Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File:                     DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier:          SmwKpZwubo4oszGOT+1P3cNaiSNZkbW2Z8FxGVnLCh4=
Subject key identifier:   51:29:23:0D:95:9C:0F:0D:0B:CC:99:14:8A:20:84:6E:F7:9C:74:A3
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer:       /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial:       019369D98F1EBCC23FF03A942199857DCB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:01:25 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:25 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:25 +0000
Files and hashes:         1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: 9Jb4S7cw5jfjtAHxDTwJ5CEbr8wabgzFVLjNvA1JD7o=)
                          2: fU7SXTXTYsgupxKwiEjFRTTPCB4.roa (hash: p9rKYy99zOb7tyd9f6cbug74X47EkuKPGB5bxz69EZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:8f:1e:bc:c2:3f:f0:3a:94:21:99:85:7d:cb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
        Validity
            Not Before: Nov 26 19:01:25 2024 GMT
            Not After : Nov 27 19:01:25 2024 GMT
        Subject: CN=5129230d959c0f0d0bcc99148a20846ef79c74a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:e6:e5:07:65:cf:a7:e6:7b:c9:fd:cb:5c:
                    2a:9e:32:15:0e:31:f5:59:3a:0d:fc:56:51:71:7f:
                    7c:61:64:d6:26:4d:1d:5c:61:18:98:f6:dc:e7:0a:
                    22:f9:6f:f7:d2:50:de:6b:70:12:55:84:5e:b2:73:
                    72:a0:43:0e:1e:78:4e:1f:76:04:b0:90:59:7e:e0:
                    66:ed:05:80:fe:44:45:30:7a:53:43:db:7b:1e:66:
                    fb:99:10:3b:c9:6c:33:10:5f:df:9a:83:d5:db:6e:
                    71:b5:93:79:89:8f:0f:31:60:2b:be:54:55:cb:37:
                    86:d2:d5:3c:3a:89:7a:04:1f:50:99:5c:e4:a6:14:
                    db:d5:af:fd:3c:41:a6:be:36:03:df:e2:d1:56:cf:
                    e7:c7:e2:62:c9:b2:67:db:d3:c2:a2:12:59:e9:a7:
                    06:df:f3:d9:02:e3:5d:e6:b9:9a:f1:b5:46:fb:12:
                    c8:18:38:06:d9:4c:47:4b:08:cf:b8:9a:b9:57:48:
                    97:a3:28:7d:3a:e7:26:02:40:3d:db:f3:1e:3c:a4:
                    d5:80:d8:e5:44:43:9b:4f:37:a7:58:ee:aa:f6:7e:
                    79:4a:45:c6:a1:c9:92:bd:08:27:42:7e:5f:58:1e:
                    5f:59:63:3b:58:fe:7e:1b:ec:6d:ad:2c:a3:a8:70:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:29:23:0D:95:9C:0F:0D:0B:CC:99:14:8A:20:84:6E:F7:9C:74:A3
            X509v3 Authority Key Identifier:
                keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4d:82:64:1b:58:d9:07:e4:3a:55:77:c9:a2:fe:96:d8:47:
         bc:4a:58:f6:38:c5:b1:9c:ac:44:84:b2:90:68:ae:9f:e9:46:
         de:d6:60:96:ac:fc:47:7e:d9:29:5b:ab:24:b3:a6:7d:99:f7:
         af:dd:2e:34:71:c7:16:2b:a6:90:b1:d6:42:fc:66:9f:54:a6:
         88:af:8e:74:a1:5d:36:01:2e:6d:c7:0b:f2:96:51:42:91:69:
         4e:fb:c5:55:5f:fe:cd:8b:c0:4b:2e:7d:dd:e3:8d:1e:b6:05:
         ea:61:95:19:21:fd:79:d8:53:ee:93:1b:f9:7e:a1:f2:aa:66:
         1a:85:d9:e6:36:8c:bb:65:76:6d:69:d8:94:6e:eb:db:f4:0c:
         15:cd:84:a4:37:8f:1a:38:fa:ea:c0:74:ea:61:36:09:54:e0:
         76:1f:5d:7e:e0:a8:e8:f7:26:a3:7c:12:4f:c6:37:76:10:58:
         f8:f5:c2:2e:5d:68:cf:f6:d0:55:80:22:a4:5d:ef:f0:80:7f:
         1c:6a:a7:ef:39:be:a6:7f:e9:3c:be:a3:f4:0c:b0:68:b9:31:
         54:5d:34:5c:6d:2e:23:f7:5c:87:cb:30:0a:b3:ee:03:f9:8d:
         cb:74:ee:81:fc:d5:c6:36:cd:ae:3d:d7:07:aa:ab:eb:26:95:
         e1:27:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:52 2024 by rpki-client on console-ams.rpki-client.org