Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
File:                     ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft (raw, json)
Hash identifier:          dLrBL2Es0kqfQZKvB5zqcVUMZMksm9ddAOhojXAunVM=
Subject key identifier:   DD:9D:EB:DC:25:68:9F:01:78:63:49:16:1C:95:D2:52:94:CF:7A:FB
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Certificate issuer:       /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial:       0193572DF1AC7E08163D8ED9C677F2D9E5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 04:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:48 +0000
Files and hashes:         1: 1NIBu1RauToeaCBWeHNdxq6cA_8.roa (hash: PfjiGG1NyZl3GitJ6dnhkBlwVLh4NFpUfJlvnU6vM04=)
                          2: ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl (hash: ji74vwzwL+lJi1NIZR6fiVMF+z5vXya3J3kJ6PWTVg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:f1:ac:7e:08:16:3d:8e:d9:c6:77:f2:d9:e5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
        Validity
            Not Before: Nov 23 04:00:48 2024 GMT
            Not After : Nov 24 04:00:48 2024 GMT
        Subject: CN=dd9debdc25689f01786349161c95d25294cf7afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:8d:c3:15:62:da:0c:44:f1:f6:fc:27:12:
                    6e:12:ac:17:4c:85:b2:f7:06:2e:a1:d8:a0:10:f5:
                    d9:6c:a6:2c:75:de:6a:6b:6a:cd:31:b4:ec:f4:14:
                    d5:36:b8:dc:ee:cc:b3:d8:46:7d:72:cb:2b:6d:76:
                    fa:db:ff:cb:2a:0a:73:f8:af:24:dc:fc:3f:f4:04:
                    4b:46:10:ba:f8:36:fd:a4:8d:ba:c3:72:ef:ff:c2:
                    aa:11:12:66:97:2a:7b:5d:a9:19:4c:02:5f:9b:b2:
                    ec:19:69:97:72:f1:4a:25:16:30:12:bb:f6:fa:66:
                    ed:ad:4d:ec:00:56:16:ea:a1:59:ac:a6:fb:16:62:
                    f7:e2:6a:d4:a7:ec:89:b8:05:2a:40:a3:93:62:ee:
                    3e:4c:88:31:1b:08:f2:0d:25:09:4e:61:a0:9d:5c:
                    74:a6:97:f5:e2:d9:19:71:18:23:e4:df:27:82:b1:
                    ce:ba:22:12:72:41:0c:cd:8b:4a:ec:d4:3b:2f:2f:
                    e0:c4:9f:e7:62:1e:b2:ca:6e:34:c3:fd:f5:8e:ba:
                    ee:97:3e:4a:60:d4:dc:aa:53:de:34:de:2c:a7:e4:
                    48:64:e4:94:cb:17:69:93:53:70:f8:70:90:59:61:
                    5b:ab:3f:0d:8d:55:3a:02:87:61:15:72:72:e6:d5:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9D:EB:DC:25:68:9F:01:78:63:49:16:1C:95:D2:52:94:CF:7A:FB
            X509v3 Authority Key Identifier:
                keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:de:79:15:d4:05:02:ac:87:2a:fd:9a:21:02:57:18:f5:18:
         ba:b5:7b:81:83:e3:27:0f:cb:31:67:57:f3:1c:7b:f5:22:37:
         51:2f:c2:e7:83:81:54:65:71:74:b9:5b:3e:6f:43:99:a6:a5:
         57:7f:d8:57:4c:7b:8d:fb:39:3d:88:d6:00:15:d8:cf:7d:51:
         22:d7:14:09:98:ec:57:1f:6f:5a:80:e2:e8:ea:aa:6e:12:fa:
         32:89:27:13:82:a2:f8:17:63:1f:61:b6:d7:8d:e1:10:a9:e1:
         aa:79:8d:79:e0:51:a2:d7:ea:a8:1d:34:3b:a7:3a:4c:2d:22:
         62:a5:21:8b:61:ba:12:53:08:55:4b:54:73:1e:b4:89:04:5c:
         b0:e5:4e:14:c1:ef:27:17:23:82:c5:43:04:f8:d7:a6:7a:00:
         d0:b7:da:c1:23:2a:2d:5d:05:35:e8:ba:cf:42:3e:74:ab:18:
         96:6d:4d:48:36:95:59:b3:0d:dd:ed:82:01:4c:2e:a3:17:f2:
         37:ad:88:6c:72:ce:f8:17:c4:93:36:64:df:1c:ce:fc:97:73:
         0c:5a:ac:0f:aa:9d:87:36:89:87:ba:f9:c1:14:1f:05:31:3a:
         bc:ae:66:d4:39:e9:eb:ff:47:82:72:7c:c6:84:2b:53:78:d9:
         08:11:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:19 2024 by rpki-client on console-fra.rpki-client.org