Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File:                     d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier:          LnqNDUxd2dVpYvHEphxgKf+C7abUykyhy/hspyDsWO0=
Subject key identifier:   DA:30:DD:CF:80:DB:83:78:3D:92:E4:E8:3E:6F:30:58:0A:F0:03:6E
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer:       /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial:       019369D9600E3D19A7622828A017F100B6C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 19:01:13 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:13 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:13 +0000
Files and hashes:         1: d411kki9lFxs44QujWQtzScxM00.crl (hash: +XK5iZWCG5wutB3anlMel44X12qmjz7ZiqeGR/kDvRM=)
                          2: i105MaFe2cBwmm1c6uzctfNLUIM.roa (hash: EkMeJOIKk+JgwVc4LtdTu0F81IJdjUddm8jC4ArRfTk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:60:0e:3d:19:a7:62:28:28:a0:17:f1:00:b6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
        Validity
            Not Before: Nov 26 19:01:13 2024 GMT
            Not After : Nov 27 19:01:13 2024 GMT
        Subject: CN=da30ddcf80db83783d92e4e83e6f30580af0036e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:66:86:72:73:89:89:ac:ad:24:98:ad:52:
                    c9:e0:65:51:44:eb:dc:aa:eb:10:14:13:c4:74:99:
                    25:bb:e7:68:13:73:1c:24:81:7d:ff:b4:7b:9c:f6:
                    7d:2a:a8:61:9a:bc:34:5e:79:b3:34:8a:d7:1f:89:
                    c9:b6:96:2a:8c:5a:d8:b2:ef:e1:84:8a:ef:6e:f4:
                    5c:94:45:27:e9:b1:d6:91:7c:0c:18:e1:cc:56:2b:
                    9c:13:cc:22:fc:a6:54:e6:f3:03:85:25:78:43:06:
                    c5:5c:2d:2c:88:41:60:47:b1:83:84:8a:83:71:b5:
                    51:ff:70:83:5e:ac:11:92:64:19:5a:ce:f6:7f:8c:
                    4d:3e:67:01:90:fc:6b:c3:b7:d5:dd:99:ab:c2:80:
                    19:67:b7:c3:6c:c7:38:10:e7:d5:60:9f:7a:cc:7c:
                    a5:fb:50:84:57:14:09:da:0a:d3:bc:f9:3a:aa:28:
                    de:63:4a:d6:5e:85:f0:98:09:19:3d:1a:91:7c:14:
                    23:df:f0:97:05:80:54:d8:72:36:1d:1d:59:e1:ad:
                    7b:82:29:ad:7e:f8:d1:51:d7:e6:42:e6:d6:71:17:
                    b1:41:9e:bf:3b:5e:b9:0f:fd:b2:f5:0c:fc:05:13:
                    ff:02:06:23:7c:00:c0:62:08:76:ce:da:93:56:00:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:30:DD:CF:80:DB:83:78:3D:92:E4:E8:3E:6F:30:58:0A:F0:03:6E
            X509v3 Authority Key Identifier:
                keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:ae:44:0c:13:81:3a:1d:ae:b0:63:68:7c:90:b3:78:40:
         fc:61:55:0d:4d:e7:ca:a6:77:17:85:e7:73:e6:86:c1:32:2d:
         e2:64:46:6d:c0:b4:2f:0c:c9:34:4b:d9:10:9a:6a:23:02:2b:
         c6:b1:fe:98:af:6d:be:f9:dc:01:90:0e:c5:a9:48:cc:c1:e3:
         ea:7a:fe:ce:c2:af:96:46:63:39:d8:11:f3:fa:f1:c8:3e:91:
         1e:e7:ac:3e:0b:d0:60:6f:01:bd:35:f8:4f:14:e3:d1:25:eb:
         22:45:4e:dd:fc:3e:c3:e8:f8:53:9b:31:cc:7b:ef:50:c2:08:
         10:3b:66:3c:0b:21:2b:56:cf:70:db:5c:aa:5d:55:d1:2b:cc:
         e9:d9:17:00:d2:bf:2b:13:ef:83:25:1e:90:77:66:15:f3:c6:
         fe:5a:6a:36:39:08:36:e8:34:2d:21:9a:fb:6a:3d:e5:7f:f1:
         38:4d:54:99:70:26:b6:52:a7:94:4c:0b:7a:3d:79:a9:3d:f4:
         cb:47:dc:ff:e3:42:dc:8c:0f:80:ac:f1:08:7f:89:36:08:9d:
         29:42:c7:83:36:46:9b:43:fc:d7:76:9e:e6:2a:de:09:65:d0:
         b3:bc:9b:8d:b3:d5:71:11:eb:7e:28:1f:a6:34:7d:d6:74:52:
         a7:77:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:36 2024 by rpki-client on console-fra.rpki-client.org