Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File:                     PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier:          ae8RwJwJM3EGe4NHvMbQn2Gityq/flAadfOWldJCPz4=
Subject key identifier:   0C:7D:D2:D7:5A:8A:FB:BF:FC:E7:3E:E1:6A:25:9B:E9:F3:85:F8:D2
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer:       /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial:       019365FE0B662E3A7D7DE98AE6B99573DE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number:          0401
Signing time:             Tue 26 Nov 2024 01:02:48 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:48 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:48 +0000
Files and hashes:         1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: n9gRbs9caq+Mfd5S6isykDEUb1sm/b9gUCFL72Q3a1U=)
                          2: iNdwPl_S2mrmuCe0zg2vuvQ1yfs.roa (hash: 0ekT060M2CjB5qlgETix9D/ZTEXAPHvu9lHv6OO1W48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:0b:66:2e:3a:7d:7d:e9:8a:e6:b9:95:73:de:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
        Validity
            Not Before: Nov 26 01:02:48 2024 GMT
            Not After : Nov 27 01:02:48 2024 GMT
        Subject: CN=0c7dd2d75a8afbbffce73ee16a259be9f385f8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:a5:77:4e:98:c5:ef:56:e1:8c:48:c0:5e:
                    3d:3e:fb:08:6d:c4:02:f0:ee:07:49:49:31:2d:15:
                    57:09:45:64:dc:cd:19:5c:15:76:e9:18:7a:52:58:
                    ab:9b:d7:e8:4f:16:fd:65:82:d5:76:5c:d0:1e:5b:
                    68:45:77:76:81:36:fe:a6:69:2a:9b:ee:ab:34:d4:
                    70:7e:e8:0c:f1:1c:29:92:d9:6c:22:86:c2:2e:0b:
                    ac:65:27:da:b6:77:b5:09:b3:7a:56:ec:1b:e7:64:
                    25:ed:5f:64:3a:c7:fa:e1:67:2d:d4:6b:87:40:dc:
                    0f:fa:38:34:0f:dc:12:2b:a0:f6:88:59:73:29:f6:
                    d8:ee:9f:4b:62:e2:fa:64:08:28:38:37:fa:9d:f8:
                    cf:3f:aa:6a:54:8c:38:08:07:06:5e:21:02:44:3b:
                    6c:69:35:b2:9e:a5:f1:a3:9f:75:d4:86:a1:9e:bf:
                    42:2c:12:41:ed:d8:68:ad:33:29:93:13:61:c5:c5:
                    45:1e:71:5e:44:a9:33:39:a8:1d:f2:33:6b:b0:a5:
                    ed:01:ee:cb:ed:e6:58:d5:0b:f0:e4:fa:0a:48:80:
                    6e:ea:96:ed:3c:d6:f1:82:ff:be:1c:c8:fe:5f:5b:
                    26:1d:2f:b8:30:3b:1d:6a:3a:d6:68:e6:18:b3:fc:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:D2:D7:5A:8A:FB:BF:FC:E7:3E:E1:6A:25:9B:E9:F3:85:F8:D2
            X509v3 Authority Key Identifier:
                keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:85:4d:6e:60:9d:36:91:17:e2:94:f7:d7:5a:c3:98:d2:fb:
         2c:df:a8:e7:0e:6e:cc:49:11:5c:82:47:4b:dc:ef:d3:9e:65:
         59:d4:75:94:ae:e7:05:12:39:1b:6a:ce:69:73:73:d4:23:e5:
         d8:3c:2f:b3:9d:5b:9d:35:e1:7f:6f:4f:37:10:47:d8:d3:68:
         4b:cb:42:a5:a1:b4:2c:61:d3:1a:8f:e4:41:37:03:61:b0:9d:
         7b:19:e9:e5:ad:6b:4a:b6:04:d9:4e:07:c7:76:55:c6:41:fd:
         78:93:98:bc:26:04:87:80:59:94:4e:23:cc:78:4b:64:ec:ce:
         a9:95:25:0b:ff:3a:4a:c7:d7:c2:d7:37:23:2a:b4:d5:9a:d1:
         d3:c2:64:34:fb:8f:57:51:77:71:77:a7:4a:52:68:69:26:c5:
         61:f3:d7:76:67:e9:8a:6f:07:a3:45:27:da:2c:d4:11:75:15:
         ba:99:75:4b:49:df:ef:6d:6d:26:0f:7e:5b:f7:a1:d2:f1:ff:
         3f:a2:bd:ee:ea:20:32:1d:17:e1:50:61:82:7d:08:e8:6d:f5:
         bd:b9:35:f0:03:3d:e2:6e:76:1a:b8:4e:80:21:41:d7:59:c4:
         b6:78:9e:ba:d6:1f:0e:54:07:af:f8:9c:c6:47:29:ce:82:bd:
         a0:fa:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:54:27 2024 by rpki-client on console-ams.rpki-client.org