Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File:                     jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier:          hHpbn9rIXlQx/A8fxiEuydu+VaHUH8BMu/QPHkfmXTI=
Subject key identifier:   13:7B:5D:46:AE:65:AD:96:2C:38:13:2F:4E:07:4A:94:C0:AE:9B:F6
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer:       /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial:       019369DA9EDD7CA8B34D80E4D0FA2BEDE9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number:          0A4D
Signing time:             Tue 26 Nov 2024 19:02:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:35 +0000
Files and hashes:         1: QmU5DTO-rhOPLNLW0dXWoN6Jn3g.roa (hash: tdFMhPIxv1WWbC7yFqXy1kFuIFNTX4YcCIVslmqEJrU=)
                          2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: dXLlmcZLtAdOV1DdM25iJzT9ZeLhhtV2NqjHk9Uo1X0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:9e:dd:7c:a8:b3:4d:80:e4:d0:fa:2b:ed:e9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
        Validity
            Not Before: Nov 26 19:02:35 2024 GMT
            Not After : Nov 27 19:02:35 2024 GMT
        Subject: CN=137b5d46ae65ad962c38132f4e074a94c0ae9bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:00:d8:35:5f:89:4b:7b:c1:b7:59:94:04:
                    b1:14:a8:96:46:b4:af:6a:b0:a9:a4:bb:4e:fe:32:
                    54:ea:b8:df:b5:eb:5e:7a:b0:70:dc:a5:4c:3e:75:
                    2d:ce:cf:e4:b9:76:3d:73:bc:be:53:3f:0b:e1:b9:
                    2e:33:e5:7b:55:4b:1c:26:dd:18:a5:10:4b:31:8c:
                    30:70:1b:ea:bb:b8:2d:7c:88:20:f2:b7:9d:e9:e6:
                    67:a3:8f:7b:80:65:3f:c6:67:dd:e0:a6:a6:0e:2f:
                    38:09:6e:c5:06:04:91:42:f3:cf:87:c8:47:20:df:
                    f8:1a:31:9b:e9:05:fb:4e:a4:48:be:ff:69:eb:95:
                    c6:a8:2a:a1:02:3d:be:92:3f:c4:64:61:3f:c7:0a:
                    04:77:a8:66:e9:3e:35:eb:9d:56:fd:59:9d:e1:51:
                    8e:40:09:71:06:53:7d:87:b8:9b:f4:0e:fc:c0:ba:
                    e8:46:2e:dc:26:ba:71:13:e3:cc:44:eb:d3:5b:64:
                    4e:cf:50:9d:cd:fa:6b:47:9c:85:0b:e8:47:10:3e:
                    31:33:0c:49:26:35:82:b9:80:4b:ce:ce:1f:59:6d:
                    71:e9:99:16:06:1a:e6:9f:09:77:43:20:d3:90:30:
                    ea:bb:dc:32:1f:d8:72:30:a1:8c:f0:af:81:b2:ae:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:5D:46:AE:65:AD:96:2C:38:13:2F:4E:07:4A:94:C0:AE:9B:F6
            X509v3 Authority Key Identifier:
                keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:e3:b9:53:94:aa:4d:f7:d8:60:6f:5d:16:42:a3:38:38:
         80:44:9e:f8:a8:70:1a:cb:38:6b:c3:3c:07:88:ca:36:2e:bc:
         4e:b6:d8:54:aa:89:ba:60:bc:5d:a9:39:0a:3e:cc:f4:a8:30:
         90:c6:e0:42:d0:b8:ff:9d:eb:7b:09:d6:d1:a9:59:b0:33:d6:
         42:ae:37:4d:09:e8:d9:04:4b:c5:b9:dc:aa:02:c5:09:47:d6:
         cc:31:60:85:40:2a:d9:26:25:41:2b:36:3f:4d:9d:9d:94:49:
         db:e1:13:78:15:1c:a0:8f:d2:9b:29:f2:db:53:03:fa:6c:27:
         b2:c7:11:df:09:2b:17:a1:df:92:94:0c:ad:d4:fe:17:7b:c4:
         bc:ee:28:a9:49:0a:df:e4:4c:e5:07:25:5b:25:f8:de:02:16:
         13:ad:5c:5c:e4:d5:11:7d:0a:3e:41:6c:63:50:6c:9d:34:50:
         9f:7f:0b:4c:11:81:77:d2:ed:64:af:bc:db:05:79:d7:10:01:
         b3:98:3e:c6:d1:28:2a:16:0f:59:7e:82:9c:ea:27:74:e5:6d:
         1a:df:00:14:c7:c7:14:25:a5:5d:1e:85:b2:9f:88:75:22:a4:
         38:6f:15:91:32:79:84:bb:45:e0:3f:5f:e5:fb:fc:c7:ed:19:
         4e:2b:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:30 2024 by rpki-client on console-fra.rpki-client.org