Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          9jytatJMR1pdsUZfbYgw9/n+eteJByfOwQMYvAmfOWc=
Subject key identifier:   14:D9:8D:D3:8A:AA:02:36:ED:0A:76:49:F1:28:32:7B:05:1C:E9:D3
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       019355AD0F93ECBD621ED8FC245DCE2B510E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 21:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:25 +0000
Files and hashes:         1: CL9ZB_a21bMKDSEh8ddI2x6Y7ns.roa (hash: VHPOBG5iXR9yXyXkTFoH5zsie3yZYG880vinlCDqsJY=)
                          2: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: nLh7Qr9fRvWfGtYVWTvayCDqSzgUeyoGa0EbJ6SdL0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:0f:93:ec:bd:62:1e:d8:fc:24:5d:ce:2b:51:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: Nov 22 21:00:25 2024 GMT
            Not After : Nov 23 21:00:25 2024 GMT
        Subject: CN=14d98dd38aaa0236ed0a7649f128327b051ce9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:3d:cc:f6:28:62:f5:60:be:1e:67:75:20:
                    89:3b:23:29:28:74:7b:98:bc:ee:8b:b7:e3:0f:69:
                    65:52:c3:7c:e6:f6:5a:89:7c:8d:ef:c0:20:c3:d9:
                    50:c6:58:4f:a2:1f:2d:ff:6a:5d:ef:37:bd:c2:2c:
                    87:42:62:ad:1a:0e:bc:2b:10:10:68:4b:d0:ca:3c:
                    bc:0d:c4:64:61:bc:30:97:34:03:97:a4:d3:d2:2b:
                    b2:fe:59:e6:e0:8d:23:69:11:d6:35:33:87:89:44:
                    e4:ce:bc:c4:0b:fe:de:a1:57:bf:aa:09:30:40:a8:
                    45:b0:0c:25:9d:c3:19:3d:42:a4:dd:4c:73:29:42:
                    d0:d0:62:4b:5a:73:54:78:6e:1d:15:c9:8f:9d:d6:
                    3e:47:6b:33:57:6c:d1:31:d0:50:ec:78:b2:1f:02:
                    8a:76:4b:35:75:81:17:62:30:74:6f:1e:a3:2e:76:
                    a6:1f:da:df:ce:74:91:2a:48:87:15:9a:f7:51:0f:
                    d2:3b:d3:d1:f9:b9:00:b3:27:66:58:fa:95:52:ac:
                    2d:3d:e9:e0:a7:3d:a7:8f:d4:56:fa:03:f0:2d:1c:
                    33:57:ee:62:08:46:06:5c:a9:6d:53:b8:49:06:33:
                    c2:fb:c6:7d:04:84:53:90:6d:f3:86:3a:0e:0e:20:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D9:8D:D3:8A:AA:02:36:ED:0A:76:49:F1:28:32:7B:05:1C:E9:D3
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:5c:9a:77:84:32:14:37:89:3d:8f:f5:f4:68:76:d3:2c:
         a5:45:64:f5:ec:0b:20:d3:24:95:1c:ec:34:11:b5:a3:4d:49:
         53:d1:b0:4a:c6:2e:cc:e0:b0:79:11:5e:c7:78:41:34:3b:b4:
         7b:f9:24:cb:25:dc:16:04:9c:22:40:01:a8:cf:9a:c9:d9:aa:
         51:ec:72:35:ee:eb:63:e1:e5:01:c9:4f:9b:04:ff:85:70:e4:
         0c:b2:d1:4f:a8:10:16:97:80:37:bf:93:b5:f3:4b:78:d3:57:
         fe:91:01:69:ca:0e:8f:d8:e8:52:c8:6f:71:e6:6b:44:bc:f8:
         ae:03:90:28:a1:ed:ee:3a:e4:a3:69:6d:00:9e:a2:63:e6:f5:
         b3:a9:05:26:58:72:05:d6:5f:be:61:5d:21:1e:ad:e7:85:43:
         ca:39:eb:bf:b8:7d:96:f4:af:c0:07:98:0d:9b:92:6e:e4:8d:
         b9:8d:c0:b3:1a:0b:d8:ea:6e:db:51:11:80:e6:2f:4e:b3:df:
         d4:ce:b4:1c:5c:45:c3:5d:f5:0a:9b:c7:c9:17:29:b7:41:73:
         0e:d9:42:c8:fc:9c:3b:e0:9e:13:15:07:8a:3e:11:8c:82:65:
         d7:d9:0b:7c:b3:f0:e1:cb:06:b4:bf:78:01:d6:94:bb:38:89:
         0c:bb:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:55 2024 by rpki-client on console-fra.rpki-client.org