Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft
File:                     ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft (raw, json)
Hash identifier:          ZPpGJ1qGG0NhripMkd6q6b5hE2suXDhpDTAVF5NOSiE=
Subject key identifier:   12:26:74:2A:74:CF:BE:16:68:38:88:32:16:6B:8F:7A:8E:CD:8B:99
Authority key identifier: 75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3
Certificate issuer:       /CN=75d003bee173163d19a9927ab371221f95f10fd3
Certificate serial:       01901DEC45DEAA186F6E9C4A0BE4A4117090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft
Manifest number:          087D
Signing time:             Sat 15 Jun 2024 22:02:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:21 +0000
Files and hashes:         1: TncKO9usCM42zbHfNFl4UgZXciM.roa (hash: rGWWfBD7dB+lCBmTkjDxL1bq5W36FI9AxJB2wEAWy+8=)
                          2: ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl (hash: VKZXIQKlkFNEN0mn+wWdMet+VfjJkEYKTzzuClur/xg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:45:de:aa:18:6f:6e:9c:4a:0b:e4:a4:11:70:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d003bee173163d19a9927ab371221f95f10fd3
        Validity
            Not Before: Jun 15 22:02:21 2024 GMT
            Not After : Jun 16 22:02:21 2024 GMT
        Subject: CN=1226742a74cfbe1668388832166b8f7a8ecd8b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:3c:d5:1c:fa:eb:9a:48:d5:cc:57:0a:b4:
                    75:2a:e4:46:41:4c:6d:fc:d1:3d:e7:e8:1e:8b:f7:
                    44:75:ed:a0:74:c4:40:cb:a7:9c:e3:0a:31:b4:6c:
                    fd:a7:28:91:7d:86:35:d4:46:68:b3:c1:2a:54:36:
                    3f:ad:28:76:32:75:0a:c4:5c:50:79:1b:13:89:f4:
                    27:74:85:d9:40:65:ad:94:e6:a7:e0:9b:1f:19:66:
                    5b:4d:80:84:74:cd:4a:57:95:0b:3a:57:91:8a:3c:
                    20:95:c1:02:dc:1e:a4:af:37:70:20:e9:82:3d:bf:
                    24:cb:93:b7:60:a8:af:3a:37:57:95:89:6d:e8:e5:
                    20:60:ab:eb:38:18:15:93:d1:14:7a:23:31:25:5f:
                    36:d6:a3:18:b4:2c:69:63:32:24:da:02:92:74:2f:
                    fe:f8:92:0d:46:bd:95:7d:4a:61:87:df:5e:93:e1:
                    7f:46:f8:0b:b5:e5:ed:bb:8c:d5:db:d5:e6:24:dd:
                    1a:30:37:4b:bc:9c:0b:ef:b3:af:b9:39:51:c7:65:
                    a6:6f:ef:49:30:40:41:e7:61:bc:9f:5c:15:01:b4:
                    18:cc:89:c8:4c:f6:7b:4a:6a:8d:64:c7:33:d9:ba:
                    95:91:d1:00:1d:21:a0:1e:5a:d1:ba:28:1a:ed:08:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:74:2A:74:CF:BE:16:68:38:88:32:16:6B:8F:7A:8E:CD:8B:99
            X509v3 Authority Key Identifier:
                keyid:75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:56:1e:1a:50:ec:43:aa:47:78:bd:9a:73:39:9a:fb:08:ff:
         aa:29:7a:f2:c1:76:bd:6e:49:18:c2:f2:1a:ea:b1:9e:1b:d6:
         37:45:6c:68:66:46:54:2e:1f:32:12:c7:a0:68:b5:06:c0:3c:
         b5:e2:fc:26:ba:da:08:e9:10:9d:5f:c7:d6:b2:dd:69:b1:59:
         c7:35:0f:01:81:74:0a:f8:58:f4:6b:17:ac:ba:71:13:b3:bc:
         c2:ad:3a:16:4a:0d:21:bc:d8:70:0c:06:dc:ed:ce:36:c5:1a:
         34:76:92:3f:39:f9:08:15:89:ed:ae:97:59:c3:28:bc:b2:6e:
         4c:da:d3:63:66:d4:56:cc:11:89:6e:de:1a:84:b0:93:05:ba:
         99:88:57:65:fe:6b:47:3a:23:11:c4:79:dd:3a:0e:85:9f:0c:
         f2:79:8f:56:f3:0c:10:83:68:11:19:cb:77:ba:6a:45:99:75:
         ed:63:a1:58:d7:12:e4:6f:ae:41:b0:76:5a:1f:16:85:cd:75:
         3d:5d:16:38:6b:69:64:f5:c7:22:37:68:3c:ee:f1:93:bf:84:
         41:f2:ad:d6:27:2a:bc:0c:de:9a:84:1d:d9:e3:d1:c9:1f:9c:
         88:50:19:df:36:95:16:eb:dd:55:45:33:5e:48:79:5b:fa:fc:
         8f:dc:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:31 2024 by rpki-client on console-fra.rpki-client.org