Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
File:                     2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft (raw, json)
Hash identifier:          ovE8Ys8wkzhKc35y7mpeRfFuZSWnFXtoGEqyOD7VPnM=
Subject key identifier:   AF:E1:C3:DD:19:62:A6:1B:B2:CD:1D:70:FC:38:B3:10:45:30:FA:1E
Authority key identifier: D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E
Certificate issuer:       /CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
Certificate serial:       019355769697CE98A15B3D30DA77090361B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
Manifest number:          0AA7
Signing time:             Fri 22 Nov 2024 20:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:55 +0000
Files and hashes:         1: 2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl (hash: 2DosMxFX9Fh5c6umFvhOaa/KosgCtu7dfH+8f3+vQxU=)
                          2: DpyiQgQ9FdTG5s8YbeYxHyQxbOM.roa (hash: YoIx6oD1L1+W6DX16hCA9uHG0kfmePKoHXMxdCbW3dE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:96:97:ce:98:a1:5b:3d:30:da:77:09:03:61:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
        Validity
            Not Before: Nov 22 20:00:55 2024 GMT
            Not After : Nov 23 20:00:55 2024 GMT
        Subject: CN=afe1c3dd1962a61bb2cd1d70fc38b3104530fa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:11:37:03:47:b2:1e:5c:07:f5:8a:bd:af:
                    81:9e:c0:c6:f1:0e:f9:dd:1c:e9:11:88:67:f1:1b:
                    e4:34:26:2b:da:95:83:50:fc:31:3a:e0:aa:71:3a:
                    1f:80:a7:ae:ba:c4:ec:bc:39:f8:a3:41:6b:c3:66:
                    a3:96:13:ab:99:be:37:2d:a8:30:6d:0b:89:6d:39:
                    b8:3f:7f:c2:d7:af:61:94:98:b8:1c:22:0f:3e:a9:
                    f0:96:23:a6:4b:ba:c6:c2:91:dd:18:66:ee:a6:40:
                    29:cc:74:54:0b:14:dc:c6:de:7f:11:1e:88:ef:9d:
                    12:63:52:2f:0d:20:39:b1:2f:de:2e:f8:60:31:51:
                    82:77:10:ee:74:e4:ea:9f:f0:d6:ca:84:f7:ff:45:
                    76:6b:36:e6:79:28:28:1d:d1:b1:70:49:b2:c3:87:
                    d8:2c:95:08:22:18:d9:23:cc:26:08:a4:df:81:5c:
                    52:56:3e:90:76:45:42:18:5c:52:46:e5:34:35:b2:
                    79:62:9c:7a:45:8d:35:9f:63:ed:32:c2:0b:e5:ed:
                    d0:f3:cf:f5:bb:d5:0d:ea:f0:23:4e:69:25:ee:d7:
                    a7:95:ed:1f:07:1e:c5:83:6c:0c:8f:9e:59:70:66:
                    87:7d:77:8d:09:68:bb:45:62:2a:41:3d:b3:e8:3d:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E1:C3:DD:19:62:A6:1B:B2:CD:1D:70:FC:38:B3:10:45:30:FA:1E
            X509v3 Authority Key Identifier:
                keyid:D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3d:d6:b4:12:0b:1d:89:a4:c7:bc:07:86:a0:d7:63:a9:16:
         bc:3e:7c:78:72:d4:02:fd:c2:91:5c:f1:43:ae:00:05:4c:4c:
         3e:78:73:05:f6:88:51:ff:5e:9e:5c:74:5b:35:fa:f9:e7:b3:
         1a:3c:a9:1f:18:35:eb:17:b6:35:3d:37:c0:65:ad:0a:28:17:
         96:7f:94:b4:b5:a3:79:41:b2:8e:6f:70:ef:e8:01:fa:be:97:
         81:1a:74:30:30:de:ea:6a:7d:92:07:31:54:48:f9:8c:98:af:
         0c:7d:33:84:a7:1c:74:d4:ed:5c:f5:9c:83:95:d2:45:ba:cf:
         ff:c9:76:62:b1:95:16:1d:39:90:b3:b5:f2:ee:59:65:ed:d1:
         91:7f:32:17:a1:0e:78:97:9b:83:f5:e4:1e:4f:56:61:20:65:
         e3:59:11:71:0e:19:76:67:7f:71:ac:ce:f0:26:44:fb:e0:8c:
         24:80:be:c2:65:74:d9:9d:b5:16:a7:31:d5:7a:62:29:30:45:
         a8:43:d2:1d:47:e6:56:b9:da:8b:37:6c:18:ec:17:c5:2f:13:
         63:45:a8:e3:33:b0:3a:93:23:85:ca:d7:9d:12:94:df:67:a9:
         81:59:41:e1:6b:27:f3:79:fc:e7:c6:8a:7b:7c:5a:8d:c7:e6:
         de:5b:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:21 2024 by rpki-client on console-fra.rpki-client.org