Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File:                     grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier:          Y7LsDZaGQ/90cUMKo+t2nOcUHAgU6+lnOu8+bvd1Zog=
Subject key identifier:   E2:D6:FF:15:AE:67:A0:4F:18:5C:37:8A:7A:26:DF:1F:F2:D9:EB:74
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer:       /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial:       019355765A9A2830FA06406A38C866D182F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number:          08E2
Signing time:             Fri 22 Nov 2024 20:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:39 +0000
Files and hashes:         1: g3Dr2s6u4fG-JfVzbUaHwl6mFbE.roa (hash: 7krFnhvS4MKtEHiyR9hzOGZU/pzFbZtiUqRySJYKp3g=)
                          2: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: DmZMNgFSk275dbOskCxWhWcvUg6+W9Dnqt79bB1uL00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:5a:9a:28:30:fa:06:40:6a:38:c8:66:d1:82:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
        Validity
            Not Before: Nov 22 20:00:39 2024 GMT
            Not After : Nov 23 20:00:39 2024 GMT
        Subject: CN=e2d6ff15ae67a04f185c378a7a26df1ff2d9eb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:d9:40:6e:49:84:a2:0b:74:b6:fd:c1:c6:
                    32:73:1d:bb:76:ad:ce:e3:8e:25:0a:57:5c:1e:1d:
                    27:5f:da:20:cd:3a:2a:d0:8b:d5:5c:db:b3:61:48:
                    30:a7:4e:9e:af:ef:ac:c7:a1:85:9c:c0:d7:98:71:
                    66:36:70:f1:7d:be:e9:2f:6a:25:c4:b3:01:44:7d:
                    0f:03:08:af:3d:26:20:45:ac:4d:da:e6:e4:78:f1:
                    5c:1a:58:6e:62:cd:5d:14:0e:db:da:fd:28:8d:47:
                    98:c4:56:71:73:4a:26:1d:80:2f:70:17:89:37:24:
                    ba:a8:0b:5b:b0:17:a9:e4:96:b9:c8:dd:55:6b:f4:
                    f1:60:7f:9a:ca:02:8a:e5:f4:55:7e:2f:c2:3c:c6:
                    78:3b:03:ac:ca:7b:57:23:b5:1a:c5:f7:f9:8e:51:
                    82:c6:e3:17:c5:cb:83:7c:8f:e7:ba:8b:44:86:66:
                    c3:1a:6c:43:83:39:4d:c4:38:5a:df:34:21:b0:88:
                    2d:89:ce:ce:05:38:38:63:ad:53:ca:96:75:39:6f:
                    93:cb:73:81:cb:35:a4:7b:2d:60:4f:e1:6e:ed:e3:
                    c3:2e:f0:6f:74:8a:65:e4:3d:a3:f6:49:af:26:9b:
                    d9:8d:3f:d1:68:de:d5:47:77:f9:38:a1:bf:77:2c:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D6:FF:15:AE:67:A0:4F:18:5C:37:8A:7A:26:DF:1F:F2:D9:EB:74
            X509v3 Authority Key Identifier:
                keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:25:8a:53:b1:e0:e0:65:82:68:6d:a3:7a:59:9f:89:d9:e7:
         66:83:c7:26:15:e9:27:6f:60:4f:d6:2a:d9:ea:b6:7d:51:15:
         2a:4b:3d:1e:c4:07:6a:35:93:ba:69:54:2d:02:88:43:3f:43:
         7b:54:97:19:73:02:52:ed:bf:ab:d6:d0:71:90:b3:8e:48:4a:
         cb:5a:2d:e4:70:4e:d4:f8:3e:f3:7b:06:0e:a7:bc:7c:ce:62:
         5e:30:95:62:a7:22:24:b9:37:2c:26:3c:85:83:2a:b6:ff:94:
         11:ea:98:d3:83:03:86:dd:83:81:ae:31:e1:32:58:a5:03:45:
         28:a5:b8:6e:ed:6d:52:63:db:90:46:47:ec:f8:fc:c9:b3:ed:
         03:93:31:a0:1c:64:73:04:cc:97:a3:11:b7:9c:d4:73:bd:cf:
         1c:68:72:af:42:99:87:ce:dc:ad:4c:37:59:24:95:d6:e0:3f:
         9b:ca:3a:8f:cc:70:07:7e:63:aa:87:57:f6:c3:de:e4:e8:cf:
         e8:00:04:f5:6a:12:a5:28:f8:ec:2d:1a:e2:6f:c8:0f:a3:8f:
         69:b3:30:5a:cd:42:d1:52:b6:6e:ca:23:e2:27:9a:6a:2c:7a:
         0f:a4:a8:48:05:f2:94:ee:77:4f:62:5b:07:9f:88:d2:d2:29:
         ff:5a:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:08 2024 by rpki-client on console-fra.rpki-client.org