Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft
File:                     gjBe4me-aOgrPV1pxO0GWy4jn-U.mft (raw, json)
Hash identifier:          JrSjZ2n8HuHXVxa6N3w/NU/T4qTOjFBBSENje7a1nIY=
Subject key identifier:   2D:BF:08:D6:49:BE:92:0B:87:87:16:E4:D8:59:3C:68:14:C2:F7:85
Authority key identifier: 82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5
Certificate issuer:       /CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
Certificate serial:       0193568B11ABCB7E8D8BF649CADE61795ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft
Manifest number:          0D32
Signing time:             Sat 23 Nov 2024 01:02:54 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:54 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:54 +0000
Files and hashes:         1: gDpmTZgnC2hLDNoK7ph1U51IevA.roa (hash: l0JQzTY+8s3yyR341nZe/QxXlGKm+RwhTEkA6sek5zw=)
                          2: gjBe4me-aOgrPV1pxO0GWy4jn-U.crl (hash: 0ZCdf7mfox7K3HLcdC5z9lnRSGX16OpjMvxDDgZJ/Sc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:11:ab:cb:7e:8d:8b:f6:49:ca:de:61:79:5a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
        Validity
            Not Before: Nov 23 01:02:54 2024 GMT
            Not After : Nov 24 01:02:54 2024 GMT
        Subject: CN=2dbf08d649be920b878716e4d8593c6814c2f785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:86:fb:a5:99:d9:62:1f:8d:f7:46:27:07:
                    cc:b1:19:29:25:5e:d7:07:24:00:c8:af:53:6c:dd:
                    9b:25:75:ec:98:58:bf:71:de:0c:19:ff:79:3a:f9:
                    20:e4:40:ea:f7:d1:29:45:f0:6b:52:50:07:0f:0f:
                    14:48:9a:a5:c5:4e:b8:be:59:be:f9:c2:53:de:a9:
                    dc:ec:c3:e2:4a:ac:20:3e:4c:76:91:8e:c9:c9:f0:
                    ae:15:aa:71:17:65:db:ed:79:8f:35:b4:33:f7:08:
                    94:1f:45:95:b7:4f:c3:54:ed:bb:10:24:b1:71:97:
                    25:24:2c:fb:59:66:71:5c:1d:b5:ed:54:57:2f:29:
                    9a:9d:59:11:46:22:41:a5:40:f5:d9:9f:75:38:8c:
                    b6:76:1f:a6:3e:10:ad:6e:f5:3f:6a:32:ea:90:73:
                    7b:95:0e:20:b3:be:e0:65:de:27:46:33:aa:ef:5a:
                    97:05:20:cf:52:67:f2:e8:3d:9c:25:e8:89:9b:6e:
                    c3:19:e9:f0:81:35:b3:f6:dd:12:2d:02:0f:7f:98:
                    c9:10:57:b0:12:f8:32:e8:bc:d7:9c:be:86:68:81:
                    f3:ca:64:32:50:57:f5:54:7c:bb:b8:d9:bb:82:7a:
                    67:58:0c:7e:7d:57:37:1f:19:b9:d5:74:3a:7e:0f:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:08:D6:49:BE:92:0B:87:87:16:E4:D8:59:3C:68:14:C2:F7:85
            X509v3 Authority Key Identifier:
                keyid:82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:01:61:76:b8:a3:42:37:af:a2:cc:40:86:76:15:65:e5:bc:
         db:74:d8:06:f1:75:e8:49:41:5b:19:d6:4c:18:2d:d4:b6:5e:
         f8:ea:e7:98:f8:fd:32:66:f9:25:57:7c:3c:95:7b:2c:8e:cb:
         3c:8b:11:14:9e:b2:fc:8a:d5:f5:c0:e3:c4:ed:2a:a7:84:fd:
         64:ba:45:22:d6:12:07:cb:23:a8:c2:2b:8e:3d:e3:f4:f1:18:
         9b:c2:07:ee:2f:5a:2e:a4:29:5f:6e:19:98:3e:3c:3b:6b:db:
         cf:c0:e0:fa:db:31:21:f6:4c:c4:25:ce:e1:b6:5e:d9:12:2e:
         59:fa:05:f9:cc:8d:b7:95:59:8b:03:a2:15:e5:fa:47:bd:03:
         1a:e5:df:3e:e6:e0:27:aa:b7:3e:d8:88:33:47:0d:f4:f6:b0:
         5d:85:b1:4b:c0:47:44:78:b7:2f:43:03:71:22:68:29:47:08:
         ef:8f:05:92:5a:bd:6d:d7:2d:a4:a7:a2:a5:de:93:06:00:a0:
         ca:14:2f:24:57:30:54:eb:e8:b4:c8:8d:e2:a3:91:08:0c:b9:
         1c:05:1c:92:fb:3a:fc:2d:31:9f:74:15:17:10:61:9d:86:ff:
         60:3d:00:a7:71:9b:f0:80:44:bc:4f:a8:7d:c1:47:93:17:c2:
         fa:4a:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:53 2024 by rpki-client on console-fra.rpki-client.org