Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          ZDY/jVLUnosp/wCKlddAHVynxyw+OSZUoSKk2UIzpHE=
Subject key identifier:   2B:5E:98:67:AF:3B:F8:12:79:04:81:87:9D:4B:77:99:CA:A8:50:EA
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       019352AD5F77E8CF5CEA720FDA60B3E95CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          12A3
Signing time:             Fri 22 Nov 2024 07:01:53 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:53 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:53 +0000
Files and hashes:         1: 9SD_lHNsufPrZnV2B1n1wYgxnpk.roa (hash: Wbn5FtqIzyX5GZwgenOx6f+JCWxCxy1oGfKLF43I6UE=)
                          2: T5SEnwBuBQb72U9_oVbg1JJ15ME.roa (hash: 3HXhjhvPZ+StT6dDnUkH+AIfo45pXPN31p7TVjPlK9g=)
                          3: dMjq98dTYAsqAmh0Bv3tDdzXDF8.roa (hash: TzmFyNIfLyzEhn0tWQ52LRXyRo7dHAJXpwF6CDYk7GY=)
                          4: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: 84VQSelCH4m0PZN/LUAFSIKqi0V4A1DkmY9EzVa7TEU=)
                          5: xDsz_EXiCuxqXinIhJm8wZBpNRo.roa (hash: 5ALLZjxS8p6i9HKiTMp9NvHlxTqJHFYm1JKbeypM0BE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:5f:77:e8:cf:5c:ea:72:0f:da:60:b3:e9:5c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Nov 22 07:01:53 2024 GMT
            Not After : Nov 23 07:01:53 2024 GMT
        Subject: CN=2b5e9867af3bf812790481879d4b7799caa850ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:11:61:61:bb:51:20:37:58:b1:4b:91:39:
                    63:37:7a:8d:34:99:b3:63:d5:fd:fc:10:c0:81:5b:
                    fa:e4:66:5e:95:71:f4:54:4a:55:f7:0c:fc:6c:96:
                    34:6f:49:af:32:ed:b8:96:98:c6:fc:61:cc:3d:a7:
                    9a:b8:45:89:e3:31:12:57:41:aa:34:ce:e0:4c:78:
                    8c:29:d8:f6:62:63:08:d8:6b:cc:2d:4c:fc:7f:b7:
                    db:ff:23:23:27:1b:e1:cc:1e:9b:43:a5:69:96:bc:
                    26:c0:d2:6c:f1:d2:6c:48:95:2f:e6:78:1f:4c:c5:
                    cb:bb:20:89:aa:e4:b8:bc:76:cb:3f:78:00:50:7b:
                    0b:1a:29:f8:fb:37:79:33:bd:5f:f5:49:78:bb:d5:
                    e2:03:ea:9e:b8:24:92:28:8c:c7:c0:9f:50:ca:55:
                    88:dc:95:f1:75:53:ae:73:92:d1:3c:05:31:ea:72:
                    1b:06:05:ae:57:6f:20:d3:84:cc:ad:cd:62:b7:a1:
                    c8:eb:8f:f5:01:bd:95:34:68:af:d3:c0:7c:c5:29:
                    a1:40:b5:33:14:28:07:98:71:38:fa:77:3e:6c:f0:
                    ce:8b:22:ee:0a:4e:21:33:f7:c0:64:54:4a:32:5b:
                    4c:39:1b:39:79:b3:41:b1:2d:e2:6b:10:e5:d1:3c:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5E:98:67:AF:3B:F8:12:79:04:81:87:9D:4B:77:99:CA:A8:50:EA
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:78:17:68:38:c6:61:6b:85:b0:67:19:e8:e8:34:17:ca:
         be:70:7f:91:e0:28:bf:36:bd:ae:46:f0:11:e1:89:ed:8b:61:
         38:45:4c:62:1b:27:54:4f:e9:7f:d8:00:e2:48:39:6c:d1:c1:
         3d:29:03:be:87:4c:8c:c7:f6:37:64:85:e2:4d:12:9f:19:1a:
         ad:0c:5a:eb:3a:e5:c1:0a:34:55:56:57:43:eb:f6:e6:b3:68:
         68:b9:53:a0:67:b2:a8:2b:74:8c:bd:c0:5e:11:c5:9a:40:18:
         8c:ce:d7:9f:20:94:7f:2f:b1:ce:fa:0b:6a:82:e6:06:11:76:
         c1:1f:7e:08:bc:b9:06:a4:56:f7:5e:26:91:c9:9f:35:65:3c:
         64:d4:6b:73:5b:e1:85:8b:16:bc:d3:2b:c3:ee:d1:b7:87:38:
         41:63:dc:51:f2:05:be:4e:e5:d3:3f:cc:08:1a:43:e3:5e:bd:
         e1:c7:b3:7a:98:f9:0a:dd:54:90:ce:89:9e:3c:da:8c:3f:95:
         63:8d:5c:86:dd:45:40:fa:04:e1:2c:c9:e7:16:c2:52:3d:fc:
         55:5f:e1:b1:5d:37:c0:ef:c0:41:c2:80:72:c4:61:73:f3:f8:
         fa:26:dd:20:2f:be:8e:0e:90:8e:72:97:5c:5a:2e:f3:fb:7b:
         c7:1b:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:53 2024 by rpki-client on console-ams.rpki-client.org