Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          TzRPR370drom3VyIF86CdiYbZ/GfNXlDNlPUnI30Usk=
Subject key identifier:   F9:0A:C6:A6:2D:59:56:35:4D:B0:CB:58:22:A8:05:28:B9:B0:89:2C
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       019367EA5CEFAEADFA574250D730630140AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          0B43
Signing time:             Tue 26 Nov 2024 10:00:32 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:32 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:32 +0000
Files and hashes:         1: 2QGVStcvEs_xinxmyh5Wgz2MF48.roa (hash: gRXzz5ttXZx9tMp63FnkTiRzNi2kPeeB9meZfe3UjOc=)
                          2: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: +mAv0D62icqrBcSCT9yTfhekY8SZR5+2e+Qfq0Mina0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:5c:ef:ae:ad:fa:57:42:50:d7:30:63:01:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: Nov 26 10:00:32 2024 GMT
            Not After : Nov 27 10:00:32 2024 GMT
        Subject: CN=f90ac6a62d5956354db0cb5822a80528b9b0892c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:c5:f2:e0:44:c3:2d:29:79:06:d3:e2:b5:
                    57:fd:71:ca:ca:88:96:c0:2c:1a:50:15:cd:ae:19:
                    d0:5d:ff:e5:05:5c:85:b9:dd:ae:d8:01:a6:b3:1e:
                    33:38:0c:d4:1e:13:7f:83:69:af:57:15:1d:cf:c2:
                    3b:b1:ee:97:ad:57:e9:f9:92:5f:9c:ba:4b:57:0d:
                    2f:20:67:cc:44:12:d4:0f:9b:3e:fa:cf:77:15:a3:
                    ba:4b:e8:f1:ac:ab:79:92:84:43:59:48:4b:bd:13:
                    f3:e2:c5:0d:a7:0b:b8:f4:dc:44:7e:2b:25:f0:2c:
                    ee:2f:4b:d3:d4:0e:c4:3e:76:d0:b7:df:56:e3:f1:
                    d7:46:ad:99:82:6e:8c:4c:3e:17:07:cb:0e:d7:29:
                    db:e7:21:50:a8:34:3c:40:4e:a4:ee:e5:bf:66:2f:
                    94:30:c3:4c:4c:c9:f5:32:33:99:2f:ce:78:c0:c9:
                    29:bb:ed:1d:b2:da:75:eb:02:30:0e:ff:54:06:6f:
                    38:d2:68:e6:93:42:86:94:cc:e4:03:32:98:bb:ae:
                    aa:15:34:24:ed:c1:4b:dd:ec:f3:ef:4b:0d:58:1c:
                    bb:3d:87:06:4a:8c:fa:9c:8f:8f:47:10:03:6b:ac:
                    f4:1e:4e:6b:2c:fe:a3:60:98:50:cc:9a:79:8f:df:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0A:C6:A6:2D:59:56:35:4D:B0:CB:58:22:A8:05:28:B9:B0:89:2C
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:44:af:b9:d2:c0:2f:95:e4:00:b0:ab:0e:c2:7d:c1:47:7d:
         2d:17:02:3c:59:e7:b8:6f:7a:0e:8c:11:19:d5:43:3c:bd:8c:
         88:bd:7c:be:c2:f8:c0:c5:43:47:2d:de:c0:1e:63:d7:18:79:
         c8:8d:2e:85:7a:fa:04:5e:6e:b8:12:e9:a8:b4:de:31:33:65:
         29:74:9a:b1:84:65:e5:aa:b7:53:09:90:8f:4b:4b:44:07:54:
         6c:97:2e:f0:80:e9:70:0b:ac:54:d5:1d:81:0d:b1:43:03:e4:
         ca:ad:b1:44:1f:32:62:09:b5:72:f7:2c:1c:00:77:d3:28:a0:
         51:4f:fd:11:17:9f:21:96:6f:6e:91:96:54:04:37:22:80:7f:
         30:48:ee:e6:03:44:96:aa:ef:20:28:ea:d1:29:95:9e:0b:a8:
         3b:3e:2d:06:ff:de:6a:d2:91:19:8c:27:d4:cc:07:0f:04:30:
         0d:32:ac:44:86:37:76:e1:e2:62:d9:5f:d9:0f:35:4c:c5:0f:
         9e:ec:2e:ef:08:f3:2e:39:b1:58:ce:8b:76:a7:9c:4c:6a:a9:
         be:f1:37:d1:7a:6a:da:89:bf:ae:10:dd:b7:07:cf:b6:9b:17:
         0c:b6:cb:20:1d:da:e8:ac:82:1f:67:7f:c5:24:5d:3f:af:4b:
         d6:78:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:28 2024 by rpki-client on console-fra.rpki-client.org