Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File:                     M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier:          7cwPQFbPdV1W3ADaoYaW99a2fkH1VwTXDYv5gqTXsOU=
Subject key identifier:   2C:EA:8F:7B:87:76:37:E9:65:78:F4:D0:22:36:D7:AD:C5:5C:4A:11
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer:       /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial:       0193553FBD3F87B7953B6FAB2A1EF60685C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number:          0610
Signing time:             Fri 22 Nov 2024 19:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 19:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 19:01:00 +0000
Files and hashes:         1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: +dREl0pVz0S5ogowT0sYr7C3wMz1YucZRsZ13W8O1As=)
                          2: YNSRif6DEa8JsyzzEBR_MeiVv4I.roa (hash: ETJDg9On3wAQcHJZFZzKyHt1TpcbbbiGwD85tpermno=)
                          3: gi7z4kQnEDT4E-sqhpN3x_zqzsg.roa (hash: nhDpJKNF8O/htW/AIfy9n4YRcA1Nc7wNh9fFOk6c1wQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:bd:3f:87:b7:95:3b:6f:ab:2a:1e:f6:06:85:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
        Validity
            Not Before: Nov 22 19:01:00 2024 GMT
            Not After : Nov 23 19:01:00 2024 GMT
        Subject: CN=2cea8f7b877637e96578f4d02236d7adc55c4a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:c4:ae:63:bc:38:c8:9a:bc:b8:61:0f:fe:
                    79:65:a9:9c:7d:59:3e:70:84:d3:a8:e6:9a:3f:19:
                    ad:fb:6b:62:98:71:56:19:31:97:b3:1b:d9:bd:cc:
                    b6:c0:62:91:f4:f5:0f:9f:1f:90:06:eb:01:a6:a6:
                    2d:43:ee:c0:04:6e:b5:ff:90:d4:3f:c5:7b:13:e8:
                    f6:ee:97:40:06:7b:e5:45:e7:0a:a7:f2:2b:cc:43:
                    e9:fb:d9:0e:7e:f9:f1:b2:20:00:1d:44:ea:1f:40:
                    e1:00:43:d4:f0:f3:7b:0b:a0:a0:fc:08:15:a2:e1:
                    3c:dd:e0:22:1a:81:84:98:a8:3b:ec:f1:d1:5e:e8:
                    cc:da:ce:90:63:dc:84:53:a8:58:32:49:26:7a:5e:
                    42:14:02:49:f7:c0:ba:d2:4d:11:8e:82:ef:1f:39:
                    be:23:00:79:20:3d:ab:e4:16:e6:31:9d:aa:25:64:
                    e1:f6:b0:81:7a:2b:42:f5:3f:86:a1:a5:a9:1d:d4:
                    08:19:02:76:0c:f6:2a:8b:a1:8d:6b:b0:e0:57:a0:
                    a8:42:90:21:11:f6:d9:2a:9d:01:d5:77:1b:60:88:
                    2a:9f:29:c9:54:45:b9:b6:48:a4:36:f7:df:52:53:
                    9a:82:71:96:82:45:d6:9b:a6:39:47:c8:59:e4:16:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EA:8F:7B:87:76:37:E9:65:78:F4:D0:22:36:D7:AD:C5:5C:4A:11
            X509v3 Authority Key Identifier:
                keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:d4:ec:58:f0:83:16:1d:8f:2a:ab:6a:81:80:8f:73:1a:
         dd:7d:69:fe:84:24:6d:9f:a1:14:6e:be:9f:5a:c7:94:8c:b5:
         91:d9:4c:17:18:af:c6:e3:a8:5c:44:88:64:98:dd:9b:e4:bf:
         7f:49:1f:dc:dd:a3:56:15:8b:53:a1:20:82:60:44:52:ab:fa:
         65:a9:cc:2b:79:c7:fc:00:4a:0c:9d:5b:b3:38:8c:8b:07:d7:
         b7:b8:2b:2c:0c:8a:ff:51:f9:7c:07:7e:80:cf:e7:25:f0:ee:
         52:de:6a:41:a1:48:a0:0d:93:70:26:44:76:be:a1:56:b6:f4:
         88:20:aa:df:fa:13:3b:d8:43:2e:65:dd:da:94:4f:be:84:6a:
         68:a1:3d:da:d0:31:5d:76:cc:5d:4a:4d:69:b1:24:9b:f8:54:
         0a:f6:8a:5c:2a:f6:11:7d:a7:ae:42:04:4a:4a:c6:b3:75:8e:
         2a:c2:d4:5a:43:50:15:8b:a2:7a:f4:11:8f:a9:2a:66:6c:43:
         42:04:d8:72:6f:36:be:da:8c:79:b4:b0:b0:64:f8:ee:19:60:
         5d:f3:de:5d:7b:0e:0a:ff:ad:e3:09:a5:01:c5:a7:a8:be:fd:
         4d:7b:dd:4f:24:21:12:4b:7d:27:d5:18:f2:b4:65:57:a4:3f:
         4b:3d:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:49 2024 by rpki-client on console-fra.rpki-client.org