Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          mMX4qG9FiIeOFzx2YLz7JEIFXbrNvKvIGi2daxN5lms=
Subject key identifier:   EB:DB:F0:E1:B3:11:37:AC:AC:50:7A:E4:C3:BE:81:C8:A7:33:5F:1F
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       0193553F55344EABD8ADCD148C5234B70C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          02F8
Signing time:             Fri 22 Nov 2024 19:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:34 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: hx8Z+yzufap2kMj6OIuP9EDeG1mOGQX6GfnCy3mQt08=)
                          2: NNKajPIF7Scq8J_nMw8GF2r7Aqk.roa (hash: OGADpk8mU4NwJlQEXX1U5nodPECQr7fwPujf31ccqfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:55:34:4e:ab:d8:ad:cd:14:8c:52:34:b7:0c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Nov 22 19:00:34 2024 GMT
            Not After : Nov 23 19:00:34 2024 GMT
        Subject: CN=ebdbf0e1b31137acac507ae4c3be81c8a7335f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:97:00:a0:ae:56:c4:ff:aa:c2:d3:b1:35:
                    9c:95:f6:d1:89:5c:22:4a:82:c8:89:e1:0c:f4:b2:
                    74:a4:f7:9c:5b:fd:1e:23:60:a6:f9:81:78:e4:25:
                    7b:a0:f9:98:8c:1b:00:46:45:2a:08:68:19:c0:11:
                    69:b4:ac:ce:18:aa:bf:95:56:7e:a5:bb:1d:cb:18:
                    53:93:3e:55:9f:16:b1:b0:d1:c4:f5:2d:33:c6:c2:
                    11:5f:98:30:0f:e3:19:2f:ec:6d:c3:ed:73:11:ea:
                    e6:2a:07:92:80:51:7d:86:b5:cb:ef:ee:87:2b:a6:
                    52:87:8f:b0:d5:73:31:af:65:e3:2e:b4:5d:87:4a:
                    1a:fe:e8:e3:67:9b:3f:14:f4:19:92:01:78:65:9c:
                    98:14:1a:97:d6:e1:a1:a3:ad:cb:98:2c:b0:36:e0:
                    4a:4d:c1:2c:67:b7:8d:c5:ca:55:a1:57:63:2c:4c:
                    55:dc:66:54:7b:2e:a2:ed:f5:5c:8a:bc:31:23:15:
                    96:d2:c3:2d:d5:24:2c:d7:1b:84:fd:ea:95:19:c9:
                    92:4d:49:29:a1:1a:18:99:4c:79:77:c7:34:3d:45:
                    f4:8e:90:1e:f6:d0:a4:da:4a:e8:9d:4d:66:ab:7e:
                    88:a4:e4:0f:6b:5e:10:e8:0f:a0:68:17:6e:8f:b7:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DB:F0:E1:B3:11:37:AC:AC:50:7A:E4:C3:BE:81:C8:A7:33:5F:1F
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:52:e0:14:1c:6a:ec:08:77:ea:6a:45:96:f0:74:35:71:a6:
         a6:5f:32:b4:c0:ba:c6:9a:01:23:41:1e:09:04:01:6e:93:ed:
         cc:73:5a:ee:13:a0:8d:c8:a2:b8:3e:70:0d:64:02:92:9e:9d:
         f4:97:0b:d2:61:64:7f:1c:f3:c9:9a:7e:60:e0:b8:b4:c3:cd:
         68:ba:c2:92:79:e6:d0:90:14:03:e8:a8:4b:9c:5d:9a:20:62:
         9f:bc:0e:25:0d:15:a8:79:2c:d3:7a:5d:1c:3c:35:8f:6a:1e:
         9e:a3:26:0c:18:c3:07:40:f5:96:48:f5:02:60:2a:4c:a9:c9:
         3a:26:15:f7:76:19:7d:f8:f3:13:c6:bb:b1:1b:8b:0d:a1:2c:
         b6:f9:32:6a:2a:c3:52:7d:ce:88:72:84:a5:dd:b9:7c:34:3d:
         56:2c:48:d4:2f:d3:ca:57:ab:bc:89:d7:24:09:b4:50:07:3f:
         b6:7a:80:d7:ca:9e:26:c8:4b:3b:bd:53:31:69:e3:ae:c9:0e:
         9b:f0:d4:c6:ae:c8:a8:d0:c7:5a:74:20:ef:cc:e7:2d:33:08:
         96:93:5c:9d:2b:10:90:26:f1:89:cf:88:db:1f:74:81:3e:cc:
         d4:8f:0d:81:c3:4b:09:18:2a:72:64:52:cc:5c:12:2f:3b:8f:
         26:a1:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:44 2024 by rpki-client on console-fra.rpki-client.org