Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
File:                     dkVpLUvTDPnpidVbrI0I53FEk6s.mft (raw, json)
Hash identifier:          fc6zOtQr/frEPqBDVeO4arH3cmH63ExptlWEzaGklkk=
Subject key identifier:   D7:55:FD:D9:58:A4:CD:76:6D:63:05:8B:B0:6C:0E:42:B4:4A:7B:02
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Certificate issuer:       /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial:       01936745EA76E6331C09A9E33E1E3A883980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 07:00:55 +0000
Manifest this update:     Tue 26 Nov 2024 07:00:55 +0000
Manifest next update:     Wed 27 Nov 2024 07:00:55 +0000
Files and hashes:         1: 62UrKny_bfQJeP8ALtnucxbRVs4.roa (hash: IOt8F9FNi+tcUPd6Ak/j54/7dZh7sVDGMOyWPDHO1rA=)
                          2: dkVpLUvTDPnpidVbrI0I53FEk6s.crl (hash: lD7OhZ/yPKPLZ/y5v/2m2s77m5L/FhbzG46IajHnCYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:45:ea:76:e6:33:1c:09:a9:e3:3e:1e:3a:88:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
        Validity
            Not Before: Nov 26 07:00:55 2024 GMT
            Not After : Nov 27 07:00:55 2024 GMT
        Subject: CN=d755fdd958a4cd766d63058bb06c0e42b44a7b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:b1:59:49:df:d6:a7:22:9c:6c:ab:9a:f2:
                    f3:91:a1:9a:38:d6:5a:08:aa:23:44:48:e2:8f:d0:
                    f9:8d:7a:84:2b:2b:d0:a7:03:9b:fd:70:3f:18:67:
                    6d:7f:94:8d:e4:8b:e7:bb:45:69:57:c7:96:46:d9:
                    dd:f4:6e:87:ad:df:4d:cd:c3:91:58:d9:59:ac:52:
                    de:d0:c0:81:0e:31:15:6f:1c:99:c7:b8:cf:15:69:
                    53:38:9f:be:6f:e8:a3:be:80:68:59:60:99:f0:2f:
                    9c:b7:da:0d:5f:a0:df:7a:6c:f3:5f:ff:66:0f:2b:
                    9b:66:d4:9b:f3:10:25:a6:f9:ae:6d:8c:5f:68:a2:
                    7c:ba:39:bf:0f:f6:d3:0c:24:b7:b3:77:06:13:93:
                    c5:6f:5e:3a:38:7a:3a:44:4d:77:2c:0f:4d:e1:9d:
                    52:8a:67:f8:74:19:b0:ad:6e:f7:98:d7:f1:94:3e:
                    b0:56:5d:58:b5:ef:1d:41:8a:db:03:cd:e2:12:cf:
                    16:77:20:ab:08:ab:9d:13:c3:fe:3d:2c:0a:a6:4f:
                    da:65:3c:6e:54:99:cc:e9:ea:d0:e8:e1:4c:fc:50:
                    c8:42:a7:72:8e:b7:ae:17:96:29:36:2d:80:5c:ae:
                    a4:80:67:14:b5:06:a5:44:6f:76:a2:cc:35:2b:4e:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:55:FD:D9:58:A4:CD:76:6D:63:05:8B:B0:6C:0E:42:B4:4A:7B:02
            X509v3 Authority Key Identifier:
                keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:04:75:92:f7:5a:a0:13:bf:43:1c:22:ea:1b:3c:7d:98:22:
         ea:85:62:bd:a0:92:51:26:6e:bb:25:d2:12:32:fc:ab:60:f7:
         f5:9a:2a:08:49:16:d6:f6:2a:f1:74:52:41:50:4d:b8:af:be:
         e1:c7:ab:f1:fa:d0:c8:be:c2:ce:2e:4c:fe:9d:e1:a9:81:0f:
         23:b1:1d:d9:60:c6:dd:42:1f:82:31:42:70:ee:4d:ba:a5:b4:
         7a:55:94:11:8c:a7:31:c7:d2:b7:d9:3d:a1:68:b8:0d:9a:66:
         da:d4:d2:44:c6:41:a7:3e:80:96:cf:ba:86:98:cf:de:7c:54:
         26:3e:be:48:45:5b:d0:c9:0b:d1:06:6a:cc:53:58:6e:6e:a6:
         5d:b3:7c:3e:ec:de:ca:76:34:68:de:bf:c5:7d:57:ca:c8:23:
         84:20:e7:5f:24:39:5b:41:4e:f9:71:b6:54:02:30:46:4e:bd:
         0b:d1:9c:c4:9c:8d:c8:03:4c:9e:4e:05:58:c5:68:a2:1d:05:
         41:c5:3b:f3:a9:f9:94:82:26:1c:4c:32:a1:80:6e:cf:b7:a2:
         cc:b1:f3:04:ed:73:91:2d:f2:34:10:1a:5a:47:16:2a:27:81:
         52:42:58:b3:65:ae:3a:fd:9a:9b:7d:7b:68:da:c9:c2:52:67:
         32:1b:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:41:35 2024 by rpki-client on console-fra.rpki-client.org