Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File:                     dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier:          isUJYfgWv9ECP5mQ8caN7khhIlxugj6r+9kMicyxp2M=
Subject key identifier:   0B:DC:D7:5A:C9:CE:8D:78:2A:01:8F:59:BE:A2:C3:9E:22:C9:D0:9E
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer:       /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial:       01936AB486A2761AB7E270FA0A0A16F0F898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number:          0742
Signing time:             Tue 26 Nov 2024 23:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:35 +0000
Files and hashes:         1: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: IKoc0PjQY2NMTTKXHYD2P5MwEDCAr+tDaTcdcs2Y9oM=)
                          2: vdxpz9a4s2iBaQufWBElAvEI2VA.roa (hash: kObLopjnnN65OWonitWDg9f7pzx7j+bzkK70rrCE7gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:86:a2:76:1a:b7:e2:70:fa:0a:0a:16:f0:f8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
        Validity
            Not Before: Nov 26 23:00:35 2024 GMT
            Not After : Nov 27 23:00:35 2024 GMT
        Subject: CN=0bdcd75ac9ce8d782a018f59bea2c39e22c9d09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:9c:d6:76:71:a8:4f:6a:2c:fc:f4:e1:27:
                    1e:f4:5c:46:d2:11:46:69:87:8d:8a:7c:f1:09:17:
                    c0:f7:85:2d:cb:98:fa:fb:d3:58:1c:80:8c:3c:36:
                    27:ae:64:c1:ec:98:21:eb:d0:24:4e:bb:2d:d6:b0:
                    7c:40:57:09:51:06:6b:5c:52:8c:5f:2d:c4:e0:f7:
                    f6:ad:ad:9a:9e:07:3e:df:99:7f:09:68:74:06:c2:
                    c3:21:9e:d0:ff:fe:1f:87:6f:a9:f7:07:98:81:70:
                    b7:fa:73:bf:6e:bb:2e:d0:33:7d:5f:69:48:b0:ce:
                    8d:2a:2b:f9:b2:84:12:93:64:8f:4d:82:72:9c:6a:
                    88:ad:d1:85:98:bf:4d:41:d2:59:d7:f3:9f:5b:0a:
                    43:26:cf:ba:68:89:11:11:f8:38:f9:69:45:46:40:
                    60:8c:2d:47:75:d5:34:b6:e3:49:b5:4f:1e:6f:0d:
                    97:24:9c:86:19:17:da:31:4b:3b:6a:8e:b6:e5:07:
                    79:8c:7f:38:c4:93:a7:14:b0:80:cd:61:3d:7c:c6:
                    74:b6:0b:d4:ac:3f:aa:f7:5f:9e:ab:5d:49:e2:62:
                    82:4f:8c:22:0d:a2:d1:78:7d:f1:e9:36:2f:9b:6f:
                    17:b7:52:6c:26:b5:28:2d:2c:53:e6:d5:b1:ca:f3:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DC:D7:5A:C9:CE:8D:78:2A:01:8F:59:BE:A2:C3:9E:22:C9:D0:9E
            X509v3 Authority Key Identifier:
                keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e3:0e:a4:38:52:74:09:e7:01:77:96:76:8d:2c:a6:9e:18:
         47:5a:85:db:a5:59:77:ad:91:d9:aa:93:c7:39:ea:48:0d:b3:
         81:db:a3:99:60:4b:56:fa:7b:51:eb:8b:00:be:44:76:b7:a2:
         ab:f9:95:57:13:0f:6b:41:27:4a:09:01:96:5a:48:97:46:64:
         95:ec:c7:39:da:de:c1:93:41:75:f8:8a:c1:d9:e3:84:a1:8a:
         75:a2:5d:67:0f:52:46:e4:41:56:fe:be:f8:60:2c:23:cc:07:
         ae:09:4f:c5:61:fc:2f:60:e0:c1:6b:4b:72:aa:26:d1:a4:44:
         71:19:06:55:07:51:aa:87:09:65:51:94:c5:dd:72:00:09:75:
         67:01:12:f1:41:ed:78:43:f5:4e:84:38:83:c1:5e:34:b2:b5:
         27:33:8a:2c:3a:53:42:2c:c3:c1:02:e6:21:46:43:c0:a1:6d:
         69:cc:19:2f:19:83:b9:e7:bd:87:f2:dd:e4:9a:4e:94:3b:52:
         c1:e2:64:be:9a:a3:60:9a:a6:19:ed:19:c2:88:a8:47:9e:20:
         39:7e:50:fa:06:6c:cd:34:52:ce:01:24:e7:22:de:b6:09:94:
         bd:f9:92:90:37:2a:c1:b4:41:dc:fd:0c:f6:53:e5:ae:8e:85:
         8c:bb:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:15:27 2024 by rpki-client on console-ams.rpki-client.org