Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File:                     M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier:          8iU6H1Zll6QPN/bUxKZf8cAxjxlNZ6SYqzxJXrHxmsA=
Subject key identifier:   D3:13:27:C4:32:0A:A6:98:73:29:BA:93:45:73:11:41:67:9A:F7:EC
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer:       /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial:       01935A6796DB2A245595EE6E04A9EF61D736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number:          0A53
Signing time:             Sat 23 Nov 2024 19:02:38 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:38 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:38 +0000
Files and hashes:         1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: SkHCddjgX3KfDH+uB5bzdesM2MYNAEOHrxNSAOgdXLo=)
                          2: kVAHh7vhGWIVKhfG8XAycKFL2JE.roa (hash: HyGb7+cQeklV2jhIUFgGuUTPLX+S5the2gKxwWmoI1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:96:db:2a:24:55:95:ee:6e:04:a9:ef:61:d7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
        Validity
            Not Before: Nov 23 19:02:38 2024 GMT
            Not After : Nov 24 19:02:38 2024 GMT
        Subject: CN=d31327c4320aa6987329ba9345731141679af7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:2d:cb:33:59:32:d1:8d:56:48:90:ed:59:
                    98:13:a0:01:93:6b:f8:6a:be:68:c7:06:c2:52:3b:
                    7b:4e:fc:da:cd:99:2c:da:ba:ba:69:dd:3c:65:c7:
                    e4:1a:2b:cd:8e:66:e2:30:a6:e1:ae:c9:a1:4e:c9:
                    59:e9:cc:c5:d8:7d:67:36:11:87:44:d8:83:1d:66:
                    97:cd:21:18:cb:23:52:66:26:58:2b:42:c9:d1:13:
                    fb:03:b0:b8:19:60:49:f8:71:28:ac:b7:22:99:66:
                    d0:34:94:4d:c7:8a:32:7c:7b:46:e5:94:e1:63:10:
                    85:4e:f3:25:b5:50:4d:7a:30:66:b9:89:f1:ef:8e:
                    fb:af:4b:ee:6a:1c:5b:41:88:a1:de:32:c1:a5:49:
                    0c:01:96:4e:5e:5a:53:8a:cd:41:34:13:31:91:f5:
                    be:96:09:8e:69:ae:4b:d7:ec:34:f8:87:1e:c4:b5:
                    37:f2:00:06:d5:4f:a2:1d:49:cd:53:d8:cb:76:e4:
                    b6:d5:cc:07:fe:17:d8:97:ee:5d:4c:50:05:ab:84:
                    94:93:a2:63:3d:18:1e:e1:7d:5b:f6:99:1d:7f:71:
                    a4:ac:4e:e6:fc:bb:53:58:63:ac:1f:a0:66:74:18:
                    06:09:db:52:ff:29:f4:e7:df:4c:e7:8e:49:c0:6e:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:27:C4:32:0A:A6:98:73:29:BA:93:45:73:11:41:67:9A:F7:EC
            X509v3 Authority Key Identifier:
                keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:16:89:c3:86:c6:3e:a0:a2:91:be:bc:3f:58:97:e5:0f:bc:
         92:81:82:ab:f3:11:13:c3:53:04:d7:a6:50:54:2b:2a:38:ff:
         e6:e3:63:11:94:5e:30:5d:e2:d2:76:f0:aa:5d:b3:7c:dd:e3:
         52:0d:1a:35:52:fc:ac:dc:2b:f3:a5:c5:8e:24:1c:ae:c4:f6:
         e7:f9:9b:a5:33:0b:a8:9a:63:9c:23:be:54:73:ec:d6:60:c4:
         c8:ce:a1:f6:fe:4c:c2:98:20:c1:4a:96:33:b1:13:48:62:9d:
         40:c4:25:fe:c5:0c:43:e5:2c:51:4e:af:f3:a6:c1:58:c3:d9:
         b2:d3:bc:e6:20:f8:39:6e:0b:02:41:5a:21:04:4f:61:68:14:
         4d:b7:4b:7d:06:90:8f:9f:7f:37:fa:82:b1:ab:15:ef:28:b9:
         ff:87:66:31:b0:2e:4d:3d:f6:ce:2e:f9:51:15:16:b0:e6:32:
         e3:12:06:87:39:d5:10:c1:83:e4:fb:be:97:43:35:f4:ff:35:
         08:fa:8a:1c:59:53:ba:01:d1:9b:1b:d1:4e:62:39:17:00:29:
         00:0b:f2:06:81:ff:45:7b:bb:37:b5:87:a2:e7:95:23:75:1d:
         8f:7e:8b:b2:6d:11:c3:d1:18:d4:ad:62:35:17:5b:c9:91:e1:
         93:e9:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:51 2024 by rpki-client on console-fra.rpki-client.org