Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
File:                     ddl3qipMEMe0evKt2WgESH4idKk.mft (raw, json)
Hash identifier:          S/l/OqeuhHfNbxE3W7LWa7mIo97B+DADaruZklXTI8g=
Subject key identifier:   CF:8D:0E:32:69:58:7B:4C:62:29:A0:48:D5:AB:B6:56:BC:34:56:07
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Certificate issuer:       /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial:       01936B222E364368351F3552827AE1497459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 01:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:21 +0000
Files and hashes:         1: EJGlkjZ63pHbaV-Dvl6VFONu-c4.roa (hash: E7lNEQQQD29R/x2/zMxxykgyaxAjm1AO4V8j2KkVpNM=)
                          2: ddl3qipMEMe0evKt2WgESH4idKk.crl (hash: qacK+iICPO9OEIQX66tgv0knuTiBu1P/zwvEejY7W1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:2e:36:43:68:35:1f:35:52:82:7a:e1:49:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
        Validity
            Not Before: Nov 27 01:00:21 2024 GMT
            Not After : Nov 28 01:00:21 2024 GMT
        Subject: CN=cf8d0e3269587b4c6229a048d5abb656bc345607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:72:29:d9:8b:de:91:68:71:60:fa:25:6b:
                    fc:25:ea:3b:34:02:80:4c:a1:a1:f8:41:93:75:1f:
                    f7:b7:62:1e:0f:4a:20:dd:55:13:d6:9b:42:1f:b1:
                    57:6a:3d:20:22:62:1f:ec:59:db:98:67:30:21:10:
                    fc:17:cf:66:9a:e1:27:7f:32:b9:ae:ee:22:e3:28:
                    d3:e8:97:02:ef:2e:49:fd:41:56:0e:b9:82:e2:14:
                    ac:82:2c:f2:4e:86:35:5f:65:de:04:e2:4b:cc:02:
                    18:58:80:d9:0f:3d:2c:84:c6:4d:d1:42:6b:99:f1:
                    ed:5b:d6:df:a5:40:94:dd:3c:e9:2f:0e:e0:a3:27:
                    8a:9a:f4:7c:06:a0:1b:2f:d6:f6:8f:01:e8:c3:8b:
                    94:85:54:1d:51:f6:25:e2:d7:91:e8:a2:b3:e8:c9:
                    72:c3:33:ff:24:40:4f:0c:69:64:30:0b:99:d0:7d:
                    7e:7d:75:ca:c0:5d:3e:48:0e:47:0c:e7:19:57:9c:
                    e8:31:3f:fa:b4:16:5b:40:e2:b3:5b:1d:01:ba:5f:
                    5b:7f:2b:19:6c:06:cc:01:f3:3b:27:71:82:cb:62:
                    d9:f8:ba:75:98:9a:28:92:b5:5f:e9:0f:72:0e:0d:
                    98:39:03:00:2c:82:6c:2c:56:fc:52:1d:eb:29:58:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:0E:32:69:58:7B:4C:62:29:A0:48:D5:AB:B6:56:BC:34:56:07
            X509v3 Authority Key Identifier:
                keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c6:e3:12:f2:aa:25:e2:ed:35:de:37:5d:b4:54:98:8b:e7:
         c3:79:e1:cd:e4:fa:34:09:c0:0d:89:fc:b1:e5:dc:da:32:f8:
         51:bf:66:47:95:e5:7e:ea:8b:35:be:37:9b:48:fe:d2:62:35:
         b5:5b:21:9e:22:92:f3:0e:08:ae:7f:41:9d:bb:ef:38:91:c5:
         31:6b:ce:f8:2c:a4:c5:57:27:5d:80:27:5b:36:11:31:89:66:
         ac:1e:a9:bd:3b:69:b7:48:4d:af:7d:22:1e:d0:ca:2a:d2:03:
         e2:80:85:b2:98:69:bb:dd:55:3d:ed:07:2d:62:19:0a:8b:c4:
         29:89:22:1f:10:0f:89:e4:bf:a3:3b:7c:9f:79:cd:fb:dd:17:
         4b:5f:68:7f:29:01:3a:2e:9e:db:c6:51:dd:74:07:23:56:91:
         1c:7e:f3:d9:98:76:c4:e4:20:bf:85:7a:63:76:fc:e1:83:c2:
         00:01:ea:ca:6c:2b:8b:95:12:15:ac:81:26:8d:e6:f0:c4:21:
         4f:ce:5d:99:db:a9:27:f0:52:49:74:c3:c1:08:4d:d6:78:3f:
         7a:48:77:e7:a1:b2:fa:30:59:80:6e:6a:c8:e9:07:2c:2d:47:
         99:93:42:2b:d7:e3:83:65:e1:ed:c6:98:28:b9:4f:6b:03:2f:
         43:0c:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:45 2024 by rpki-client on console-fra.rpki-client.org