79:a6:92:62:
                    0e:84:36:0f:cf:e8:f8:9a:31:37:a4:9f:85:0f:55:
                    0d:3e:1a:55:b9:71:5a:16:2c:93:5d:55:ae:4a:46:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:78:CD:66:7E:A9:CD:C4:A7:E7:2D:40:0C:8B:30:63:31:67:7F
            X509v3 Authority Key Identifier:
                keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:4f:07:aa:90:6d:58:96:c8:90:1b:27:26:b1:b0:52:bd:
         68:2c:26:6e:2c:84:76:ef:4a:30:56:9e:e5:93:ba:4e:d4:71:
         4a:2d:ee:c3:e6:9f:02:3c:c1:b5:93:c2:48:0c:f7:9a:df:0f:
         7f:e6:54:e8:7f:de:7d:3f:08:7b:42:ac:95:a4:ad:3e:de:5f:
         f8:45:c4:c5:ee:41:48:57:13:63:42:f6:24:10:9e:23:83:5e:
         cf:9f:2c:52:09:3e:3b:5a:23:7d:b3:84:9f:db:44:77:c6:cb:
         47:c9:29:2f:8b:ca:a5:de:89:5c:96:2f:52:99:f8:ab:5b:7a:
         bf:f8:16:ad:e8:4a:63:f9:15:03:10:3c:8d:4d:f5:68:7f:d6:
         65:bc:df:a1:0b:b8:60:66:12:fe:ac:28:ae:0d:40:51:63:7b:
         bf:99:76:03:6e:3d:67:4d:4d:46:27:03:d6:57:40:dd:bb:03:
         17:7a:0d:6a:b2:2e:b3:c7:2e:a3:9a:06:5c:98:16:bd:79:6b:
         20:c1:5e:51:a3:af:8a:c5:56:73:64:95:39:6c:a0:ef:a5:12:
         0a:1b:02:c2:9e:d3:01:19:c2:ea:14:39:d8:f0:5f:bd:65:44:
         19:0e:14:0b:76:ef:be:2e:e1:a8:fd:d0:e9:95:84:f6:99:58:
         19:38:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:00 2024 by rpki-client on console-ams.rpki-client.org