Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File:                     0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier:          D0CkASPXAJ5b+ehbzTXL4dAINAEab2MvkkNmGI7PxEo=
Subject key identifier:   F4:C5:CF:6D:95:CC:32:D9:9F:BD:D7:92:E0:08:8A:CC:43:E0:6A:B2
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer:       /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial:       01936AB46F493F7781BA33E4B54BD42CE778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number:          0211
Signing time:             Tue 26 Nov 2024 23:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:29 +0000
Files and hashes:         1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: MfSrs4WBDvJ4ty0nZTgXprrtdq94wZk8sIqlGFvs5SE=)
                          2: ruKYfofeZOzJmPqnwGm6D75whrg.roa (hash: yB9e6rj9cz6KeAkU544z2N4/13zKw2qEgUqs7AQCAzE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:6f:49:3f:77:81:ba:33:e4:b5:4b:d4:2c:e7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
        Validity
            Not Before: Nov 26 23:00:29 2024 GMT
            Not After : Nov 27 23:00:29 2024 GMT
        Subject: CN=f4c5cf6d95cc32d99fbdd792e0088acc43e06ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:17:77:41:ad:a0:6d:e3:a4:6d:4c:34:41:
                    80:14:e2:d6:3f:06:c0:23:01:33:91:11:cd:a1:df:
                    3a:c6:04:09:88:54:ef:57:b6:78:43:71:53:8f:0e:
                    28:f1:74:d9:7d:ea:e3:cc:c4:5b:ba:6e:f5:6e:69:
                    4c:e0:12:a9:6b:35:09:a3:c9:66:08:bb:81:55:cb:
                    0b:a1:d1:af:d6:42:59:d1:49:9f:8e:0b:9e:ca:2c:
                    a2:05:21:0d:00:3d:8e:85:c5:2e:d3:2d:5b:3d:d5:
                    ed:c4:83:41:1c:0d:37:af:5c:39:55:96:32:f2:26:
                    4c:62:fc:f0:e0:f4:d9:aa:41:e5:10:31:4a:f7:52:
                    cb:30:82:a0:a8:d8:9b:d8:47:51:a1:3d:15:9a:d2:
                    d4:d0:fa:e9:88:37:9f:78:5e:ef:7c:3e:fc:65:47:
                    b1:8e:37:17:70:3d:f8:bd:a0:e0:88:a7:27:64:93:
                    f0:5d:23:0e:6c:58:c5:d7:09:99:fd:f2:f8:f9:25:
                    38:56:56:89:02:a6:fd:96:3d:00:a6:da:1e:c6:f6:
                    18:6a:7e:cd:23:a2:05:de:6b:6a:86:b6:0f:43:ea:
                    17:ab:e8:e0:bd:8c:00:fb:37:92:23:9d:53:14:4f:
                    b3:31:8c:9d:a0:2c:2a:4d:fe:b7:83:a3:69:84:ff:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C5:CF:6D:95:CC:32:D9:9F:BD:D7:92:E0:08:8A:CC:43:E0:6A:B2
            X509v3 Authority Key Identifier:
                keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:b1:38:c1:1d:26:19:31:3a:0f:38:5e:0d:ad:71:1d:44:
         f5:c9:50:f8:72:ea:55:7b:30:12:b7:90:3e:ca:e8:26:82:58:
         ff:a5:3c:00:e4:a7:19:29:88:c8:f7:34:19:e0:0b:d2:76:17:
         d2:67:f5:2b:d1:18:3e:ef:0f:03:f6:e4:6b:cd:b6:a2:52:42:
         ad:f5:24:f4:6e:48:dd:49:df:18:7c:ed:83:b6:32:d0:62:3a:
         9b:05:d5:f7:db:f9:f7:fc:16:eb:bb:04:46:46:5a:8e:ca:72:
         83:55:62:f3:ec:e1:68:e6:c9:2d:2a:a5:2d:90:cf:2a:c2:5b:
         e7:4d:24:f1:0a:fa:55:4a:da:3a:bb:28:b3:48:92:a9:b6:83:
         eb:16:50:7f:53:97:63:fe:28:dd:ba:41:4c:13:70:82:4d:4b:
         e2:d0:bd:a3:aa:cc:ba:3e:ca:d3:18:fe:ce:1a:6c:7e:09:39:
         ee:9b:ac:b4:df:8d:d6:7c:c2:3d:7c:57:fa:6d:97:64:e1:07:
         ba:fc:23:5b:a5:9e:4b:09:4b:78:dd:c2:79:a8:06:66:b5:4c:
         a5:fd:14:5d:d9:49:b3:3c:62:31:f8:f2:a3:5d:2f:2d:89:8d:
         db:4e:12:ae:7a:97:99:e7:82:3d:86:27:1e:c1:1b:f2:d7:ca:
         76:71:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:23 2024 by rpki-client on console-fra.rpki-client.org