Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File:                     dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier:          7MpQRUgAge8yerfdCR5RK0lTzktuxxURzMOHBBbvyHc=
Subject key identifier:   0E:64:2D:22:CA:8A:83:D6:1C:9B:55:C4:05:81:7A:11:84:C8:53:65
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer:       /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial:       01935A67708011606457BDDE8126A774259C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number:          100D
Signing time:             Sat 23 Nov 2024 19:02:28 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:28 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:28 +0000
Files and hashes:         1: _yUWqSmfb8BN0vfxiyfhsRK-dQE.roa (hash: dysHMglVOwPXc0pnyjWd2FyVEEK4KPnUBtnZf3a9iZk=)
                          2: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: 87bws/FqsV4zGWS0GUxEdrmpZLewuectV5bVB5fNTYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:70:80:11:60:64:57:bd:de:81:26:a7:74:25:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
        Validity
            Not Before: Nov 23 19:02:28 2024 GMT
            Not After : Nov 24 19:02:28 2024 GMT
        Subject: CN=0e642d22ca8a83d61c9b55c405817a1184c85365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:d0:bd:1a:81:7b:bc:c1:a1:2f:f7:51:05:
                    68:54:3d:c2:27:21:b0:9e:31:86:92:d8:4d:52:e0:
                    75:c8:ec:b1:88:ce:38:10:f8:79:97:76:2b:a5:d3:
                    e6:b0:0c:32:50:31:2a:12:c4:d4:4c:28:b7:6f:b1:
                    35:05:d6:bc:57:51:2c:15:ef:ee:89:f9:6e:1b:d1:
                    e2:30:e3:16:db:cc:b5:5d:e9:de:1c:fc:50:4c:6c:
                    70:1a:17:5b:58:52:ff:b1:23:14:81:d1:3f:90:dc:
                    95:f9:62:88:5f:9e:40:39:0f:68:48:ab:f3:91:75:
                    cf:22:4b:1c:73:ed:e0:b1:78:8a:7c:83:e7:68:fe:
                    eb:32:7d:44:c5:d4:d0:d7:0a:3d:c1:14:95:3d:9a:
                    44:d7:93:f2:53:7b:68:2c:42:f8:cf:b5:ba:cf:90:
                    a8:68:a2:72:cb:bc:cd:4e:8d:38:9b:75:75:3a:44:
                    5f:74:3b:b3:46:0a:e5:af:72:49:2f:4f:57:f2:e6:
                    e8:11:a9:36:57:72:0c:06:27:f4:7b:cd:3d:f5:a0:
                    18:ca:e1:61:2e:aa:83:8b:61:bb:02:2a:82:90:30:
                    95:d2:5c:fd:75:e9:d9:51:43:f1:e6:8d:ab:d4:c9:
                    29:8e:13:70:24:b2:fd:b6:f0:0e:d2:78:bb:c3:c8:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:64:2D:22:CA:8A:83:D6:1C:9B:55:C4:05:81:7A:11:84:C8:53:65
            X509v3 Authority Key Identifier:
                keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:98:99:8d:8e:02:9f:f7:57:e9:3f:e4:2c:6b:10:d0:15:
         55:5f:2f:a5:07:fd:50:c5:91:56:17:59:f1:dc:45:c1:e2:a1:
         15:52:30:35:7e:f5:d7:a4:59:2c:1a:d0:85:03:06:63:81:5f:
         af:30:df:f8:35:30:b5:97:1d:21:5e:5c:6d:c1:69:1b:08:39:
         1b:60:14:bc:31:bd:19:9f:e7:ad:ed:8b:fb:6b:2f:5e:e9:7f:
         a9:dd:cd:f1:9c:d8:68:ff:f2:d5:e3:de:4a:fd:71:5d:93:c3:
         ae:b8:e2:04:21:cf:e4:e0:84:15:5e:d9:02:2c:5d:65:36:ed:
         ab:19:22:75:24:81:ec:82:4f:ae:a7:c5:78:03:ae:5b:c4:30:
         86:03:f6:8d:38:4b:b2:0d:b0:47:ae:7f:2c:fd:30:a1:69:cc:
         24:82:a1:6f:66:e1:33:e0:b6:c8:72:dd:11:ab:69:c9:b0:b0:
         1c:42:ae:79:6a:be:4e:be:8e:9a:da:0d:18:9f:ca:b1:e5:07:
         b9:d6:f7:b2:b5:e6:57:73:b0:fd:63:da:40:69:98:2f:8c:73:
         25:53:66:78:52:0f:88:60:c2:01:ad:78:b6:ee:c9:df:43:14:
         37:3d:96:04:43:1e:6c:be:6c:40:bc:1e:37:0e:c2:84:64:a4:
         2c:6b:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:41:22 2024 by rpki-client on console-fra.rpki-client.org