Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File:                     DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier:          HtoJKGxnAbwXKkIm4rQHO95UGeDX99+1Z6ClpEUzuBQ=
Subject key identifier:   79:09:D1:C6:F5:7F:36:3B:47:B3:E7:DE:A4:AA:4A:CC:C2:8B:A3:34
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer:       /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial:       0193568AF89099D69ADAC0691862C20B6DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number:          07C8
Signing time:             Sat 23 Nov 2024 01:02:48 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:48 +0000
Files and hashes:         1: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: 852ZRpMvpiWL6/ushzGfAcBSijjtug8EK2Dq8ZjPVLA=)
                          2: bOo0DP4R5eyxf1YemKvR4H4t9Sc.roa (hash: ifX7tQcwdRBlZx+g8nO+U5LIrXueEFXh5/1xHkDCk4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:f8:90:99:d6:9a:da:c0:69:18:62:c2:0b:6d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
        Validity
            Not Before: Nov 23 01:02:48 2024 GMT
            Not After : Nov 24 01:02:48 2024 GMT
        Subject: CN=7909d1c6f57f363b47b3e7dea4aa4accc28ba334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:d2:2c:a4:18:87:22:ae:71:5a:75:24:f5:
                    1b:ab:44:d5:92:d2:d2:3d:23:12:d7:1a:f5:c6:82:
                    38:e4:06:59:d8:e6:61:f0:88:12:28:8e:54:8c:df:
                    b7:c8:98:44:17:63:48:aa:82:05:69:40:7c:70:8b:
                    14:5f:d3:fc:f7:69:1b:86:ba:20:47:22:9a:e0:10:
                    69:e3:98:36:87:57:5d:0f:ef:cc:87:6b:99:19:30:
                    d4:00:65:c0:04:af:d2:77:11:19:28:e4:da:68:84:
                    36:eb:81:24:88:54:20:8c:71:a5:90:e9:c3:fe:6e:
                    e6:f3:1f:22:c3:03:d1:4c:86:91:b1:86:c9:39:66:
                    71:5d:81:52:36:a9:2b:74:02:78:fd:e1:98:78:c0:
                    73:8c:b7:e3:02:91:cb:86:51:34:03:6c:cb:81:07:
                    9e:f5:21:8e:42:b1:94:2a:33:b6:fb:3e:4d:39:b0:
                    23:e7:a4:7b:4e:7d:12:3c:63:89:dc:c0:e6:e5:0b:
                    b4:4b:8f:b0:4a:71:fc:e1:13:13:d1:03:83:51:ae:
                    d7:0c:78:ab:97:fb:7d:15:53:dd:07:68:ca:13:75:
                    6c:0d:88:55:c1:d8:de:94:78:52:1d:91:be:ce:e0:
                    36:94:e3:0b:72:79:8c:94:d2:7a:df:0d:97:aa:23:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:09:D1:C6:F5:7F:36:3B:47:B3:E7:DE:A4:AA:4A:CC:C2:8B:A3:34
            X509v3 Authority Key Identifier:
                keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:17:87:0a:fc:13:88:3f:ef:48:6c:84:96:f7:7a:50:f7:ba:
         d0:29:a5:80:95:14:87:55:06:cb:66:12:42:83:2f:76:27:d2:
         0b:e8:4e:94:aa:a2:06:68:2c:91:2c:91:ec:e9:6e:a3:17:da:
         34:0c:3f:fc:2b:85:28:0b:2d:4b:9a:4d:58:9e:12:e0:dd:7d:
         cf:32:ff:5f:75:9a:0e:18:2e:01:02:a4:30:35:f9:a3:1a:0f:
         4a:d1:db:2a:e4:63:72:8e:f7:f4:c9:f3:29:e4:a0:60:60:50:
         7f:d4:50:35:57:00:ca:ad:78:57:15:be:d3:e5:2a:ca:60:c0:
         96:7d:53:d7:e4:94:84:21:06:06:ad:45:97:4c:1c:62:0d:b5:
         8f:ef:83:d4:4a:17:d4:23:33:0c:88:a8:51:8f:6a:c2:50:60:
         81:eb:8b:39:96:70:ea:a9:3b:0b:8b:cf:4c:de:8c:f8:70:d5:
         dc:30:a5:fb:6d:0b:29:85:05:bd:fa:d9:bb:75:c4:c6:d2:30:
         fe:cb:6f:c3:3b:34:09:ed:7f:5b:45:81:74:ce:31:71:0c:13:
         6a:ff:03:03:9a:68:e8:d0:39:8b:e8:1a:4a:ff:d4:4e:1d:87:
         49:a7:54:13:3b:2c:15:9b:1c:91:fc:17:2b:9d:76:5d:1d:af:
         a2:d6:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:12 2024 by rpki-client on console-fra.rpki-client.org