Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          OuLzl+nwsQIQpcVpvORYLbV4oWaKxPEWZ+QsIQzqSxM=
Subject key identifier:   52:00:F2:B7:B5:49:42:CF:14:F4:12:3D:A9:D3:60:0F:35:48:A9:B7
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       01938B1B649894D1387701BA509AE04B05BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          01AF
Signing time:             Tue 03 Dec 2024 06:00:48 +0000
Manifest this update:     Tue 03 Dec 2024 06:00:48 +0000
Manifest next update:     Wed 04 Dec 2024 06:00:48 +0000
Files and hashes:         1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: M8i8daUQAD5KP3BGmMC/q3+79z9vwHN38qcr5jMzG5I=)
                          2: mmYRY9oGgN8EWZJgDkcGwgUJ8LE.roa (hash: YLYi5rS9AUGsh0SpjvVOUGWVPYuQglMkRSYjWCWQZ/A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:1b:64:98:94:d1:38:77:01:ba:50:9a:e0:4b:05:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: Dec  3 06:00:48 2024 GMT
            Not After : Dec  4 06:00:48 2024 GMT
        Subject: CN=5200f2b7b54942cf14f4123da9d3600f3548a9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:66:71:63:ec:35:d7:66:60:0e:14:1a:1b:
                    8d:d7:2c:0a:ba:18:4f:cc:d3:4e:17:6a:6b:3c:a9:
                    ab:95:23:d2:d7:8a:c3:5b:da:64:23:ee:00:fa:32:
                    b8:bb:85:20:6d:29:b6:e3:b6:39:8c:34:a6:2e:d6:
                    5c:90:06:9f:0e:f1:a8:b9:b1:b6:02:c4:cb:5c:b7:
                    0c:8e:1f:a9:51:3f:f2:83:dc:63:26:9d:db:95:0d:
                    b9:f0:09:77:9c:59:d5:93:f2:7b:9f:fb:3c:ca:56:
                    e6:43:2c:ef:28:a9:ab:50:62:78:70:f6:ac:2d:a5:
                    03:18:cf:a3:f0:0f:eb:3c:5b:d6:2b:50:2d:d5:e8:
                    0e:35:a7:6b:d1:10:d4:13:f0:ce:87:c1:2b:44:25:
                    cf:ff:e1:ac:41:84:32:af:a2:e8:df:b3:7d:83:ea:
                    96:1b:f0:9d:86:4f:5b:f8:b8:57:5a:17:91:b1:a4:
                    ef:a0:01:dd:9c:f4:5a:4f:20:e3:dc:88:7d:eb:d5:
                    f2:f0:78:3b:88:5e:d5:60:65:4f:51:33:91:a2:ec:
                    8a:14:f1:d1:d4:9c:8e:55:a8:0a:68:f8:c1:57:8d:
                    cb:0f:ca:5b:d2:5c:02:fb:3e:2f:af:65:64:92:a8:
                    43:87:db:0f:0e:56:44:94:99:e3:95:db:29:6f:4a:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:F2:B7:B5:49:42:CF:14:F4:12:3D:A9:D3:60:0F:35:48:A9:B7
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:a7:f7:f7:a7:aa:68:16:92:07:58:85:f7:ce:92:22:19:
         9b:ad:dd:fd:30:be:f2:41:9c:d9:7f:10:3e:6d:73:74:76:08:
         f9:7a:4e:85:d3:4c:a6:ca:00:6a:af:6d:03:64:ef:dd:51:a5:
         cd:50:7c:b4:27:b8:27:06:9a:c8:ea:b1:8e:96:f9:35:c6:23:
         35:e8:62:1d:0e:74:62:52:8f:4e:12:e3:c5:bf:30:45:33:a0:
         7c:0b:1b:b8:b4:db:8b:29:c5:f8:5d:ea:b7:db:4a:fe:39:17:
         da:ed:d5:ec:1d:8b:99:ad:d2:65:16:27:88:19:8e:f3:c1:be:
         86:2b:af:d5:78:8c:f5:9f:ad:8f:1e:fd:83:a9:8e:d5:e9:3d:
         d7:94:6a:7f:47:a8:10:f8:6a:10:be:d1:5d:cf:f3:42:f5:11:
         c2:ab:b2:b2:77:bd:04:67:89:84:91:52:36:6e:06:e9:19:0b:
         77:d0:67:7e:17:39:e6:54:e0:29:37:10:20:86:f9:10:5b:35:
         2a:73:b5:32:2b:73:be:fb:ae:dd:6e:9d:49:d3:72:40:46:92:
         77:04:be:05:de:65:f9:b0:a3:d2:86:ae:69:6f:14:da:d0:67:
         bb:c8:50:09:1c:34:cd:2f:e7:97:b9:f5:28:46:52:5c:79:e0:
         3c:88:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:57:41 2024 by rpki-client on console-fra.rpki-client.org