Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File:                     dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier:          3F7XRv+u1M55oLuVqkvDqe+miob+1kJ3P/hGoszWvfM=
Subject key identifier:   33:45:D3:51:06:98:DB:B4:7D:74:7E:9D:53:1C:AC:2A:44:40:92:42
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer:       /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial:       019355E47C9B1985E4E58A0D56109085BD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number:          01DC
Signing time:             Fri 22 Nov 2024 22:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:57 +0000
Files and hashes:         1: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: nadoCTx98IQ8YJCo2dQPF6QQbsoqQKb3qqVEpdAyA/A=)
                          2: wv3F4MbyXPoA7m84oaMfnBqFN2A.roa (hash: K9gKYg4Hy2FQXO/4QsDi50L6663tp9SgINKN2m+cLAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:7c:9b:19:85:e4:e5:8a:0d:56:10:90:85:bd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
        Validity
            Not Before: Nov 22 22:00:57 2024 GMT
            Not After : Nov 23 22:00:57 2024 GMT
        Subject: CN=3345d3510698dbb47d747e9d531cac2a44409242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:17:22:4e:ea:2c:26:28:9b:77:0c:02:33:
                    0f:69:68:f8:d6:c8:78:1e:0e:c4:f2:b9:1f:02:d3:
                    79:cc:1b:93:fc:03:b6:56:0a:7d:44:22:93:b1:d6:
                    c9:29:6c:2b:eb:e6:d2:b7:c3:a5:64:ff:87:fd:03:
                    2d:ad:8d:9e:08:0f:a1:2f:92:84:51:b4:6c:54:5c:
                    07:36:f7:5d:a3:3c:6c:1c:29:cb:b5:b8:d6:8f:f9:
                    19:9e:3b:ce:ce:e7:00:57:e9:25:4d:d4:a9:98:e9:
                    ba:6f:26:fb:13:20:b8:11:ac:c3:96:e2:b5:2a:0b:
                    5b:4f:e9:5e:68:29:30:7c:43:d7:4e:33:ed:ee:24:
                    18:70:44:7d:3c:e1:59:0c:6b:54:2d:d1:cb:d2:90:
                    59:a0:8b:eb:34:aa:b4:6a:42:d4:9b:bf:46:a7:57:
                    ab:b7:06:26:b5:69:0f:b9:d5:8a:44:ea:06:09:04:
                    33:f3:85:a6:c6:0a:25:4a:50:9f:3f:68:f2:6f:6e:
                    bc:eb:8a:14:b4:ed:5f:83:33:e1:aa:a8:58:df:34:
                    44:2d:83:09:4e:77:96:b4:ef:1c:3c:dd:97:9b:98:
                    34:76:fc:27:4e:ce:e6:f4:7f:ab:e8:0f:fb:ca:7a:
                    22:0f:c9:fe:fb:51:6a:ce:f5:02:e7:2c:f1:93:c9:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:45:D3:51:06:98:DB:B4:7D:74:7E:9D:53:1C:AC:2A:44:40:92:42
            X509v3 Authority Key Identifier:
                keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:22:01:05:3d:c3:d3:85:04:ef:f7:d8:59:7e:b3:3e:0d:78:
         3d:69:57:01:19:4e:39:45:9a:ce:a9:4c:e2:f3:23:60:70:b5:
         95:e4:79:ab:24:ec:9d:6c:8e:81:83:d3:8a:bc:bf:7a:39:c4:
         e4:f4:e3:cd:86:dc:cb:1d:37:35:02:25:f6:6f:86:78:bc:5d:
         da:77:8b:3d:ff:9a:f7:26:0c:c2:78:ee:ac:6b:66:60:52:51:
         13:ec:74:8f:1c:50:09:a7:c5:4b:a9:8d:29:3b:0b:51:2a:e3:
         58:22:29:c1:64:f9:cb:52:e1:e9:63:7a:a0:31:15:3d:2f:22:
         14:68:3a:5a:96:86:95:05:4a:da:ce:79:d9:1d:76:40:84:dc:
         58:27:b5:c2:2a:ee:17:44:79:d0:5e:57:de:42:b8:67:a1:f1:
         f6:1a:43:78:cb:21:6e:12:67:d9:47:27:d0:2e:1a:01:2b:74:
         96:7a:51:85:0a:21:00:af:d9:56:17:71:92:bb:52:ff:72:1b:
         1f:ae:ac:c0:f5:60:40:15:83:27:38:03:9a:66:3e:6d:18:8c:
         04:66:5b:45:e7:55:78:b0:62:30:63:2e:d9:25:62:83:d2:7b:
         4e:95:29:b8:76:89:02:02:75:27:80:1d:8e:7f:2e:ee:84:8f:
         2a:34:c7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:29 2024 by rpki-client on console-ams.rpki-client.org