Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File:                     DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier:          po/WHDIIrkN6biwXS6TxnKqY4mYbjNnNWwluo8/i8Iw=
Subject key identifier:   7E:84:F4:6E:51:34:CB:DF:3B:EE:AD:17:A8:54:D6:07:61:3B:58:EC
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer:       /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial:       0193587794A719C755AE930AE7D608A900D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number:          07D3
Signing time:             Sat 23 Nov 2024 10:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:51 +0000
Files and hashes:         1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: bemnyuqrpO+Jq+sKS0izJD2+Ue05Cf6hTAucChHOzds=)
                          2: o5TijbkYaovCYfcDFTeVH7t0gHI.roa (hash: huTRsDhd0NgKrgTrVo7FPzO81K+h0TXKefACWZUrTS0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:94:a7:19:c7:55:ae:93:0a:e7:d6:08:a9:00:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
        Validity
            Not Before: Nov 23 10:00:51 2024 GMT
            Not After : Nov 24 10:00:51 2024 GMT
        Subject: CN=7e84f46e5134cbdf3beead17a854d607613b58ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:07:8f:3a:8f:73:60:96:24:19:78:28:e7:
                    57:e8:c8:ab:aa:83:30:c1:d3:70:d8:fb:17:26:c2:
                    34:d7:99:63:ef:19:d9:5c:ca:92:5e:8f:43:ae:27:
                    5b:16:fa:b3:82:ca:31:d6:4b:b7:0f:b4:38:c4:01:
                    d4:d9:ec:16:1f:16:d7:eb:cf:28:16:df:30:51:a1:
                    44:1c:93:7a:a1:a6:3a:03:68:74:1f:4c:96:97:92:
                    9d:0a:cd:d6:34:dc:e8:db:2f:fc:d3:90:3d:6e:21:
                    34:04:b7:d8:ba:57:e0:0f:6c:82:c4:f5:7f:84:2e:
                    86:cd:91:6e:d0:e0:b5:58:84:3f:6c:d0:8a:e2:68:
                    a8:40:70:72:af:d4:2a:0a:0c:0d:74:bf:33:d3:ef:
                    c1:cc:89:ae:75:9f:9e:41:db:09:88:33:61:53:88:
                    d9:2b:9b:28:17:87:08:a9:3e:2b:7c:c6:17:65:90:
                    83:55:0d:0c:44:93:3c:85:32:3f:ed:7d:23:4b:ff:
                    de:7f:d3:bc:c0:00:e9:35:02:4c:aa:6a:f3:47:d5:
                    1c:08:99:e5:31:30:4f:e3:00:75:c7:ab:c7:b1:94:
                    18:41:66:b7:8f:46:d4:de:f6:46:6b:cd:0a:2b:bf:
                    ba:cf:b3:b3:5e:26:ae:93:5b:8f:5d:cb:d0:e1:58:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:F4:6E:51:34:CB:DF:3B:EE:AD:17:A8:54:D6:07:61:3B:58:EC
            X509v3 Authority Key Identifier:
                keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:77:77:32:ac:ec:7a:e6:47:69:77:a1:05:b5:4a:7f:3e:f5:
         ca:d7:b4:da:6d:00:c8:2c:a6:a8:96:87:94:1e:42:dd:8c:09:
         7e:5d:d7:72:ba:77:d1:e2:25:c3:48:c6:4e:13:5c:58:2b:4d:
         03:7d:8b:8f:73:ed:8c:0f:9f:14:a3:da:8e:1b:b4:c5:18:78:
         c1:17:ca:66:4e:7f:ad:55:bd:ef:66:d5:60:87:36:1a:6a:19:
         da:f6:65:ec:4d:9b:fd:b1:5f:10:bd:b2:5f:fd:79:0f:9d:ad:
         eb:9a:57:55:48:69:6c:30:39:65:8c:91:9e:a9:3e:93:ad:c3:
         6d:e3:6d:03:9c:fa:08:81:08:79:90:cb:87:0e:57:db:59:b8:
         9e:10:fc:41:bf:b7:09:51:8e:b6:8a:39:27:c0:5e:3a:13:53:
         94:54:55:d8:cc:e3:cd:4c:58:b2:96:b5:a8:50:4e:b7:5b:2e:
         69:36:c7:02:e8:63:e0:29:a7:8c:96:65:23:95:91:b9:b8:c1:
         ac:2a:27:54:59:22:92:58:55:a8:5d:f2:e2:96:95:5f:2e:6d:
         a9:df:c0:c7:06:2e:0d:f2:0b:ba:7f:88:b1:34:e8:01:7d:e7:
         03:cd:a8:f9:b0:77:d2:f3:eb:f8:77:ab:08:ab:fb:e5:28:e6:
         89:0e:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:04:30 2024 by rpki-client on console-fra.rpki-client.org