Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft
File:                     ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft (raw, json)
Hash identifier:          eo9uTOMdYdySRriGTlmjpPYDGOOCz6oLXo8MRjOil84=
Subject key identifier:   F1:68:85:C3:D9:6E:3D:CE:A8:B1:32:B5:EF:6B:5D:A9:72:BE:9B:4C
Authority key identifier: 75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3
Certificate issuer:       /CN=75d003bee173163d19a9927ab371221f95f10fd3
Certificate serial:       0193549A3A82873A1558E2A86430F6A31943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft
Manifest number:          0A27
Signing time:             Fri 22 Nov 2024 16:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:13 +0000
Files and hashes:         1: TncKO9usCM42zbHfNFl4UgZXciM.roa (hash: rGWWfBD7dB+lCBmTkjDxL1bq5W36FI9AxJB2wEAWy+8=)
                          2: ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl (hash: hSukAkTuXE+Son7UDYO22/pndGeQHeKnThUopd/RvVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:3a:82:87:3a:15:58:e2:a8:64:30:f6:a3:19:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d003bee173163d19a9927ab371221f95f10fd3
        Validity
            Not Before: Nov 22 16:00:13 2024 GMT
            Not After : Nov 23 16:00:13 2024 GMT
        Subject: CN=f16885c3d96e3dcea8b132b5ef6b5da972be9b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:b9:8c:ef:c5:32:35:39:41:f5:85:5a:25:
                    a8:18:df:f3:91:b1:32:1d:f2:d7:92:e7:f2:3c:f7:
                    2f:2d:36:54:79:28:44:8c:a9:9a:96:f0:72:7d:43:
                    7c:83:ae:ed:4c:ae:05:4c:d8:a1:52:af:e2:0a:2d:
                    3d:b8:a0:bd:0c:67:b1:b4:5d:f1:0c:69:a7:21:93:
                    63:dc:a0:94:cf:15:63:e4:69:84:4c:98:63:07:67:
                    8f:39:d9:69:98:fb:8e:5c:a6:bc:6c:a1:a5:7b:20:
                    2a:77:49:e6:d9:da:2c:2b:bb:be:0f:e1:09:e1:35:
                    3e:19:b7:9a:1a:1f:46:5e:e1:a4:80:57:b8:30:83:
                    fb:53:c8:3f:62:7e:92:b2:e1:3a:85:91:7a:66:c2:
                    ad:5a:13:02:80:e0:ac:7b:93:cc:52:fa:da:79:73:
                    3c:ae:15:61:a1:4e:34:43:12:27:ff:c8:f9:8e:d6:
                    2d:47:f0:0c:3d:65:15:35:8d:d9:cc:04:1c:a9:08:
                    67:2c:9b:8c:3e:ac:29:30:db:48:16:33:72:59:08:
                    26:e9:12:96:49:5b:68:9e:9a:a0:20:3b:0f:25:79:
                    e3:8e:ed:31:cd:6c:ef:b2:11:43:db:4f:f8:9a:ea:
                    b2:7f:6f:3f:dc:ce:4e:32:23:24:0f:54:21:11:7f:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:68:85:C3:D9:6E:3D:CE:A8:B1:32:B5:EF:6B:5D:A9:72:BE:9B:4C
            X509v3 Authority Key Identifier:
                keyid:75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:81:1c:17:ef:43:9f:a4:f6:6a:ce:3b:4a:60:9e:14:e6:07:
         cc:47:22:96:85:77:34:66:44:71:92:93:9d:01:83:18:0d:78:
         7e:18:ed:44:88:7d:c6:12:f4:34:01:13:dc:af:e3:b1:ad:bf:
         12:35:6b:c3:4a:83:62:56:b7:3c:75:2f:37:fb:7b:c4:32:d9:
         fb:01:22:7b:e2:4d:6b:d0:8a:74:40:3b:d7:5c:a4:68:ce:4c:
         44:c0:8b:ff:8b:5a:75:bb:e3:be:8a:85:10:27:56:29:d0:ad:
         12:41:c6:f5:cf:f3:53:0c:b8:c4:1b:00:b9:9e:ae:46:96:82:
         15:0c:12:17:a5:ef:c4:bf:d5:86:2a:64:37:e7:cb:8f:2e:52:
         62:d4:d0:4e:4b:17:bf:62:fb:8e:0a:de:fd:9b:d1:87:fd:e5:
         d8:9f:7e:72:13:de:e1:72:8f:01:56:54:6d:39:a7:72:84:5c:
         a6:9f:8d:63:a6:ea:8f:37:03:dd:63:19:f0:f4:94:27:bb:c2:
         ff:96:66:eb:b8:4d:1d:71:4a:e2:e6:fa:cf:57:09:f8:84:f4:
         38:35:d3:6e:da:f7:38:31:69:f3:97:d9:a1:be:e2:3c:e7:c4:
         dc:3d:37:9a:bf:4d:9a:a3:6d:66:9f:02:b9:2d:47:68:05:ca:
         4a:e5:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:05 2024 by rpki-client on console-ams.rpki-client.org