Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File:                     dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier:          EUM010iy0YFjO9A/dq8yyCf3bOgjMUIFIpbFNzdTLyE=
Subject key identifier:   6B:76:95:A6:34:4C:FC:E2:21:3E:AF:2C:B2:2D:FD:8F:E3:BD:7F:46
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer:       /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial:       0193553F5568B0D5E46DA339301BEABD81C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 19:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:34 +0000
Files and hashes:         1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: 1BlIOMBFbaCFr3Fnx9m/dqSrKGwmk7agqOK5POP+9sc=)
                          2: grzrGg4_ToMbBX9iaB8jKFatUlk.roa (hash: rjONq1y4IsPKttoDvDDiwmzXpuQJimcBu0cOd2DCgNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:55:68:b0:d5:e4:6d:a3:39:30:1b:ea:bd:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
        Validity
            Not Before: Nov 22 19:00:34 2024 GMT
            Not After : Nov 23 19:00:34 2024 GMT
        Subject: CN=6b7695a6344cfce2213eaf2cb22dfd8fe3bd7f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:39:4c:46:d4:7b:10:b4:76:99:14:ec:a2:
                    17:e4:3e:7e:26:c6:c2:57:6a:99:f1:5c:c1:47:71:
                    d2:9f:17:9f:c3:d5:98:75:95:84:69:a8:ab:a9:1a:
                    eb:0f:ec:bd:0c:97:ca:7a:20:8e:f6:96:5d:65:45:
                    32:98:6c:56:2a:e1:9b:4e:70:ee:5b:ed:1f:2e:34:
                    f0:cb:f3:a9:1a:4b:d8:b2:c5:d2:e5:de:54:b9:a6:
                    bd:d3:85:2b:50:14:06:70:1b:de:79:35:ca:ae:ef:
                    72:66:5a:b4:11:48:4c:ef:29:b1:ab:76:81:f1:20:
                    c8:56:4e:4e:1b:80:dd:9d:0f:4e:b5:84:13:2a:2a:
                    f3:bb:c0:49:c6:ad:66:11:3c:49:97:10:0c:6e:c8:
                    1f:c2:ad:db:df:43:2f:f8:a5:dc:cf:22:d0:e7:43:
                    1b:25:14:a6:9f:33:64:d0:3f:56:d6:4a:fb:44:e3:
                    38:a4:e5:bd:7d:16:10:e7:c9:96:4a:c9:c5:0a:8f:
                    b0:79:16:9f:39:5e:91:77:35:92:26:58:e0:a4:1b:
                    59:56:61:dc:00:7b:49:75:c2:14:aa:15:03:e6:28:
                    ed:98:2a:d0:08:a5:c2:c9:94:6f:15:92:bf:6f:c1:
                    a8:78:e5:e9:7b:1c:66:23:06:28:42:d3:62:68:c1:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:95:A6:34:4C:FC:E2:21:3E:AF:2C:B2:2D:FD:8F:E3:BD:7F:46
            X509v3 Authority Key Identifier:
                keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:c0:bf:4f:f8:31:e1:6d:ae:a9:70:ae:f4:20:75:1b:06:
         28:40:8f:16:67:85:40:b5:f8:5a:47:3d:78:82:c5:f7:4a:8f:
         bc:d5:5a:3b:84:90:0f:57:35:97:fb:9a:bc:7e:a5:b4:3c:fd:
         7e:c6:84:de:34:ce:46:02:42:37:a5:08:bb:7c:6a:63:6a:44:
         86:48:11:1f:d7:df:08:3c:ab:36:ea:70:bf:48:65:39:96:95:
         0d:d2:1e:56:98:27:b2:d5:00:9e:00:5b:92:23:2b:8f:5d:33:
         13:36:82:ab:d9:f3:80:db:f3:1e:7e:b6:60:7e:22:f3:1e:ce:
         f0:4c:47:56:2d:f1:30:aa:ac:cd:3f:0c:54:23:2b:a7:c1:91:
         de:19:0e:3f:52:9c:ed:78:64:40:ca:eb:8e:71:38:e4:69:1f:
         d7:39:43:a0:bd:b0:db:e2:7f:ef:16:03:21:45:d7:19:d9:ac:
         0f:04:2f:bb:7a:21:3f:6b:c5:08:be:6a:f5:92:8e:cd:45:54:
         a5:86:a9:1d:1d:ab:b0:97:4f:1f:48:61:49:01:b9:12:de:8b:
         31:14:41:4d:3a:6d:f9:40:39:bf:f4:64:7f:cf:39:b8:94:1e:
         91:e6:35:d5:7a:73:3d:f3:86:d3:a7:f1:33:d5:4d:b7:51:4c:
         58:00:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:30 2024 by rpki-client on console-ams.rpki-client.org