Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File:                     fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier:          vul0PqozBlNtCM927kSKKJgLryN+Z3hB6gU5CQOtLa8=
Subject key identifier:   CB:E3:BA:E5:04:42:53:FC:A3:68:58:1C:F0:5D:EE:15:DB:6A:0F:F9
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer:       /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial:       0193640EC91B02B7281A0581572647270502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number:          0B7D
Signing time:             Mon 25 Nov 2024 16:01:50 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:50 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:50 +0000
Files and hashes:         1: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: 5K5ejny82yt8vCT6rrcocQJdRS2HMgBq3TBHQOIuZcw=)
                          2: oZ1INSwPASNUcybiVBN-cNVE-y8.roa (hash: gtbg8HThshLolj+WAHhhWlqO5Wd9BlvutVf2ht+4lAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:c9:1b:02:b7:28:1a:05:81:57:26:47:27:05:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
        Validity
            Not Before: Nov 25 16:01:50 2024 GMT
            Not After : Nov 26 16:01:50 2024 GMT
        Subject: CN=cbe3bae5044253fca368581cf05dee15db6a0ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:10:2d:bf:5a:36:98:84:80:cf:f3:18:66:
                    77:56:b7:00:dd:b2:63:47:bb:fc:61:72:1e:94:03:
                    14:61:b0:1c:58:a6:d2:42:af:b9:f2:22:f1:5b:ac:
                    3e:26:e5:bf:f5:cf:2a:3a:05:67:9c:36:d5:fe:a7:
                    88:01:8c:9e:6e:7e:f9:cf:1e:66:97:c8:be:45:76:
                    f1:07:86:67:05:42:9f:15:f3:7d:36:a9:6a:42:8c:
                    59:00:d9:4e:4f:df:49:7a:47:a8:87:8a:79:c2:8e:
                    02:43:e6:42:f2:55:f6:df:ae:bd:b6:b5:1a:27:9c:
                    4e:f6:f5:f0:b4:80:39:4a:fe:b9:fa:71:c1:62:a2:
                    d8:44:ee:0c:fb:2b:de:61:31:b2:2c:e1:8e:cc:af:
                    0d:6a:e5:a2:0a:60:8d:c7:2a:bf:98:c5:5a:96:d6:
                    a1:22:7c:a6:1f:32:86:1f:fa:74:dd:2e:da:62:d8:
                    5e:01:f8:a7:94:0d:84:6c:4b:23:4d:00:8e:71:fb:
                    c1:6f:0e:a9:70:e2:ac:ab:8c:50:db:b7:79:61:e1:
                    15:47:c8:d1:76:ff:7d:11:00:2b:29:84:6f:c5:eb:
                    df:f6:35:96:e8:31:88:43:80:d3:28:81:ce:8c:7a:
                    a4:87:a1:45:a0:97:0d:c3:9a:7e:66:0f:18:e4:19:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E3:BA:E5:04:42:53:FC:A3:68:58:1C:F0:5D:EE:15:DB:6A:0F:F9
            X509v3 Authority Key Identifier:
                keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:76:57:46:48:d3:b2:dc:e9:15:81:30:ac:22:7a:22:79:
         26:e3:1b:59:16:88:88:51:c1:b3:37:18:ed:f8:9f:3d:5f:39:
         45:9a:16:f7:7c:71:2f:28:b2:e2:9d:ca:0b:39:0b:5c:5a:28:
         cf:15:d9:61:b1:d7:26:0d:e4:ae:d0:0e:d3:4d:0f:60:12:56:
         1e:ab:b7:79:13:f5:78:c3:9e:34:25:15:3c:54:64:9a:77:ca:
         84:73:84:07:db:7a:df:10:02:30:d7:b6:46:70:c3:b6:c8:79:
         e2:51:b3:87:f7:4d:63:3e:5e:82:59:d3:da:a4:74:7f:64:6a:
         e0:ef:1e:89:b1:e4:6d:cb:ec:cc:1e:85:bf:8d:7a:e6:0c:4a:
         01:8d:10:4e:b5:88:5a:35:66:88:34:e8:44:a8:cf:fa:94:41:
         53:b2:dc:a4:a7:f2:12:a7:ab:0c:a0:c2:ff:bf:f9:d5:96:2f:
         14:9c:7c:fa:16:ff:84:7e:59:02:f7:18:b0:06:96:93:84:b8:
         55:89:c7:13:bc:e0:1c:46:e9:20:6b:85:0b:b6:7a:ec:5c:7d:
         67:14:fa:f6:69:02:96:80:1c:34:7d:81:8d:34:53:28:6c:b4:
         ff:52:5a:56:af:33:9e:cb:49:a2:81:04:72:68:b6:9f:2e:35:
         03:7b:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:30:09 2024 by rpki-client on console-ams.rpki-client.org