Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File:                     ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier:          IfZkEsEd9grhJ7au0af6cMCsa/ulm/Ae4eMkia2LaOQ=
Subject key identifier:   A0:A8:7C:C5:D7:E7:37:C9:B6:E6:CA:78:0C:12:69:A3:27:E7:A6:2C
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer:       /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial:       0193519962F84297050B853C844D6762F8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 02:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:26 +0000
Files and hashes:         1: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: A5NQSfm6oD/9FNvGHZOInvm9FwZSd5BpB38IqAm48bY=)
                          2: eUdy7KWpufFzxsXNRQs3ciPIDnQ.roa (hash: mjXry/l0S1KWpNK5SlXku9zYS1c0IEG1+CP+Sh5Y0Y0=)
                          3: wbLK2otOAOyzqZHvZaDlxU_limI.roa (hash: jZG2FIe8Cqc3kMm6MvmUaKFRAVrURERRn8nYL8Ih564=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:62:f8:42:97:05:0b:85:3c:84:4d:67:62:f8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
        Validity
            Not Before: Nov 22 02:00:26 2024 GMT
            Not After : Nov 23 02:00:26 2024 GMT
        Subject: CN=a0a87cc5d7e737c9b6e6ca780c1269a327e7a62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:ab:ba:25:6d:66:ac:28:24:87:70:42:47:
                    ad:c8:6f:0f:d0:70:b3:36:3e:59:de:7d:26:1e:2a:
                    11:7b:a4:e8:4a:a0:b3:ca:b5:12:7a:5a:ee:af:19:
                    d7:05:4d:6b:75:a2:80:2e:84:70:58:a4:ae:3f:15:
                    4e:a7:61:bd:02:bb:aa:48:37:fe:1d:f0:c0:fa:96:
                    d1:b4:96:8b:f4:e8:c9:a5:76:7e:c1:bd:00:3f:5b:
                    cc:2d:cc:e5:a7:ce:41:36:9a:af:2e:5d:c9:38:27:
                    99:f0:eb:a3:f3:dd:89:f7:8b:e0:65:07:93:37:8f:
                    21:6f:71:11:5c:9e:2a:29:71:2c:7e:04:5f:c9:03:
                    ae:5f:df:27:07:0c:87:0d:7e:40:32:0c:11:c6:25:
                    d9:39:5d:96:9b:b9:f1:80:32:29:6f:75:8d:be:1f:
                    0e:36:8a:b4:44:dd:80:13:66:ca:77:13:53:71:9d:
                    7f:22:65:70:83:81:b6:7e:cb:12:2c:21:db:9b:95:
                    d6:a4:76:56:42:55:1f:36:52:1f:62:c7:5d:18:47:
                    dc:07:5d:b1:d4:34:54:67:58:19:7f:e2:00:4e:da:
                    21:b8:cd:9a:d9:f4:49:b3:1d:45:81:79:f2:96:ea:
                    82:c6:c2:d7:f5:b1:a3:4e:41:d4:10:51:f5:8e:34:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:7C:C5:D7:E7:37:C9:B6:E6:CA:78:0C:12:69:A3:27:E7:A6:2C
            X509v3 Authority Key Identifier:
                keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7b:6c:89:7c:f2:52:85:e3:64:20:27:ba:a4:53:ff:ac:7f:
         8d:13:eb:9a:d0:ae:bb:bc:d7:19:8f:50:cd:19:6b:ce:e9:0b:
         81:7f:f1:69:a4:c0:45:1f:b6:30:e3:c0:9d:4b:78:59:aa:f2:
         c9:98:38:20:c2:90:97:7a:be:eb:67:57:eb:68:73:04:ce:ef:
         6b:d2:65:8d:7d:ad:3f:b9:10:c5:a2:b5:46:2e:ee:24:cb:7f:
         74:2f:d3:e4:f0:91:2c:46:fa:02:72:94:e1:df:27:20:5a:b1:
         2b:db:39:ef:dd:6e:fd:d5:dc:63:32:c3:70:14:66:f0:fd:af:
         7b:34:c7:3a:1d:34:f3:3e:bf:82:56:d8:ae:b4:5c:39:5f:77:
         4b:75:69:9f:16:5a:0b:f9:26:66:e2:87:59:e5:96:60:c7:61:
         8f:d7:1d:28:e5:f9:06:13:83:aa:bd:de:b0:a7:93:20:b3:c4:
         b6:f7:7f:7d:0a:e0:a2:da:d1:d2:16:d3:e0:e7:7e:20:37:4a:
         ff:bd:6a:d3:16:91:d7:0f:51:f5:7d:81:80:e3:64:79:48:87:
         af:85:e4:33:87:ad:d1:a0:e2:2e:f6:78:c2:44:ad:a0:10:bc:
         9c:0a:d9:61:28:6e:64:9d:0d:7e:0c:64:95:f5:8c:f0:ff:86:
         03:4d:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:18 2024 by rpki-client on console-fra.rpki-client.org