Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File:                     Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier:          dD3c5au/UX2oNf8BzFZQarLoD71sirxYRwYXnmrjJu8=
Subject key identifier:   95:37:93:89:DF:7E:43:1F:28:B1:92:52:89:66:EB:28:B0:CA:13:AD
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer:       /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial:       019369D9EA4740B289873E7E8334752F9BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number:          1229
Signing time:             Tue 26 Nov 2024 19:01:49 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:49 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:49 +0000
Files and hashes:         1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: lPybInVMju49mVUM3G/Peyy4geYCG4HnKbnJAFGgU4g=)
                          2: jPDxPShFymth6LSbLp4v-SxK2Zs.roa (hash: ykWdKQPiFklsFbknqBUrH+HNvmddv/opzc1Wlr0jC6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:ea:47:40:b2:89:87:3e:7e:83:34:75:2f:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
        Validity
            Not Before: Nov 26 19:01:49 2024 GMT
            Not After : Nov 27 19:01:49 2024 GMT
        Subject: CN=95379389df7e431f28b192528966eb28b0ca13ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:a9:6f:ee:13:cc:24:03:7d:ec:b0:12:f0:
                    0e:65:74:70:85:2d:dc:1b:9d:5e:ca:be:80:d4:00:
                    99:c1:c6:96:01:58:ff:5b:90:a0:a4:1b:ac:2b:e1:
                    31:27:dc:12:da:54:ec:0f:23:1b:56:96:a2:f1:57:
                    76:f1:a8:45:ba:24:01:6b:87:61:b2:d2:00:94:c0:
                    30:49:3e:e3:b5:11:32:1d:3a:08:18:c2:a8:7f:4f:
                    e1:36:77:1a:70:b6:ef:7c:68:43:32:0f:f9:7f:eb:
                    14:07:0e:55:0c:76:ea:ec:54:b1:c0:a9:22:f8:c6:
                    58:a4:5f:79:9a:02:0a:21:9d:47:53:b7:c3:02:06:
                    d4:aa:a1:9d:c6:06:c5:7c:c8:81:1b:08:cc:9f:e3:
                    35:69:01:23:13:86:82:90:6a:f3:31:f3:91:e4:b5:
                    d1:7c:aa:21:10:fe:e5:12:3a:dd:93:1c:34:bf:35:
                    69:41:10:ad:61:88:20:75:e5:16:e1:ce:7e:f0:da:
                    ef:24:5c:76:c0:10:f3:59:f2:b6:b9:ed:02:e7:73:
                    1a:36:ea:fd:65:61:04:3a:d2:ca:60:10:d5:9d:93:
                    25:33:41:d1:02:38:ee:ca:89:ea:2b:f4:f5:fa:56:
                    01:3c:ac:25:18:61:1e:16:69:4d:b9:c9:53:6d:7b:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:37:93:89:DF:7E:43:1F:28:B1:92:52:89:66:EB:28:B0:CA:13:AD
            X509v3 Authority Key Identifier:
                keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:cd:e8:04:af:d7:3f:89:55:4e:db:0e:6b:b5:57:bf:c4:
         4d:84:e1:a0:4b:28:ea:c3:27:dd:47:1b:dc:f7:7b:ad:a6:cf:
         77:50:86:da:e2:5b:8d:45:7b:b3:4b:d6:7b:0d:61:ad:44:73:
         6b:2e:0a:60:d3:4b:80:2d:a5:24:49:a9:aa:11:b0:da:41:24:
         4b:8d:6c:f0:72:ca:47:9b:d0:33:d1:e1:b7:37:e0:0e:44:31:
         84:9a:90:dc:96:09:3d:e8:f2:49:90:85:47:26:3f:28:57:29:
         39:25:f8:4a:59:b1:f1:cc:97:0f:d2:57:6f:b3:ed:00:2a:e2:
         be:c3:2c:e4:53:90:19:f2:ac:4f:00:0d:38:6a:7d:dd:86:e5:
         6b:e2:02:f6:5e:d5:7f:3f:b4:dd:fd:10:d2:94:20:28:96:d0:
         c3:ee:be:f8:c1:99:51:74:f1:6d:7f:49:b4:45:c6:7a:04:e6:
         79:71:d4:23:50:1c:c1:2b:9f:12:d6:39:50:8a:9e:36:9a:cb:
         dd:e4:cd:d3:38:e4:07:b9:38:59:35:fe:a5:f0:d1:66:2f:24:
         f3:e6:8c:11:bf:ff:bf:75:ab:5c:96:4f:c2:6b:a4:a2:30:c1:
         e9:26:c6:22:40:49:80:ab:fe:92:c4:e7:7a:6a:3a:03:90:45:
         ee:cf:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:36 2024 by rpki-client on console-fra.rpki-client.org