Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
File:                     3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json)
Hash identifier:          bPZbNW9n/12E1UuRbj+fusihebqjga+0sBuhYmG1cKc=
Subject key identifier:   5A:42:13:1B:7A:20:0D:D2:33:A2:94:CB:0B:11:FA:1D:CD:1C:BC:71
Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
Certificate issuer:       /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Certificate serial:       01935688C18094860B85425F82ECB191277B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
Manifest number:          0256
Signing time:             Sat 23 Nov 2024 01:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:23 +0000
Files and hashes:         1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: U7KbbBkHJl6dTnK4PBPP3J9p4nIfJPnRsF5lfboN2mA=)
                          2: Ehw1V2m2Akf2RL0LiN-Xzea8FNk.roa (hash: byI+Dh4HHKVDDimoGFliszzn+aQAlsdc8qFFnkgtcN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c1:80:94:86:0b:85:42:5f:82:ec:b1:91:27:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
        Validity
            Not Before: Nov 23 01:00:23 2024 GMT
            Not After : Nov 24 01:00:23 2024 GMT
        Subject: CN=5a42131b7a200dd233a294cb0b11fa1dcd1cbc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:b9:d4:c1:78:83:ee:56:11:e3:82:70:bb:
                    9d:aa:ce:96:e6:c0:1e:df:05:2b:94:fe:78:8a:42:
                    11:3e:80:26:94:46:19:b4:6a:91:0f:64:92:ca:e3:
                    b8:fe:aa:1e:bd:db:6e:b7:e9:98:f8:20:5e:fe:d6:
                    5d:9d:9b:5d:74:f7:34:a0:ee:55:54:2a:92:a6:b1:
                    24:5c:3e:ac:f9:d7:53:a9:fa:3a:03:91:c5:8c:f7:
                    19:6f:ff:cc:cf:c0:1a:0f:7e:80:7e:8c:df:69:8a:
                    e9:4b:db:86:2b:8e:dc:20:e3:52:25:9d:97:90:4f:
                    66:07:84:af:f2:96:bd:4b:f8:c5:4b:48:eb:06:a7:
                    f4:89:bc:3a:21:c6:72:61:9e:b7:26:70:29:5f:3d:
                    63:3a:0d:f5:7d:d6:a2:d2:21:83:69:54:10:7d:16:
                    36:4c:aa:0b:f3:ad:f6:bf:9d:6b:27:2c:61:0e:80:
                    55:de:3e:68:6c:7b:80:bb:15:c9:de:ab:48:25:54:
                    05:9b:e8:1c:d6:44:24:e4:c7:f8:bc:67:f1:e4:d2:
                    bd:4d:b6:03:05:c5:5e:92:e0:4a:78:6a:69:97:8d:
                    2f:2a:2a:c5:e7:28:cb:f3:1e:63:2b:44:0d:c1:c1:
                    0c:a5:aa:1d:18:99:f4:5c:0b:4e:c7:a4:2d:50:19:
                    2c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:42:13:1B:7A:20:0D:D2:33:A2:94:CB:0B:11:FA:1D:CD:1C:BC:71
            X509v3 Authority Key Identifier:
                keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:65:4e:be:06:21:27:f1:4d:1b:85:20:28:52:69:e3:48:
         ab:23:20:e6:83:04:d3:d8:93:e1:28:95:d3:3e:6e:c5:ac:9e:
         01:ca:0a:6d:70:39:c1:10:9a:26:59:ab:c8:d4:54:6b:2d:2e:
         ab:46:e9:13:ed:53:f3:a6:7b:5f:cf:0d:92:62:87:a4:ad:bf:
         b3:d4:fb:92:a6:0a:96:8e:11:18:e0:6b:2d:1b:55:98:53:1d:
         b4:be:dc:d0:49:48:b0:1b:17:89:9c:a1:b4:6c:c1:b7:3d:22:
         bb:ce:7e:8d:1f:70:95:1e:63:aa:20:f4:08:f8:b2:2d:81:b1:
         b7:7c:3c:c5:40:47:10:cf:81:56:5a:5b:54:e1:1f:78:93:98:
         b3:05:83:26:44:6a:8d:19:67:68:f2:a8:49:f8:a7:26:2d:6f:
         ae:c8:06:0f:43:46:7e:1a:2b:4e:90:f1:b3:4d:fe:86:75:6c:
         a7:94:3f:95:4b:1a:b6:7d:e3:0d:7e:47:05:9e:57:9e:ae:e0:
         b9:85:68:20:85:8a:02:99:79:46:07:01:b5:fe:c3:38:9a:b8:
         be:a6:20:77:f0:77:75:5a:9a:50:d5:8d:85:9e:d7:cb:25:e7:
         12:26:e1:4c:53:c5:2b:62:cb:ec:2f:83:d4:ed:ab:87:13:b5:
         9a:b8:d8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:22 2024 by rpki-client on console-fra.rpki-client.org