Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File:                     DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier:          s2f53ExW4wLL1r7860+nUXQlcIEELAjodAfo/eh++pM=
Subject key identifier:   C0:AE:30:98:8C:C3:C3:FC:F1:8F:85:0C:E7:D7:18:03:24:8A:11:DA
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer:       /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial:       0193579BD7613C4FD7AC5C5FAF53365807F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 06:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:51 +0000
Files and hashes:         1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: hQBIM3xrE6UfUxL+/YeMMBRwEGHKPErQP+V2EeZtgHc=)
                          2: zVw6etnb48M4UxxKbYJe9MzY2yc.roa (hash: kLqkYIg+WivLpmhmDDiZoH3kSrfk85htqSHFG9b+W/M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d7:61:3c:4f:d7:ac:5c:5f:af:53:36:58:07:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
        Validity
            Not Before: Nov 23 06:00:51 2024 GMT
            Not After : Nov 24 06:00:51 2024 GMT
        Subject: CN=c0ae30988cc3c3fcf18f850ce7d71803248a11da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:1a:15:bd:01:a2:0e:3e:62:62:2b:6a:14:
                    95:6b:7e:49:ba:a8:71:69:c1:3a:14:4f:02:38:97:
                    47:ac:76:66:85:47:c0:5f:73:d7:ad:f1:19:47:74:
                    7e:36:fb:50:81:7a:06:4f:13:2f:b7:60:e5:55:15:
                    8e:2c:af:fb:4f:f4:e9:5c:97:40:06:94:bc:d1:2d:
                    5c:3b:85:e4:4d:17:4e:46:36:c0:34:61:41:f7:86:
                    55:55:e5:59:c6:55:45:75:a1:18:b6:03:e4:0f:a5:
                    7f:cb:a3:d5:39:3f:48:77:07:1c:60:e4:7b:01:b0:
                    14:9b:7a:fe:1e:26:bb:92:25:9d:97:90:d2:a3:b4:
                    0b:b1:3b:cc:de:b8:d5:be:da:23:93:b4:16:7a:cf:
                    01:6f:9b:fb:05:7f:ad:f7:08:7a:a0:c4:89:64:71:
                    9f:aa:c0:ef:cf:7e:03:4d:66:ba:50:12:ae:08:6b:
                    95:7e:77:39:a3:af:f5:eb:bc:0d:c4:c2:c9:56:7d:
                    5e:75:ca:14:59:6f:e8:78:2a:c4:ea:db:69:77:bd:
                    5d:0e:e9:3b:48:8b:e4:3d:9c:9c:99:66:0c:3f:40:
                    4f:6a:f4:92:4b:44:90:e0:95:b2:b1:66:6d:d0:52:
                    04:ba:e2:4b:48:5b:a1:3a:f1:56:3a:b2:81:91:c0:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AE:30:98:8C:C3:C3:FC:F1:8F:85:0C:E7:D7:18:03:24:8A:11:DA
            X509v3 Authority Key Identifier:
                keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:69:88:f7:49:ef:f6:b5:f9:c8:35:cb:a2:83:65:d5:28:3d:
         09:9d:46:57:1e:ea:a5:5a:2d:37:83:1d:18:d7:c8:82:ff:9a:
         f7:2f:49:ec:0e:d5:a7:06:04:4b:6f:78:46:0e:22:92:fd:a9:
         93:4f:3c:0e:db:a2:94:23:84:12:fb:6c:5a:4c:a8:43:76:df:
         97:a9:cd:b2:5c:01:8d:65:7b:78:5e:2e:e4:16:16:01:9c:be:
         6d:3a:58:13:79:32:ca:64:d3:47:09:1e:c2:fa:aa:aa:22:81:
         12:d5:41:12:d2:50:a8:96:0e:70:bd:b2:60:d4:91:e2:c9:1e:
         4c:7a:00:55:83:32:1d:a0:90:a0:e1:4f:1e:3d:a4:31:b2:ab:
         92:94:a8:10:b1:13:f4:91:03:81:63:79:4a:2f:5b:a4:62:9b:
         56:e8:b2:a0:e6:58:58:5f:38:fb:f6:d6:40:a3:22:50:be:fd:
         9b:49:a0:e4:8b:cd:dd:0d:dd:8f:da:7a:23:d5:32:a5:09:99:
         c8:c5:e5:fe:38:f0:d3:65:d5:51:7e:5c:ad:1c:ba:bb:ba:6f:
         19:c7:8c:3c:ec:be:6c:6a:e2:e1:9c:52:73:85:66:bf:b4:51:
         fb:7d:9b:d0:ee:c6:44:6f:b4:40:e5:03:6d:54:78:62:68:16:
         4b:c7:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:23 2024 by rpki-client on console-fra.rpki-client.org