Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          qBIG1CSZ53E/vjBsoD/mOpeqvXN5MmtoaqgV8SHB9lE=
Subject key identifier:   72:A1:7F:F4:8E:4B:91:B4:89:24:7E:91:7A:04:04:2D:E6:9F:29:6F
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       019356BFA9FA30BA25F71BABEC18766F7F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          0172
Signing time:             Sat 23 Nov 2024 02:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:21 +0000
Files and hashes:         1: VJmDJxz4N8ZY3N6GijLivnhW04A.roa (hash: dvkN8X/yyIUvv+oXdKSOx1GkyEJdj27mpXzCrdRQvnU=)
                          2: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: Gmka+2V/Vp18YeySFvO8zWSXsuECU8+dDhagHnrDNZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a9:fa:30:ba:25:f7:1b:ab:ec:18:76:6f:7f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Nov 23 02:00:21 2024 GMT
            Not After : Nov 24 02:00:21 2024 GMT
        Subject: CN=72a17ff48e4b91b489247e917a04042de69f296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:c6:9d:c6:57:78:c8:4e:88:53:59:04:24:
                    5c:ae:37:c0:29:e0:3b:a1:e7:3a:03:c7:ae:33:ee:
                    1e:90:b7:eb:43:b1:15:64:87:28:f0:f6:b7:ad:f0:
                    77:65:e6:ce:88:ee:84:6b:78:4c:16:04:3b:05:a5:
                    1f:98:be:9e:a1:74:cf:83:78:1c:4d:7a:b1:4d:23:
                    eb:db:67:7c:de:7a:91:e6:c9:aa:40:04:09:50:f4:
                    c8:fe:57:99:e4:59:ce:a7:3f:04:ca:30:9a:91:c4:
                    10:83:c0:a0:a9:19:db:72:65:89:60:7a:8d:64:2b:
                    12:63:9d:9b:15:0e:09:7d:bd:f6:4e:fd:17:92:4a:
                    78:34:38:d3:b2:2b:55:ab:18:5c:15:b1:16:07:8b:
                    fd:b2:59:37:a1:fe:b4:9a:a0:3f:6f:1b:79:d0:21:
                    ed:0a:29:37:17:37:ff:29:a7:e6:05:33:3f:72:74:
                    25:4d:d4:06:63:e8:06:95:e7:08:ab:2e:f8:1a:8d:
                    4f:fc:a2:fe:35:83:04:da:fa:d8:0e:20:70:4e:14:
                    c8:33:64:6a:76:97:0c:77:a1:05:fc:9e:fa:43:5a:
                    6f:e9:de:9e:d8:09:ac:91:e2:da:0b:34:f3:37:52:
                    63:70:95:f2:44:af:55:b7:eb:03:c9:7a:81:c7:a6:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A1:7F:F4:8E:4B:91:B4:89:24:7E:91:7A:04:04:2D:E6:9F:29:6F
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:5c:44:1b:bc:13:c5:fd:60:93:2f:de:f1:17:c6:76:9e:
         9b:ca:ab:08:78:a6:40:b6:82:bd:50:1f:f5:b0:08:8e:06:ae:
         5a:1e:db:e9:75:35:31:b8:55:87:f0:cf:f7:a9:70:d1:7b:61:
         cf:7f:82:f6:d5:19:f2:25:cf:52:a7:0a:fa:de:23:7e:8b:31:
         52:99:c8:14:07:66:ec:55:d7:b1:e7:a4:82:2c:5f:51:88:b7:
         d5:7e:81:b2:e2:03:f1:81:35:a3:2b:b9:00:c6:0a:bc:ac:7f:
         a2:6a:a2:0d:4b:b7:4a:73:23:be:5f:ae:c6:e4:83:eb:51:01:
         e9:51:a3:90:5d:24:bd:cc:c4:ae:e9:43:35:0d:1d:39:67:cb:
         9b:6f:27:dc:80:58:62:91:e4:e0:7c:2f:17:68:cf:d1:86:bd:
         72:6c:fa:98:e4:c6:35:4a:5d:72:4c:09:b7:0a:cf:5a:75:68:
         9a:61:c8:f5:77:c8:aa:05:de:17:42:bb:2d:ae:a2:65:2c:90:
         90:e2:27:bd:1a:bf:e7:3c:f0:0c:ea:fb:b7:97:8c:70:02:6c:
         a8:df:31:8d:86:a3:be:79:a2:80:ef:78:0f:03:bf:c7:36:ed:
         fc:14:7c:39:81:8f:e9:d1:77:a4:74:c6:90:ae:19:1e:0e:63:
         70:41:61:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:40 2024 by rpki-client on console-ams.rpki-client.org