Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File:                     gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier:          KMfRnxm0iUkYx76KpRnBzK/qcjJ2mL4suHbbuiyNxUM=
Subject key identifier:   CE:09:E7:89:01:DF:CC:2D:FF:53:5B:C0:7E:1E:C2:F6:A4:9B:1A:7D
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer:       /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial:       01936A7D927154BED266D00A9BB01273580C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number:          04D1
Signing time:             Tue 26 Nov 2024 22:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:34 +0000
Files and hashes:         1: GRNbZMBfAFiDLkFcN6v7R35hrwo.roa (hash: 5vwQrk2x9IoSmLDzGk+hloTm6HuCD43elte9r+/Hvuo=)
                          2: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: j/zj6AG9kNnhy283unUhJmxFeo6/PHED8/8xYHLrvLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:92:71:54:be:d2:66:d0:0a:9b:b0:12:73:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
        Validity
            Not Before: Nov 26 22:00:34 2024 GMT
            Not After : Nov 27 22:00:34 2024 GMT
        Subject: CN=ce09e78901dfcc2dff535bc07e1ec2f6a49b1a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a8:f2:ec:e5:87:06:72:4e:34:93:67:9f:64:
                    5f:37:50:51:c9:1b:77:f9:ba:20:d7:d0:61:d5:16:
                    92:3e:16:6a:a7:2a:b5:67:61:86:be:51:28:5a:69:
                    fc:1b:57:2d:e0:e2:4e:f3:d1:34:3f:88:f2:31:11:
                    3d:79:43:88:37:1d:5b:c4:a8:2f:34:78:3d:0d:63:
                    1d:a8:f5:92:fb:08:14:82:66:1f:9c:d9:fa:32:22:
                    ef:fb:b3:f0:9b:4e:12:f4:10:71:c9:9f:a2:32:79:
                    2c:32:fb:71:87:06:cd:50:31:0a:53:53:a3:3a:64:
                    8b:72:a2:ce:8f:07:ab:3b:bb:f9:24:ed:4e:60:cf:
                    ef:d8:71:ca:a6:3c:45:e5:46:dc:73:f0:87:7f:3d:
                    56:1a:47:b0:cc:2e:06:17:22:f8:5a:cc:da:a1:16:
                    39:56:4d:44:25:67:0b:40:af:f3:28:9c:8e:6c:a9:
                    99:45:b1:e2:73:6e:64:f9:17:02:df:ac:59:47:6f:
                    38:26:d5:d1:f2:1e:00:e6:55:71:b8:27:e4:97:85:
                    f8:92:02:65:81:ae:15:65:1b:8d:5d:65:5b:78:3f:
                    56:4f:dc:17:08:78:bc:56:82:90:26:9c:ed:20:a7:
                    6c:73:d1:8b:18:61:3b:92:af:aa:ae:52:62:8c:c2:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:09:E7:89:01:DF:CC:2D:FF:53:5B:C0:7E:1E:C2:F6:A4:9B:1A:7D
            X509v3 Authority Key Identifier:
                keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:85:44:82:ee:33:6c:53:ec:69:57:01:9a:30:22:54:06:
         9c:3d:71:aa:1a:f9:20:91:96:35:77:65:f4:6a:2e:cb:89:0d:
         bd:ea:d3:f9:5f:80:b1:bf:42:7c:9c:3e:97:00:2b:d6:ee:62:
         98:97:7a:8c:2c:be:a0:ea:c0:63:12:7c:7b:a4:06:65:b8:a6:
         7c:94:54:b1:ff:43:28:3a:48:9b:35:ee:ff:ce:10:0a:3d:20:
         68:dc:0a:c6:74:62:d3:3c:55:6f:c1:f9:32:5a:ed:97:78:c5:
         2f:74:ce:d1:ac:46:54:40:71:95:11:56:8a:13:bb:d1:ed:ec:
         02:07:c7:23:bd:20:b2:48:00:49:dd:80:08:1f:ca:6c:e3:89:
         9e:92:89:e3:50:51:10:f5:74:55:f8:f9:f2:c4:f7:05:cf:d5:
         a6:a0:31:a3:44:bc:4b:00:e3:a6:22:d0:d0:60:3f:62:74:0c:
         39:15:61:f4:c4:f5:f8:53:86:7e:0d:41:26:72:4c:af:b5:ea:
         1a:93:a3:8e:0b:6c:28:d6:43:6d:5a:8e:05:72:06:c8:5e:cd:
         11:e4:ca:1a:4b:b0:2e:68:ee:46:6b:e4:93:f7:5a:55:18:84:
         d3:93:31:6b:49:c0:47:08:e9:05:58:72:b3:fc:9c:66:43:6f:
         99:0a:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:21 2024 by rpki-client on console-ams.rpki-client.org