Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File:                     dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier:          ZPwnZdI8DyHzZWZ2bomGlwAvKpn7m5sIv381UDCC9fI=
Subject key identifier:   13:C6:2F:47:A4:E1:1A:2A:75:A0:4A:09:19:5F:28:20:C2:20:92:7A
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer:       /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial:       01936A0F66E2145EBE71F420B73F598CBEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number:          0760
Signing time:             Tue 26 Nov 2024 20:00:14 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:14 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:14 +0000
Files and hashes:         1: 1jZJga7guBD0T5mJbGFV-GC941U.roa (hash: usiGdS29yLqgBi4Fw1ZDYPHBaGWf3unt5YZtRrxhoE8=)
                          2: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: mtluk+gJS+uELrMyY7cnt/77s/uxF6T2vCyeENAMwiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:66:e2:14:5e:be:71:f4:20:b7:3f:59:8c:be:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
        Validity
            Not Before: Nov 26 20:00:14 2024 GMT
            Not After : Nov 27 20:00:14 2024 GMT
        Subject: CN=13c62f47a4e11a2a75a04a09195f2820c220927a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:d8:b8:97:9b:d1:6c:34:0d:29:94:c2:ab:
                    98:aa:04:63:ab:b4:e0:76:be:92:fa:dc:50:a1:11:
                    0c:1b:4b:51:1f:77:d9:47:0d:ea:8b:cc:7c:55:04:
                    89:ba:61:ca:64:5e:20:d7:8e:fb:62:89:6c:3d:09:
                    8d:00:76:ff:8a:69:52:3a:fa:a9:e0:de:a8:3d:19:
                    b9:d3:a9:72:3c:37:5c:a8:e6:cb:dd:a0:8f:cd:a0:
                    bd:6f:3d:30:8c:78:65:72:09:2b:82:54:26:2c:01:
                    c6:ed:b2:5d:62:dd:d9:44:9b:c0:d5:bf:5b:d7:04:
                    c5:4b:be:8c:94:3a:bc:22:8b:e1:40:b9:89:3d:a1:
                    5a:88:f4:5d:ee:b9:c3:60:ae:8d:91:c4:09:01:14:
                    b7:9e:74:c3:3b:47:e3:0e:29:c2:56:9b:dd:51:87:
                    00:b6:a4:86:16:66:64:08:be:7b:79:85:a4:34:1e:
                    7b:ca:13:71:94:b7:73:9a:73:41:c2:0b:db:17:9c:
                    4d:f4:67:dc:38:6e:00:9b:30:49:24:26:0e:52:b3:
                    ab:43:fc:e4:25:7a:bc:f9:1b:60:c7:f7:e8:94:1d:
                    d7:3c:2f:8c:15:9e:90:be:14:45:ad:ef:38:7f:b6:
                    2c:7e:8b:a0:19:d4:af:6c:7a:d0:52:e2:1a:5d:12:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:2F:47:A4:E1:1A:2A:75:A0:4A:09:19:5F:28:20:C2:20:92:7A
            X509v3 Authority Key Identifier:
                keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9e:5f:51:14:99:2e:7e:fa:cc:59:e1:7e:07:66:5a:88:ae:
         d8:42:01:f9:c2:93:ea:af:3d:c9:83:05:42:e8:d0:7b:40:bf:
         58:ad:dc:04:a2:84:7f:2e:8e:5a:a8:e3:5d:8d:bc:72:d8:0b:
         7f:d3:3b:b4:f6:6e:9f:cc:ef:b8:ba:13:94:98:bc:77:63:e1:
         1d:e0:4a:9d:24:0c:36:c6:53:c3:a0:e1:c2:68:45:f1:26:26:
         cc:54:e9:63:ed:29:18:83:43:ae:04:d9:23:8e:fc:13:35:22:
         df:8f:1f:2d:26:80:3c:cb:32:09:7a:87:e5:e9:71:c9:0e:9d:
         83:14:94:31:ad:92:9c:b9:9d:9f:20:4d:9e:48:81:39:29:15:
         6a:36:f4:5d:4a:6e:7d:f1:5d:16:84:9e:a3:25:34:bb:bf:c4:
         8d:b7:b9:5d:a6:4c:fb:d7:dc:bc:58:ea:08:6c:24:cc:27:f0:
         13:79:3b:85:7b:5d:10:1b:2a:f5:97:2e:6d:f1:37:2b:05:ef:
         4e:08:04:33:b6:97:28:16:00:1d:54:1a:2d:7a:ab:ff:0c:dd:
         78:cc:26:1a:7d:f3:b9:1a:77:6a:c8:9d:cc:38:03:ca:ab:2a:
         f4:b7:10:96:37:0f:bd:75:77:f1:36:55:9c:f0:99:d5:70:8f:
         ee:1f:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:09 2024 by rpki-client on console-fra.rpki-client.org