Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File:                     RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier:          /2oypKCqrIqn17q63AohFjyc31/6acIzR3JGXG48RDI=
Subject key identifier:   20:5F:A2:F4:38:E9:82:FA:92:A0:0E:89:D8:8A:FA:7B:91:9E:A6:66
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer:       /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial:       01935878FF52644ADF57DEF4C0EB54582459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number:          0800
Signing time:             Sat 23 Nov 2024 10:02:24 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:24 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:24 +0000
Files and hashes:         1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: c8u7Lgg6sw+HjDfQ6garGS/HkFUDEZliAdl4sCQer0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:ff:52:64:4a:df:57:de:f4:c0:eb:54:58:24:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
        Validity
            Not Before: Nov 23 10:02:24 2024 GMT
            Not After : Nov 24 10:02:24 2024 GMT
        Subject: CN=205fa2f438e982fa92a00e89d88afa7b919ea666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:7a:0f:e1:23:ef:1c:78:58:43:6c:ba:56:
                    97:04:0a:29:8f:a9:a7:f0:a1:93:c8:6c:94:40:85:
                    76:33:5c:59:d9:74:0d:08:d3:bd:67:09:7e:55:89:
                    85:04:b5:5c:d3:45:c5:eb:6b:f8:a2:d5:48:3c:d4:
                    4d:fe:ae:2c:51:a5:61:99:4c:b3:05:ff:22:ab:e3:
                    72:77:72:1b:56:e5:2a:d9:29:0e:75:b4:e7:11:83:
                    a1:8c:05:b6:28:7c:7f:51:54:1b:a3:54:ff:63:94:
                    aa:24:52:15:5a:98:f2:0f:27:5d:bb:4b:7b:38:56:
                    84:55:2e:b6:34:bd:64:65:82:0e:a7:8e:a6:66:01:
                    22:05:c3:c0:93:33:14:f8:5c:f9:fe:84:f9:cc:30:
                    1f:ba:08:d4:6d:b2:20:1a:6f:d3:ee:36:51:9d:a1:
                    c7:51:66:85:0b:b9:f0:36:8d:07:9c:7d:d9:3d:2e:
                    39:d4:8d:ac:db:f2:aa:37:a4:05:b9:bc:67:8d:91:
                    07:68:74:25:21:e6:4b:52:a8:52:72:9a:4d:8d:4d:
                    d9:b0:2a:51:70:87:7a:25:5e:f2:11:06:8d:ea:2f:
                    c6:f7:7b:3c:c6:7b:e8:3e:b8:13:0a:6f:19:96:71:
                    7f:6e:19:89:ba:f5:27:68:c0:86:41:2f:8f:7a:4a:
                    27:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:A2:F4:38:E9:82:FA:92:A0:0E:89:D8:8A:FA:7B:91:9E:A6:66
            X509v3 Authority Key Identifier:
                keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c2:50:2c:33:45:fb:7a:39:5d:cf:79:bf:a2:10:b7:fb:5e:
         cf:40:84:27:03:a4:22:e1:76:d5:1c:00:b5:9d:c7:8d:23:96:
         55:59:d3:5b:ee:23:76:75:08:a0:0e:37:f0:a4:58:70:2d:f3:
         1f:6d:70:44:20:00:0a:d1:ef:d8:69:94:57:db:ce:30:ad:55:
         6b:42:f5:a4:2e:36:90:e9:50:00:fc:40:83:37:25:59:f4:e6:
         cb:64:9d:ca:c1:0d:d5:1a:b2:0f:f1:7e:b2:28:ae:72:6c:a7:
         4a:2e:c7:d7:44:42:fe:6f:2d:70:f0:38:34:51:e3:7e:33:d8:
         90:75:43:76:44:1d:dd:2a:06:18:a3:1f:d0:6f:49:9d:3d:7f:
         b1:23:95:47:17:e1:e2:3b:e1:73:63:ea:38:fa:49:f1:2d:e2:
         ef:4c:7d:97:da:97:9a:59:fa:77:84:f1:13:2d:39:d6:7b:04:
         4f:01:12:6e:35:46:75:b8:23:d4:f3:7e:c7:2e:d6:c3:d6:50:
         73:7c:4c:00:28:69:55:d3:2c:ad:c7:eb:7e:a3:90:2b:e1:5c:
         fe:1a:97:9c:f6:dd:b9:82:3d:fd:a9:4c:f3:bd:6d:82:b9:5d:
         70:82:9f:8a:00:58:17:45:fa:2e:40:6d:90:76:89:af:3b:51:
         70:5e:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:33 2024 by rpki-client on console-fra.rpki-client.org