Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File:                     DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier:          U/ctLHsOGuEo732g5O+WpBdq2UTyBQDnalqDh2Rwt2U=
Subject key identifier:   49:DB:8F:9A:B5:4C:04:C2:2E:59:94:F0:16:38:F6:60:DF:8E:47:C8
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer:       /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial:       01935764D590A0E8D59734DEA2771F4F5206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 05:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:46 +0000
Files and hashes:         1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: hovWeuaWpiuHBm9mVXjVAEu1JQvC6nFh9T5r8K8BdXU=)
                          2: SAEoiBnx1yT3ztOk-5cfD2JdBuY.roa (hash: icJuTUwJbwZGlsNa6r/yMYu5GVuBkng4g+d0J39KI3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:d5:90:a0:e8:d5:97:34:de:a2:77:1f:4f:52:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
        Validity
            Not Before: Nov 23 05:00:46 2024 GMT
            Not After : Nov 24 05:00:46 2024 GMT
        Subject: CN=49db8f9ab54c04c22e5994f01638f660df8e47c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:69:d5:5a:00:65:87:1d:42:cb:31:83:de:
                    52:4d:32:9f:fe:be:9d:44:33:e4:28:83:94:c6:c7:
                    20:24:e2:e3:2f:e3:a1:21:3e:29:2e:5a:3d:4e:56:
                    eb:10:35:1d:9e:1e:9b:c1:a7:55:6d:23:2f:cd:38:
                    5c:cc:8a:5d:dc:39:7c:26:38:6a:fb:e1:0f:53:07:
                    22:78:dd:39:5b:f5:24:8d:28:75:05:c5:fd:da:43:
                    a8:c1:27:6d:5e:e6:f5:17:ec:04:0e:02:19:90:bb:
                    fd:80:75:f9:1c:fb:b8:55:5c:6b:27:5b:91:29:18:
                    b1:46:7a:81:ff:d6:7a:ba:b1:57:2f:45:58:c8:21:
                    fc:05:a0:c8:89:59:79:56:63:43:b9:be:86:88:95:
                    57:04:d7:d9:0d:a5:9f:23:ae:c2:e5:c0:3e:3f:8d:
                    21:40:59:4b:ee:ac:e5:0a:a5:75:70:07:17:5d:1e:
                    c7:b1:1c:3b:58:7d:95:d3:34:27:f8:25:ae:f2:f6:
                    6f:5a:cf:ff:81:b6:52:67:fd:88:fd:96:68:19:2b:
                    96:03:c4:80:c1:92:5d:57:d3:b3:26:ef:50:19:55:
                    01:a2:0f:46:3d:a8:7c:6c:5b:52:8d:43:a3:ec:42:
                    0f:7c:0d:59:a7:e9:f0:b4:77:2b:d6:2d:b7:ca:63:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DB:8F:9A:B5:4C:04:C2:2E:59:94:F0:16:38:F6:60:DF:8E:47:C8
            X509v3 Authority Key Identifier:
                keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:95:65:e0:2b:24:72:9e:11:da:13:3d:69:f6:b0:9d:50:
         4a:5e:0a:7f:ce:f5:58:b3:d7:41:a6:70:ae:93:3c:e6:b6:42:
         05:65:05:9d:9f:f4:75:22:be:ca:4f:64:50:ab:41:c2:23:8d:
         32:7b:b1:67:eb:93:24:fd:cd:6b:a8:a6:0e:f5:68:22:07:9e:
         63:d1:55:36:88:cc:f1:e5:ab:05:07:23:f7:fb:77:be:a1:a6:
         14:96:57:3e:fe:18:a5:72:d1:c5:67:cc:c7:98:3a:c8:86:3f:
         8c:93:db:16:ba:42:8d:fa:5e:20:ed:67:3f:72:b3:9c:b3:cb:
         33:01:0a:23:b6:43:f0:59:a3:79:73:a1:f9:63:aa:eb:01:2e:
         9d:a7:db:8a:77:d4:9e:e1:60:1a:7b:f9:29:d0:cf:b0:71:2d:
         b4:ae:25:4a:0c:2c:36:92:89:c6:72:2b:c1:65:de:c4:cf:87:
         51:78:6f:11:77:9e:35:bc:4d:4d:dc:a1:24:93:8e:d2:e7:47:
         c8:aa:09:ee:2f:0b:8f:24:67:85:e2:3a:a5:5f:45:3d:16:89:
         8a:25:bf:3a:8b:0e:1f:69:44:17:97:b9:51:5a:78:37:54:f4:
         23:f4:9b:34:1c:0e:b3:21:b0:06:8b:1e:dc:8a:cd:eb:67:bb:
         97:6d:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:27 2024 by rpki-client on console-fra.rpki-client.org