Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File:                     dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier:          0EgZiUooJBOwBZP3uJjtZRD+9M70/U8P4mw5JYsGDEs=
Subject key identifier:   B0:F0:3F:87:78:80:AC:26:49:39:AA:78:38:4C:DC:8C:DE:06:CB:B4
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer:       /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial:       019358E551DCD290C3375F2543DB12638E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 12:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:43 +0000
Files and hashes:         1: 11N2uChb-eRUSTh_EW_jvHomG4Y.roa (hash: tYl4S5OmWiTFdI2jM3LWKatk1muGLX/G7JttDQnrgTA=)
                          2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: +jAKyfWE1RV4acDo66cS5K4Y81TP9PhVqt9CmoUuP7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:51:dc:d2:90:c3:37:5f:25:43:db:12:63:8e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
        Validity
            Not Before: Nov 23 12:00:43 2024 GMT
            Not After : Nov 24 12:00:43 2024 GMT
        Subject: CN=b0f03f877880ac264939aa78384cdc8cde06cbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:8f:fd:7c:d2:9f:4e:b5:23:ce:cc:65:58:
                    50:9a:52:76:83:8d:e0:bc:3c:10:6a:6e:e5:c5:93:
                    a2:16:39:ea:80:b2:53:dc:5b:0c:d1:2d:fe:39:9a:
                    14:21:ab:66:8f:5e:91:64:ce:39:c8:f0:32:d7:28:
                    e1:64:7e:a6:0b:49:a9:5a:d6:0c:fb:31:e9:87:18:
                    67:64:b7:60:08:9d:38:04:e7:af:b7:aa:bc:11:5d:
                    60:bc:d5:73:17:c1:e8:59:ca:ba:13:a3:79:6e:ff:
                    6e:53:93:cf:d0:72:35:96:d5:12:74:6a:59:c9:de:
                    5e:92:d6:56:12:41:10:80:71:40:06:3c:d8:f8:b2:
                    2c:32:24:18:d5:8c:ae:f6:cb:20:d5:d7:e1:48:2c:
                    da:92:83:e3:24:71:64:e9:14:5d:20:2d:95:2f:9e:
                    2c:59:7a:5e:42:00:23:10:67:22:8e:7e:cb:c7:fd:
                    67:77:e8:95:69:4f:3a:49:72:19:3b:9c:08:2a:a6:
                    19:8b:71:4a:a5:53:50:22:35:f1:47:2e:81:48:93:
                    ef:0a:a2:65:dc:01:00:0f:77:22:f2:4f:d5:7d:07:
                    97:86:ef:9a:40:42:54:80:06:c6:12:66:95:33:40:
                    99:52:8c:8a:08:26:a3:89:b4:9b:a9:1c:21:18:88:
                    3e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:3F:87:78:80:AC:26:49:39:AA:78:38:4C:DC:8C:DE:06:CB:B4
            X509v3 Authority Key Identifier:
                keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:1b:f0:dd:58:d7:40:6b:70:1c:ac:a3:41:69:d3:eb:6d:
         bf:56:04:91:36:17:01:25:49:d5:0a:ca:6e:1a:b4:d7:0d:7e:
         e5:60:b5:f5:54:a5:66:70:96:9e:10:62:7b:c2:fb:a9:10:48:
         ba:b7:c2:eb:c8:1f:ec:b9:8a:64:cd:b5:d8:77:e6:0c:40:cd:
         aa:71:55:df:44:02:c7:d2:df:7c:01:ca:7c:33:15:64:da:18:
         3a:26:ac:d1:df:32:9e:a3:67:e2:d2:72:21:32:a4:20:2e:e0:
         11:a3:39:68:e5:99:12:4e:a2:e4:19:ba:be:45:8c:ee:fd:88:
         86:9d:1a:23:07:24:ed:e1:ea:23:f2:c3:6f:d2:30:9a:58:10:
         fd:b2:1e:b8:96:93:cc:51:14:dc:18:4f:84:bd:2e:e2:c9:f7:
         26:26:38:fa:f3:94:cc:6e:6c:32:9d:bc:1c:39:21:63:97:44:
         4a:ee:44:61:20:7e:74:84:36:19:48:3c:a1:f9:d8:f9:39:c9:
         7c:57:16:88:e9:d6:44:ab:ef:96:f4:05:82:e2:20:5d:6b:e3:
         a9:d5:a8:a8:78:91:c1:59:2e:28:30:e4:25:5a:c5:72:c9:06:
         87:cf:e7:43:fe:c5:d5:dd:9e:54:94:4d:b7:f7:b4:44:ec:a4:
         fa:01:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:53:55 2024 by rpki-client on console-ams.rpki-client.org